Privacy Policy
This policy explains what information we collect, how we use it, and the rights you have over your information. Your privacy and security are our priorities.
Last updated August 20, 2026
Introduction
University AI provides an AI-powered campus companion to universities under a B2B SaaS license. This policy explains what information we collect, how we use it, and the rights you have over your information. Special protections apply to FERPA-covered education records.
Who this applies to
- Students whose universities have licensed CampusAI
- University staff who use CampusAI in their professional capacity
- Visitors to public CampusAI properties
Information we collect
- Account information — name, university email, role; for students this comes from the university's IdP via SSO
- Conversation content — messages sent to the assistant; stored in a tenant-isolated database
- Profile and preferences — collected through onboarding and refined through use
- Academic and career artifacts uploaded by the user (resumes, transcripts, applications) — treated as restricted FERPA-covered data when applicable
- Operational telemetry — pages visited, features used, errors
- Device and network — browser type, IP address (for security and abuse prevention)
How we use information
- Deliver the product
- Improve the product (aggregated, de-identified analytics)
- Ensure security
- Respond to support requests
University AI does not use conversation content to train foundation models, does not sell personal information, and does not share personal information for advertising.
Sharing
We share information only with:
- The customer university (the tenant administrator) under contract
- A small set of vetted sub-processors, under contract, solely to operate and secure the service
- Authorities, where compelled by valid legal process
Retention
Restricted (FERPA education-record) data is retained for the term of the tenant contract and deleted within 30 days of tenant off-boarding or a verified deletion request, subject to FERPA and institutional obligations. Operational telemetry is retained on a limited basis (see the Data Management Policy).
Your rights
Access, correction, deletion, and portability per applicable law. Contact privacy@campusai.app. We respond within 30 days, subject to applicable law and the customer contract.
Security
University AI completed an independent SOC 2 Type 1 (Security) examination in July 2026, performed by Prescient Assurance LLC. A SOC 2 Type 2 observation period is underway. Commitments include four-layer tenant isolation, encryption in transit (TLS 1.2+) and at rest (AWS KMS), least-privilege access control, and continuous vulnerability scanning of shipped images.
Children
CampusAI is not directed to children under 13. Where a tenant university enrolls users under 13, the university is the data controller.
International
Data resides in us-east-1 (United States).
Contact
Approved by Aiden Polinsky, Founder & CEO
UniversityAI, Inc.