Student Privacy

Olto Discovery for Education is a school-controlled science learning environment owned and operated by Velora Biotech LLC. This page explains, in plain language, how we handle student and educator information and the commitments we make to schools, teachers, and families.

The education portal is built so that schools (not individuals) control the workspace. Educators register and are verified before they can create classes; students participate only inside a teacher-managed class. We do not offer public student self-registration, and we do not create public student profiles. Student work stays inside the school workspace unless a teacher explicitly approves sharing.

We collect the minimum information needed to operate the classroom experience: an educator’s name, school-affiliated email, and institution; the classes, assignments, and rubrics a teacher creates; and the student submissions, reflections, and AI-assisted planning produced within a class. We do not require or request more than is necessary for the educational purpose.

The Family Educational Rights and Privacy Act (FERPA) protects the privacy of student education records. Where Olto Discovery for Education processes student records on behalf of a school, we intend to operate as a “school official” with a legitimate educational interest, under the direction and control of the school, and to use student data only for the educational purposes the school authorizes.

We are actively preparing for a FERPA certification review. We have not completed that review, and we do not claim to be FERPA-certified. As we complete pilot deployments we will publish data-handling documentation and a model agreement that schools can review with their counsel.

The Children’s Online Privacy Protection Act (COPPA) governs the online collection of personal information from children under 13. Olto Discovery for Education is designed for educator-directed use: there is no public student self-registration and no under-13 public accounts. Where a class includes students under 13, the participating school acts as the agent for parental consent under the COPPA school-consent framework, and Velora Biotech LLC collects and uses the limited student information solely to provide the educational service the school requests.

We are preparing for a COPPA certification review and do not claim to be COPPA-certified. Student data is never used for advertising or third-party marketing, and student-marketing email is disabled by default.

California’s Student Online Personal Information Protection Act (SOPIPA) and related California student-privacy laws restrict how K-12 student information may be used. Olto Discovery for Education is designed to align with these principles: we do not sell student information, we do not use it to target advertising, and we do not build advertising or commercial profiles of students.

We are preparing for a California Student Privacy certification review and do not claim to be certified. We will make our California-specific commitments available to participating California districts before pilot launch.

The Association of Technology Leaders in Independent Schools (ATLIS) promotes responsible vendor data-privacy practices for schools. We are preparing for an ATLIS certification review and following ATLIS guidance as we build the education portal. We do not claim ATLIS certification; this is a statement of certification readiness, not a completed certification.

Educators and students can use AI assistants for classroom-safe research planning, hypothesis and rubric support, reflection coaching, and similar learning tasks. Every AI assistant is configured to encourage teacher oversight and to refuse dangerous content; higher-risk topics (for example human-subjects work, medical diagnosis or treatment, or hazardous chemistry) are routed for required teacher review before a student protocol can be treated as runnable.

We do not use school or student data to train Olto-owned or public AI models without the school’s explicit permission. AI training on student data is disabled by default. Education AI runs are metered and recorded against the school workspace so that teachers and administrators have an auditable record of how the assistants were used. Prompts submitted for AI processing are sent to our AI inference partner solely to produce the response, and are handled under that partner’s applicable API terms.

Olto Discovery for Education relies on a small set of infrastructure and inference providers acting as data processors on our behalf (for database, authentication, file storage, application hosting, payment processing, and AI inference). A complete, education-specific subprocessor list (naming each provider and its purpose) will be published before pilot launch so that schools can review it during procurement.

We retain student and class data while a class is active and while it is needed to provide the educational service the school has requested. When a school or teacher deletes a class, assignment, or submission, the corresponding records are removed from active systems within a reasonable period; encrypted backups may persist until they are overwritten by the normal backup rotation.

Security and audit logs of education activity are retained on a bounded schedule and then automatically purged. A school may request deletion or export of the records associated with its workspace by contacting us using the address below; we will respond within the timeframes required by applicable law.

These commitments apply to all student and educator data in the education portal:

• We do not sell student or educator data, ever.
• We do not use student data for advertising or ad targeting.
• We do not create public student profiles or publish student work without approval.
• Workspaces are school-controlled: schools and teachers govern who participates and what is shared.
• Public sharing is off by default; a teacher must explicitly approve before any student work can be shared.
• AI training on school or student data is off by default and never occurs without the school’s explicit permission.
• Student-marketing email is disabled by default.

Schools, districts, parents, and guardians can reach our privacy team for access, correction, deletion, export, or any other student-privacy request at privacy@oltodiscovery.com. You can also reach us through our contact page. We will route school privacy requests to the appropriate team and respond as required by applicable law.