1. We collect only what is needed

Atlas should only collect information required to provide, secure, improve, and support the learning platform.

This may include:

account information,

school or institution information,

student and teacher details,

course enrolment information,

assignments and submissions,

grades and feedback,

attendance records,

communication data,

platform usage data,

AI interaction data where AI features are used.

We do not believe education platforms should collect unnecessary personal data.

2. Schools remain in control of school data

Atlas is designed for institutional use.

In most cases, the school or institution decides:

which users are added,

which students are enrolled,

which courses are created,

which teachers have access,

how academic rules are configured,

how student records are managed.

Atlas provides the technology platform, but the school controls its educational data and how it is used within the institution.

3. Student data is treated with extra care

Student data deserves stronger protection because it may involve young learners, academic records, performance information, and personal educational history.

Atlas does not treat student data as advertising data.

Atlas does not sell student personal information.

Atlas does not use student data to build advertising profiles.

Student data is used to provide learning services, support academic progress, improve platform functionality, and help schools manage education responsibly.

4. AI must be transparent and responsible

Atlas includes AI features through Horizën AI to support learning and teaching.

Horizën AI may help with:

explaining academic content,

summarizing notes,

generating quizzes,

helping students manage deadlines,

assisting teachers with feedback,

supporting academic analytics,

helping identify students who may need support.

However, AI should not secretly replace human academic judgment.

For sensitive academic decisions, such as grading written work, Atlas is designed so that AI can assist, but the teacher or authorized school staff should make the final decision.

5. We protect data with security controls

Atlas is designed to protect user data through appropriate technical and organizational measures.

These may include:

user authentication,

role-based access control,

institution-level data separation,

encrypted connections,

secure storage practices,

audit logs,

backups,

restricted administrative access,

monitoring for suspicious activity.

Our goal is to make sure users only access the data they are allowed to access.

For example:

students should only access their own courses and records,

teachers should only access assigned courses and class groups,

school admins should only manage their own institution,

Atlas super admins should only access data when required for platform operation, support, security, or legal compliance.

6. We are clear about third-party service providers

Atlas may use trusted third-party providers to operate the platform.

These providers may support services such as:

cloud hosting,

database storage,

authentication,

email delivery,

file storage,

video conferencing,

AI processing,

analytics,

security monitoring.

Where third-party providers are used, Atlas aims to choose providers that support appropriate security and privacy standards.

Atlas will maintain a Subprocessors page to explain which third-party providers may process data on behalf of Atlas.

7. We support data access, correction, and deletion requests

Schools, users, parents, or guardians may need to request access to data, correction of inaccurate information, or deletion of information.

Because Atlas is used by schools, many student-related requests should first go through the school or institution that manages the student account.

Atlas will support schools in handling reasonable data access, correction, export, and deletion requests, subject to legal, academic, security, and operational requirements.

8. We keep data only as long as needed

Atlas does not aim to keep personal data forever.

Data may be retained for as long as needed to:

provide the platform,

support schools,

maintain academic records,

meet legal or contractual obligations,

resolve disputes,

prevent fraud or misuse,

maintain security and audit logs.

When data is no longer needed, Atlas aims to delete, anonymize, or securely retain it according to applicable retention rules and institutional requirements.

9. We prepare for security incidents

No digital platform can guarantee that security incidents will never happen.

Atlas is designed to reduce risk, detect suspicious activity, and respond responsibly if an incident occurs.

If a data incident affects school or user information, Atlas will work to:

investigate the issue,

contain the incident,

assess affected data,

notify affected institutions where required,

support appropriate corrective action,

improve safeguards to reduce future risk.

More details are provided in our Incident/Breach Notification and Security Incident Response documents.

How Atlas Uses Data

Atlas uses data to provide and improve the learning platform.

This may include:

creating and managing user accounts,

enabling login and access control,

displaying courses and class groups,

allowing teachers to upload content,

allowing students to submit assignments,

supporting assessments and grading,

calculating academic performance,

tracking attendance,

sending notifications and reminders,

supporting live classes,

providing AI learning assistance,

generating academic insights,

preventing misuse,

improving system performance,

providing customer support.

Atlas does not use school data for unrelated commercial exploitation.

Our Approach to AI Data

When users interact with Horizën AI, certain information may be processed to provide AI responses.

For example, Horizën AI may process:

a student’s question,

course content selected by the teacher,

assignment instructions,

uploaded learning materials,

study prompts,

assessment rubrics,

teacher feedback instructions.

Atlas aims to limit AI processing to what is needed for the requested feature.

Atlas should not use school or student content to train external AI models unless the school has clearly agreed to that in writing.

AI features should be designed to support education, not replace teachers, school leadership, or academic responsibility.

Institution-Level Data Separation

Atlas is designed as a multi-institution platform.

This means many schools may use Atlas, but each institution’s data should remain separated.

For example:

School A should not see School B’s students,

teachers should not access courses they are not assigned to,

students should not access another student’s private academic records,

school admins should only manage their own institution.

This institution-level separation is a core part of Atlas’ privacy and security design.

Our Responsibility

VisionX, as the developer and operator of Atlas, is responsible for building and maintaining privacy-conscious systems.

This includes:

designing privacy into the platform,

protecting user data,

being transparent about data practices,

supporting schools with data protection requests,

reviewing AI features carefully,

maintaining appropriate security controls,

improving privacy practices as Atlas grows.

Schools’ Responsibility

Schools and institutions using Atlas also have responsibilities.

Schools should:

create accounts only for authorized users,

assign correct roles and permissions,

keep student information accurate,

train staff on responsible use,

manage parental/student requests appropriately,

avoid uploading unnecessary sensitive data,

configure AI and assessment features responsibly,

notify Atlas if they suspect misuse or unauthorized access.

Privacy is strongest when Atlas and the institution work together.

Continuous Improvement

Atlas is still growing, and our privacy approach will continue to develop as the platform expands.

As Atlas adds new features, such as AI grading assistance, live classes, parent dashboards, advanced analytics, and integrations, VisionX will continue updating privacy practices, security controls, and user-facing policies.

Our goal is to build Atlas into a trusted education platform where schools can confidently manage learning, students can receive support, and teachers can work more effectively.

Simple Closing Statement

Atlas believes that privacy is not just a legal requirement. It is part of trust.

Schools trust Atlas with their learning environment. Students trust Atlas with their academic journey. Teachers trust Atlas with their teaching work.

That trust must be earned through responsible data practices, transparent AI use, strong security, and respect for the people behind the data.