KreditVerse is a third-party contractor under Education Law § 2-d and 8 NYCRR Part 121. It signed the Nassau BOCES Data Security and Privacy Standards Agreement and signs the same commitments with each participating district.
Paperwork ready
KreditVerse signs your Parents’ Bill of Rights, provides Supplemental Information within 10 days, and submits a Data Security and Privacy Plan aligned to NIST CSF 2.0.
Purpose limited
Student PII is used only to run accounts, deliver lessons, record progress and report outcomes. KreditVerse claims no ownership of it.
Minimal data
No student email, phone, date of birth, home address, photos, biometric or location data is collected.
Protected
Encryption in transit and at rest, including backups. U.S. data centers. Role-based access, MFA for administrators, activity logging.
Your approval
AI tutoring, voice capture and SSO stay off until your district approves them in writing.
Accountable
KreditVerse notifies the district in writing within seven days of a breach, cooperates with any investigation and reimburses required notifications.
Bound partners
Any subcontractor touching PII signs an agreement no less protective than yours, is reviewed yearly and gives 30 days’ notice before changes.
Clean exit
At contract end, data is returned in an agreed format, then securely deleted per NIST SP 800-88, with written certification.
| Category | Collected | Not collected |
|---|---|---|
| Student account | Instructor-assigned username, school, class | Home address, phone, personal email, SSN, date of birth, photos, biometric or location data |
| Learning records | Lesson progress, quiz and assessment results, time in program | Grades from other systems; disciplinary, health or special education records |
| Instructors and administrators | Name, school email, role | APPR data |
| Voice (only if enabled) | Spoken questions, processed to answer them | Voiceprints or biometric identifiers |
Want the full security plan or an audit under your agreement? Email support@kreditverse.ai.
Licenses are annual, per learner, for the term on your order, with no automatic long-term commitment. Renew before term end to keep your rate; tutors, content and reports carry forward.
Purchased by an adult; under-18 learners use a parent or guardian’s account. Monthly plans renew until canceled; annual plans cover 12 months. Cards by Stripe; pay-over-time by Affirm.
Yes. KreditVerse submits a Data Security and Privacy Plan aligned to NIST CSF 2.0 with each district agreement.
In U.S. data centers only, encrypted in transit and at rest, including backups.
Only staff whose role requires it, under role-based access with MFA and activity logging.
No. Student data is never used to train AI models, never sold and never used for advertising.
They stay off until your district approves them in writing. Voice is processed only to answer the question; no voiceprints are created.
Staff with access to student data complete annual data privacy and security training.
KreditVerse notifies the district in writing within seven days, cooperates with the investigation and reimburses required notification costs.
Parents follow the district’s Parents’ Bill of Rights process; KreditVerse corrects records at the district’s direction.
Data is returned in an agreed format, then securely deleted per NIST SP 800-88, with written certification.
