Privacy Policy

1. Introduction

sixlens ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI readiness assessment platform. sixlens is used by K-12 school districts and by colleges and universities; this policy applies to both.

2. Information We Collect

Personal Information

We may collect personal information that you voluntarily provide, including:

• Name and email address
• Institution affiliation and role
• Department and job title
• Survey responses and feedback

Automatically Collected Information

When you access our Service, we may automatically collect certain information, including:

• Device and browser information
• IP address and location data
• Usage patterns and preferences

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our Service
• Generate AI readiness assessments and reports
• Improve and personalize your experience
• Communicate with you about updates and support
• Analyze usage patterns to enhance our Service
• Comply with legal obligations

4. Student Records and FERPA

Your institution decides who is invited to respond to a survey. Where those respondents include students, the responses may be education records under the Family Educational Rights and Privacy Act (FERPA).

We do not assert that we are a "school official" with a legitimate educational interest. That designation is your institution's to make and to record in its annual notification, and we will sign a data processing agreement supporting it on request. What we can tell you is factual: we use response data only to produce the analysis you asked for, we do not sell it, we do not use it to train models, and it is isolated per institution by row-level access control.

sixlens holds no third-party security or privacy certification. We would rather say so than imply one. See our data handling and subprocessor list for exactly where your data goes.

5. AI Processing

Producing your report means sending survey data to an AI provider outside our platform. This is the part most worth reading carefully.

• Survey responses — including the free text people write in their own words — are sent to Anthropic, which runs the analysis.
• Names and email addresses are not sent with them.
• Also sent: your institution's name and type, and the category scores calculated from the responses.
• Because free text can identify its author by what it says, treat a survey the way you would treat any open comment box in your organization.

Every third party that receives data from us is listed, with what each one gets, on our data handling page.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit and at rest
• Row-level security (RLS) for data access control
• Regular security audits and vulnerability assessments
• Secure authentication and authorization protocols
• Employee training on data protection practices

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Audit data is retained according to agreements with your institution.

8. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access and portability. Download everything we hold about you as a file, from Settings in your account.
• Deletion. Delete your account from Settings. This removes your account, your name and email, your notifications, your support messages and any invitation sent to you. The answers you gave in a survey stay part of your institution's audit — removing them would change scores it has already reported — but nothing records that they were yours.
• Correction. You can edit your own profile in Settings. To correct anything else, write to us and a person will do it.

If your account has already been closed, or you would rather we did this for you, ask through the support page and we will action it.

9. Third-Party Services

We use a small number of third parties to run the product: Anthropic for the AI analysis, Supabase for the database and authentication, Vercel for hosting, and Resend for email. Our data handling page lists every one of them and states exactly what each receives.

The site also contains links to other websites. We are not responsible for their privacy practices, and no data is sent to them by following a link.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us through our support page.