Privacy Policy
Last Updated: February 11, 2026
Woodstock Software LLC (“Woodstock Software,” “we,” “us,” or “our”) operates the AdaptiveTest platform (https://adaptivetest.io and https://app.adaptivetest.io) and the company website (https://woodstocksoftware.com). This Privacy Policy describes how we collect, use, and protect information when you use our services.
1. Information We Collect
When you use AdaptiveTest, we may collect the following types of information:
Account Information: Names, email addresses, and roles (teacher, administrator, student) provided during account creation or provisioned through your school's Student Information System (SIS) via OneRoster integration.
Assessment Data: Student responses to assessment questions, scores, ability estimates, and performance metrics generated by our adaptive testing engine.
AI-Generated Content: Questions generated by our AI Question Generator and learning recommendations produced by our AI Learning Recommendations service, which are powered by Anthropic's Claude AI.
Usage Data: Log data including timestamps, API endpoints accessed, and actions performed within the platform. All data access and mutations are recorded through our audit logging system.
Contact Information: If you contact us through our website, we collect the information you provide (name, email, message).
2. How We Use Information
We use collected information to:
- Deliver adaptive assessments that adjust to each student's ability level using Item Response Theory (IRT)
- Generate AI-powered questions aligned to educational standards
- Provide AI-generated learning recommendations to teachers based on student performance
- Maintain full audit logging of data access and mutations
- Improve our platform and services
- Respond to inquiries and support requests
3. Data Storage and Security
We follow FERPA-aligned data handling practices for all student education records. Our security measures include:
- All API endpoints require authentication via Clerk (with multi-factor authentication available)
- Role-based access control (RBAC) for data access
- Data stored in PostgreSQL databases hosted on Railway
- Full audit logging of data access and mutations
- Data deletion on request via authenticated API with cascading deletion across all related records
4. Third-Party Services
We use the following third-party services to operate our platform:
- Clerk — Authentication and user management
- Anthropic — Claude AI powers our question generation and learning recommendation features
- Railway — Application and database hosting
- Vercel — Frontend hosting
- Stripe — Payment processing (for paid subscriptions)
- Formspree — Contact form processing on our websites
Each third-party service processes data according to their own privacy policies. We encourage you to review those policies.
5. Children's Privacy
AdaptiveTest is designed for use in K-12 educational settings, which means students using the platform may be under 13 years of age. Student accounts are created and managed by teachers or school administrators — not by students directly. We do not knowingly collect personal information from children without the involvement of their school or teacher.
Schools and districts are responsible for obtaining any necessary parental consent as required by applicable law before using AdaptiveTest with their students.
6. Data Retention and Deletion
We retain data for as long as an account or school subscription is active. Upon request, we provide data deletion via authenticated API, which performs cascading deletion across all related records including assessment data, AI-generated content, and audit logs. Deletion requests are themselves audit-logged for compliance purposes.
Schools and administrators can request data deletion by contacting us at the email address below.
7. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, or delete your personal information. Schools and administrators using AdaptiveTest can manage student data through the platform's administrative interface.
For any privacy-related requests, please contact us.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy on our website with a revised “Last Updated” date.
9. Contact Us
Woodstock Software LLC
Phoenix, Arizona, United States
Email: jim@woodstocksoftware.com