Privacy Policy

Effective Date: July 1, 2026

1. Who we are

obzervai.com is operated by Cosmos89 LLC, based in Stamford, Connecticut. We provide AI assisted classroom observation and reporting tools to educators and educational organizations.

2. Our role, and when a district agreement controls

For individual educators who sign up directly, we are the controller of the account information described below.

For schools and districts, we act on the organization's instructions as its service provider and processor. Where a school, district, or employer has signed a data privacy agreement with us, that agreement controls over this policy wherever the two conflict. We do not claim any special legal status except as a signed agreement with the educational organization grants it.

3. Information we collect

Account information. Name, work email address, phone number, school or district name, job title, and login credentials.

Content you enter. Observation notes, evidence you record, generated reports, framework selections, and report history.

Evaluation related information. Observation and report content may identify a teacher or principal and may relate to their professional performance review. In New York this category is regulated. See section 8.

Student information. We ask users to minimize student personally identifiable information. Where a district instructs us to process student information under a signed agreement, we do so only as that agreement permits. We never build profiles of students, never show ads to students, never sell student information, and never try to re-identify information that has been de-identified.

Technical information. Log data such as IP address, browser type, timestamps, and error diagnostics, used for security, abuse prevention, and troubleshooting. We do not use analytics or advertising cookies today. We use only the cookies needed to sign in and keep the service secure. If we add website analytics later, we will update this policy before we do. We treat a Global Privacy Control signal from your browser as an opt out request where state law requires it.

4. How we use information

• Provide, secure, and support the service.
• Generate report drafts from the content you enter.
• Verify accounts.
• Invoice schools and districts.
• Send transactional messages, and marketing messages where you have opted in.
• Diagnose problems, prevent abuse, and improve the service using aggregated and de-identified information.

We do not sell personal information. We do not share personal information for cross context behavioral advertising. We do not use customer content to train artificial intelligence models, and our AI provider is contractually prohibited from training on it.

5. Service providers we use

We use the following subprocessors, all processing in the United States:

Provider	Purpose	Location
Microsoft Azure	Application hosting, database, storage	United States
Anthropic	AI report generation	United States
Microsoft Azure Communication Services	Transactional and notification email	United States

Each provider is bound by a written agreement limiting use of data to the services it provides to us. A current list is maintained at this section, and district customers receive advance notice of changes as their agreement requires.

6. Where data is stored

Customer data is stored and processed in the United States.

7. How we share information

We share personal information only:

• With the subprocessors listed above.
• With your organization's administrators, where you use the service under a school or district account.
• Where required by valid legal process, and we will notify the affected organization unless legally prohibited.
• In connection with a merger or acquisition, subject to equivalent privacy protections and to any district agreement in force.

8. Educational privacy

New York Education Law 2-d. For New York school districts we sign the district's data privacy agreement and attach the Parents Bill of Rights for Data Privacy and Security together with the supplemental information that section 2-d and Part 121 require. New York law protects personally identifiable information of students and the annual professional performance review data of teachers and principals, which our service handles. Our New York exhibit is provided with the district package.

Connecticut. For Connecticut boards of education we sign a written contract that meets Connecticut's student data privacy law (Connecticut General Statutes sections 10-234aa to 10-234dd). We use student information only to provide the service, delete it when the board asks or the contract ends, and notify the board of any breach as that law and the contract require.

Other states. We enter the district's required agreement or the National Data Privacy Agreement with state specific terms where a district requires it.

Children. The service is for adult educators and administrators. We do not knowingly create accounts for anyone under 13.

9. Security

We use encryption in transit and at rest, role based access controls, authentication controls, logging and monitoring, and a documented incident response process.

10. Retention and deletion

We keep account and content data while the account is active. After account closure we delete content within 30 days. Backups are purged on their normal cycle within 7 days. We retain billing records as long as tax and accounting law requires. A signed district agreement's deletion and return obligations control over this section.

11. Your rights

You may request access to your personal information, correct it, request deletion, or request a portable copy. Write to legal@obzervai.com. We respond within 30 calendar days and will tell you if we need more time.

Where you use the service under a school or district account, we refer your request to that organization and act on its instructions. If you are a teacher whose classroom was observed, you can see and ask to correct reports about you through your school or district, which decides when reports are shared with you.

Residents of states with comprehensive privacy laws have additional rights, including the right to appeal a refused request. We do not sell personal information or use it for targeted advertising, so there is nothing to opt out of in those categories.

12. Incident notification

If we confirm a security incident affecting personal information, we investigate and contain it, notify affected users and organizations without unreasonable delay and no later than 72 hours after confirmation, explain what happened, and notify regulators where required. A district agreement with a stricter timeline controls.

13. Changes

We may update this policy. For material changes we email account holders at least 30 days before the new version takes effect and ask for acceptance in the product. Minor updates are posted with a new effective date. Prior versions are retained and dated.

14. Contact

Cosmos89 LLC
PO Box 113302, Stamford, CT
Privacy and legal: legal@obzervai.com
Support: support@obzervai.com
Phone: +1 (203) 920-4176