← Institutional Procurement
Data Governance · AESOP AI Academy

Data Retention & Disposal Policy

What data we collect, how long we keep it, how we archive it, and how it is securely and permanently deleted.

Version: 1.0.0 Effective: April 23, 2026 Reviewed by: Scott Schindler, CISSP

What We Collect

AESOP AI Academy collects only the minimum data necessary to deliver educational services. The following categories describe what we may hold:

Data TypeExamplesCollected From
Account / IdentityName, email address, organization nameRegistration form
Educator Learning DataCourse progress, module completion, quiz scores — for registered educator-users taking our courses (not K–12 student records)Platform activity
Usage AnalyticsPage views, session duration, feature interactionsFirebase Analytics (anonymized)
CommunicationsSupport tickets, email correspondenceSupport channels
Financial / TransactionInstitutional invoice recordsBilling system
We Do Not Collect Social Security numbers, government IDs, financial account numbers, health records, biometric data, or any sensitive personal information not required to deliver educational services.

Retention Schedule

Data is retained for the shortest period necessary to fulfill its purpose, meet legal obligations, and support legitimate educational outcomes.

Data TypeActive RetentionAfter Account DeletionNotes
Account / IdentityWhile account is active30-day recovery window, then permanently purged
Learning ProgressWhile account is active30-day recovery window, then permanently purged
Data from users under 13Not applicableNot applicablePlatform is designed for adult educators — we do not collect data from users under 13
Analytics (anonymized)24 months rollingN/A — no PII present in analytics
Support communications36 months36 months from creation dateQuality & audit purposes
Financial records7 years7 years from transaction dateIRS / tax compliance

Archiving

AESOP AI Academy does not maintain long-term archives of personally identifiable information. We do not export PII to cold storage, third-party archiving services, or backup tapes that persist beyond the retention windows above.

Aggregated, anonymized learning analytics may be retained indefinitely for platform improvement purposes. No individual can be identified from these aggregates.

Disposal Method

When data reaches its retention limit or a deletion request is fulfilled:

No Data Brokering AESOP AI Academy does not participate in data brokering, behavioral advertising networks, or any commercial arrangement that involves sharing learner data with third parties for non-educational purposes.

Institutional Deployments (Districts & Organizations)

AESOP AI Academy does not collect K–12 student data. When a school district, government agency, or other institution deploys our platform for educator professional development:

Service Agreement for Institutional Deployments We provide a Service Agreement covering educator-user data, usage terms, and accountability commitments. Contact: partnerships@aesopacademy.org

Individual Deletion Requests

Individual users may request deletion of all personal data associated with their account at any time. Requests are fulfilled within 30 days.

To submit a deletion request: privacy@aesopacademy.org

For users under 13, a parent or guardian must submit the request. Identity verification may be required.

Policy Updates

This policy is reviewed annually or when material changes occur to our data practices. Institutional partners will be notified of material changes with at least 30 days' notice.