Privacy Policy

1. Overview

Guardeli Inc. (“Guardeli,” “we,” “our,” or “us”) operates the guardeli.com website and the Phantom classroom monitoring platform, including phantom.guardeli.com (collectively, the “Services”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Services.

2. Information We Collect

2.1 Information you provide directly

• Account registration: email address, name, school or district name
• Demo requests: email address, name, school/district, role
• Support inquiries: message content, device information you provide
• Investor inquiries: name, email, firm name, message content

2.2 Information collected automatically from the Phantom Chrome extension

When the Phantom Chrome extension is installed on a student Chromebook and a monitoring session is active, it collects and transmits the following data:

• Screenshots of the active browser tab (JPEG, captured at regular intervals)
• Open browser tabs (URL, title, active state)
• Google Drive file activity (document titles, word/page/slide counts — when Drive tabs are open)
• Device identifier (anonymous UUID generated on install)

This data is only captured during active monitoring sessions initiated by a teacher. No data is collected when students are not in an active session. Screenshot data is transmitted in real-time and is not stored on Guardeli servers beyond the active session.

2.3 Usage data

We may collect anonymised, aggregated usage statistics about how the dashboard is used (page views, feature usage frequency). We do not use third-party advertising trackers.

3. How We Use Your Information

• To provide, operate, and improve the Services
• To enable real-time classroom monitoring between teachers and students
• To send transactional emails (account confirmation, support replies)
• To respond to support and demo requests
• To detect and prevent security incidents or abuse
• To comply with legal obligations, including CIPA and COPPA

We do not sell your personal data or student data. We do not use student monitoring data for advertising, profiling, or any purpose other than providing the Services.

4. Student Data and FERPA

Guardeli acts as a “school official” under FERPA when processing student data on behalf of a school or district. We only use student data to provide the Services and do not disclose student data to third parties except as necessary to provide the Services (e.g., cloud infrastructure providers). Districts maintain ownership of all student data.

5. Data Sharing and Disclosure

We share information only in the following circumstances:

• Service providers: Supabase (database), Cloudflare (hosting and CDN, Durable Objects for WebSocket relay). These providers process data solely to provide services to us.
• Legal requirements: We may disclose information if required by law, court order, or government authority.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred with appropriate notice.

6. Data Security

We implement industry-standard security measures including TLS encryption for all data in transit (including WebSocket connections and screenshot data), row-level security in our database ensuring each district can only access their own data, and role-based access controls within the dashboard.

7. Data Retention

Screenshots are transmitted in real-time and are not persisted after the monitoring session ends. Account data is retained for the duration of the subscription plus 90 days after cancellation. Session metadata (student names, tab histories) is retained per district configuration.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing activities
• Receive your data in a portable format

To exercise any of these rights, email us at privacy@guardeli.com. We will respond within 30 days.

9. Children's Privacy (COPPA)

The Phantom Chrome extension is deployed by schools and districts on student devices. We do not collect personal information directly from children under 13. Schools and districts provide the necessary consent under COPPA for the collection of student data through the Services. We collect only the minimum data necessary to provide classroom monitoring functionality.

10. Disclaimer and Limitation of Liability

To the maximum extent permitted by applicable law, Guardeli shall not be liable for any unauthorised access to, alteration of, or loss of your data or any data transmitted through the Services, including student data. Guardeli disclaims all liability for any failure of the Services to capture, report, or prevent any student activity, and for any harm, injury, or damage arising from reliance on the Services for student safety or monitoring. The Services are not a substitute for direct supervision. In no event shall Guardeli, its affiliates, officers, directors, employees, or agents be liable for any direct, indirect, incidental, special, consequential, or punitive damages arising from or related to your use of the Services or any data breach, regardless of the cause or theory of liability. Your sole remedy for dissatisfaction with the Services is to stop using them.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users by email and update the “Last updated” date. Continued use of the Services after changes constitutes acceptance of the updated policy.

12. Contact

For privacy-related inquiries, contact us at: privacy@guardeli.com
Guardeli Inc., United States