Privacy Policy

This Privacy Policy explains how Lessi LLC (“Lessi,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when people visit lessi.ai, contact us, sign up for trials or demos, use Lessi products, or receive services from us.

For school and district customers, this policy works together with the applicable customer agreement, data processing agreement, student data privacy addendum, or similar contract. If a signed agreement provides stronger or more specific protections for education records or student data, that agreement controls for that customer relationship.

We collect the information needed to operate Lessi, support educators, protect the service, and communicate with users and customers.

• Account and contact information: name, email address, organization, role, account credentials, subscription status, support requests, demo requests, and communication preferences.
• Educator-created content: prompts, instructional context, goals, accommodations, lesson materials, generated outputs, documents, notes, and other content a user chooses to enter, upload, generate, or store in Lessi.
• Student or education data: information a school, district, educator, or authorized user provides or generates in Lessi for educational purposes. This may include student learning context or other education records when authorized by the customer and applicable law.
• Website, device, and usage information: IP address, browser type, device information, pages visited, referring pages, approximate location from IP address, logs, cookie identifiers, and similar diagnostic or analytics data.
• Security and verification information: information used to prevent abuse, verify form submissions, authenticate users, and protect Lessi services.

Users should provide only the student information they are authorized to provide and only the information reasonably needed for the educational task.

We use information for the following purposes:

• Provide, operate, maintain, and improve Lessi products and services.
• Create and manage accounts, trials, subscriptions, customer relationships, and support requests.
• Generate requested educational content, lesson materials, scaffolds, progress-support materials, and other user-directed outputs.
• Communicate about accounts, product updates, security notices, support, events, and service-related information.
• Protect the security, availability, integrity, and lawful use of our services.
• Analyze website and product usage to improve reliability, accessibility, user experience, and product quality.
• Comply with legal, contractual, tax, accounting, security, and regulatory obligations.

We do not sell student data. We do not use student data for targeted advertising. We do not use customer-provided student or teacher interaction data to train, fine-tune, or improve large language models.

Lessi uses AI to support educator-directed workflows. AI-generated outputs are intended to support educators and administrators, who remain responsible for reviewing, validating, and applying outputs in the appropriate educational context.

Student and teacher interaction data submitted to AI-enabled features is processed to generate the requested output and is not used to train, fine-tune, or improve any large language model. Lessi’s service environment and AI processing are hosted in United States-based Microsoft Azure infrastructure with customer data isolation and security controls described in our AI Data Privacy and Responsible Use Policy.

When Lessi provides services to a school, district, or other educational institution, we process student data as a service provider and, where applicable, as a school official under FERPA. We use student data only to provide and support the contracted services, to maintain security, to comply with applicable law, and as otherwise directed or authorized by the customer agreement.

To the extent required by applicable law and customer agreements:

• Educational data remains the property of the customer and/or its students and is not Lessi’s property.
• Lessi uses educational data solely to perform the services and does not sell, share, or disclose it except as permitted by law, the customer agreement, or a valid assignment of the agreement.
• Lessi does not use educational data for commercial purposes such as marketing or advertising, except that deidentified or aggregate data may be used when permitted by law.
• Lessi implements reasonable administrative, technical, and physical safeguards and limits access to authorized personnel with a need to know.
• Upon expiration or termination of the applicable agreement, Lessi returns or destroys educational data as required by applicable law and contract terms.

For Minnesota public educational agencies and other Minnesota government-entity customers, Lessi handles applicable government data and educational data in accordance with the Minnesota Government Data Practices Act, Minn. Stat. Ch. 13, including Minn. Stat. § 13.32, subd. 13, and applicable breach-notice obligations under Minn. Stat. § 13.055.

We disclose information only as needed for the purposes described in this policy and our agreements.

• Service providers: vendors that help us host, secure, analyze, support, communicate, process forms, and operate Lessi. These providers are authorized to use information only to provide services to us and are subject to contractual or legal obligations.
• School and district customers: administrators or authorized customer representatives may access information associated with their accounts, users, or contracted services as permitted by the customer agreement.
• Microsoft Azure infrastructure: Lessi’s service environment, AI processing, and platform operations run on Microsoft Azure services under applicable security and privacy controls.
• Legal, safety, and compliance: we may disclose information when required by law, subpoena, court order, government request, or to protect rights, safety, security, or service integrity.
• Business transfers: information may be transferred in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to applicable law and contractual restrictions for student data.

If Lessi receives a request for government data or education records controlled by a customer, Lessi will notify the customer as required by applicable agreement or law and reasonably cooperate. The customer is responsible for determining the response when the data is under the customer’s control.

Our website uses necessary cookies and similar technologies to operate the site, remember preferences, protect forms, and maintain security. With consent where required, we use PostHog cookies and similar analytics technologies to understand how visitors use the website and improve content and product experiences.

Forms on our website may use HubSpot to process submissions and Google reCAPTCHA Enterprise to help prevent spam and abuse. Analytics and cookie preferences, including PostHog analytics cookies, can be managed through our cookie banner where available, or through browser settings.

Lessi uses administrative, technical, and physical safeguards designed to protect information from unauthorized access, disclosure, alteration, and destruction. These safeguards include encryption in transit and at rest, access controls, auditability, and security monitoring appropriate to the nature of the data and services.

Lessi’s production environment is hosted in Microsoft Azure. Microsoft publishes information about Azure security practices and controls through the Microsoft Trust Center security documentation.

No online service can guarantee absolute security. Users should protect account credentials, use authorized devices and networks, and promptly notify us of suspected unauthorized access.

We retain personal information and customer data only for as long as needed to provide the services, maintain security, resolve disputes, comply with legal obligations, and meet contractual requirements.

For school and district services, deletion, return, and retention of student data are handled under the applicable customer agreement, data processing agreement, and law. Lessi supports customer-directed deletion or return of student data in accordance with those requirements.

Depending on your location and relationship with Lessi, you may have rights to request access, correction, deletion, portability, objection, restriction, withdrawal of consent, or appeal of a privacy decision. You may also unsubscribe from marketing emails using the unsubscribe link in those emails.

Requests involving student education records should generally be directed to the applicable school or district, because the educational institution typically controls those records. Lessi will support the customer in responding to authorized requests as required by law and contract.

To make a privacy request, contact privacy@lessi.ai. We may need to verify your identity or authority before fulfilling a request.

Lessi services are intended for educators, schools, districts, and authorized education users. We do not knowingly collect personal information directly from children for marketing purposes. Student data is provided or generated through authorized educational use and is handled under applicable education privacy laws and customer agreements.

Lessi is based in the United States. Our service environment, AI processing, and customer data processing described in our AI policy are designed to occur within United States-based Microsoft Azure infrastructure. If information is accessed or processed from another location, we use safeguards appropriate to the data and applicable law.

We may update this Privacy Policy from time to time. When we make material changes, we will update the date above and provide notice when required by law or contract.

Questions about this Privacy Policy or Lessi privacy practices can be sent to privacy@lessi.ai. Questions about AI privacy and compliance may also be sent to compliance@lessi.ai.