# Privacy Policy for Score At The Top - Session Notes Extension

**Last Updated:** [Current Date]

## Introduction

This Privacy Policy describes how the Score At The Top - Session Notes Chrome Extension ("Extension", "we", "us", or "our") collects, uses, and protects information when you use our service. This Extension is designed exclusively for Score At The Top Learning Centers staff members.

## Information We Collect

### 1. Google Account Information
When you sign in with Google, we collect:
- Your name
- Your email address (must be @score-academy.com domain)
- Your profile picture (if available)
- Google OAuth authentication tokens

### 2. Session Notes Data
- Student names you enter
- Subject/course information
- Session notes content
- AI evaluation results and improved notes

### 3. Usage Data
- Number of AI evaluations performed per day (for rate limiting)
- Authentication timestamps
- Extension usage patterns

## How We Use Your Information

### 1. Authentication and Access Control
- Verify you are authorized Score At The Top staff (@score-academy.com domain)
- Maintain secure login sessions for up to 24 hours
- Provide personalized user experience

### 2. Core Functionality
- Process and format session notes
- Provide AI-powered evaluation and improvement suggestions
- Store usage data for rate limiting (50 evaluations per day per user)

### 3. AI Processing
- Send session notes to OpenAI's GPT-4 API for evaluation and improvement
- Process AI responses to provide structured feedback

## Data Storage and Security

### 1. Local Storage
- Authentication data is stored locally in your browser
- Session notes are temporarily stored locally during processing
- Usage counters are stored locally for rate limiting

### 2. Third-Party Services
- **Google OAuth:** Used for authentication only
- **OpenAI API:** Session notes are sent for AI processing but are not stored by OpenAI beyond their standard processing requirements

### 3. Security Measures
- All API keys are encrypted using AES-256-GCM encryption
- OAuth tokens are managed securely through Chrome's identity API
- No session notes are permanently stored on our servers

## Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except:

### 1. Service Providers
- **Google:** For authentication services
- **OpenAI:** For AI evaluation services (session notes only, no personal identifiers)

### 2. Legal Requirements
We may disclose information if required by law or to protect our rights, property, or safety.

## Data Retention

### 1. Authentication Data
- Stored locally for up to 24 hours
- Automatically cleared after session expiration or logout

### 2. Session Notes
- Not permanently stored
- Temporarily processed for AI evaluation
- Cleared when you close the extension or sign out

### 3. Usage Data
- Daily usage counters reset every 24 hours
- No long-term usage tracking

## Your Rights and Choices

### 1. Access and Control
- You can sign out at any time to clear all stored data
- You can view all locally stored data through your browser's developer tools

### 2. Data Deletion
- All local data is automatically deleted when you sign out
- You can manually clear extension data through Chrome's extension settings

## Third-Party Services

### 1. Google OAuth
- Subject to Google's Privacy Policy: https://policies.google.com/privacy
- We only access basic profile information and email

### 2. OpenAI API
- Subject to OpenAI's Privacy Policy: https://openai.com/privacy/
- Session notes are processed but not permanently stored

## Children's Privacy

This Extension is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children under 18.

## International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States where OpenAI's servers are located.

## Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify users of any material changes through the Extension or other appropriate means.

## Contact Information

If you have questions about this Privacy Policy or our data practices, please contact:

**Score At The Top Learning Centers**
- Phone: (844) 438-1600
- Website: www.scoreatthietop.com
- Email: [Contact Email]

## Compliance

This Extension and its data practices comply with:
- Chrome Web Store Developer Program Policies
- Google OAuth 2.0 Security Requirements
- General Data Protection Regulation (GDPR) principles
- California Consumer Privacy Act (CCPA) requirements

## Technical Implementation

### Data Minimization
We collect only the minimum data necessary for the Extension to function.

### Encryption
All sensitive data is encrypted using industry-standard encryption methods.

### Access Control
Access is restricted to authorized Score At The Top staff only.

---

*This privacy policy is specifically designed for the Score At The Top - Session Notes Chrome Extension and applies only to data collected and processed through this Extension.*