Acrux Education – Platform Terms of Service

Effective Date: 01 January 2025

Last Updated: 01 January 2055

‍

1. Introduction and Definitions

These Terms of Service (“Terms”) govern access to and use of the Acrux Education platform and associated services (“Platform”) provided by Acrux Education Pty Ltd (“we”, “us”, “our”). By accessing or using the Platform, you (the subscribing school, institution, or authorised user, referred to as “you” or “School”) agree to be bound by these Terms.

“User” means any individual authorised by the School to access the Platform, including teachers, heads of department, and internal staff.

“Student Data” refers to personal information relating to students entered into the Platform by authorised Users.

“Anonymised Data” refers to data that has been stripped of personal identifiers and cannot be used to re-identify individuals.

2. Service Description

The Platform provides tools for assessment management, AI-assisted marking, curriculum resources, and educational analytics. We grant you a limited, non-exclusive, non-transferable licence to use the Platform solely for educational purposes during the term of your subscription.

Use of the Platform is subject to subscription limits as agreed (e.g. by school, by user type, or per student). We reserve the right to improve, modify, or discontinue any part of the Platform with reasonable notice.

3. User Accounts and Responsibilities

Only authorised Users may access the Platform. You are responsible for:

• Ensuring account information is accurate and kept up to date

• Managing user roles and permissions

• Maintaining the security and confidentiality of login credentials

• Ensuring Platform use complies with applicable laws and school policies

You agree not to:

• Circumvent access controls or security features

• Use the Platform for unlawful or non-educational purposes

• Attempt to reverse-engineer or interfere with the Platform’s functionality

4. Data Handling and Privacy

The School retains ownership of all personal data uploaded to the Platform, including Student Data. Acrux acts as a data processor and will only process personal data on the School’s behalf in accordance with applicable privacy laws and our Data Protection Policy.

The School is responsible for ensuring that it has the necessary authority, consents, or legal basis to upload personal data to the Platform.

We apply appropriate technical and organisational safeguards, including encryption, access controls, and audit logging. Our Data Protection Policy and Data Processing Agreement (DPA) provide further details.

5. Anonymised and Derived Data

We may generate Anonymised Data from Platform usage for the purposes of research, system improvement, and AI model training. This data:

• Is fully de-identified and cannot be used to re-identify individuals

• Is processed and stored separately from Student Data

• Remains the intellectual property of Acrux Education

Anonymised Data may be retained indefinitely and is not subject to deletion requests.

6. Subscription and Payment Terms

Subscriptions are billed annually in advance. Unless otherwise agreed, each subscription includes a 30-day free trial. Access may be terminated at any time during the trial.

Unless cancelled with at least 30 days’ written notice prior to the renewal date, subscriptions will automatically renew at the then-current pricing.

Fees are non-refundable unless required by law. We may suspend access to the Platform for overdue accounts after giving reasonable notice.

7. Term and Termination

These Terms apply for the duration of your subscription. Either party may terminate the agreement:

• With written notice before renewal

• Immediately upon material breach by the other party

Upon termination:

• Access to the Platform will be revoked

• Identifiable data will be deleted or returned per our Data Protection Policy

• Anonymised Data may be retained by Acrux Education

8. Intellectual Property

All intellectual property rights in the Platform, including software, design, code, and documentation, remain the property of Acrux Education.

The School retains ownership of all content and personal data it uploads. Acrux is granted a licence to process such data solely to provide the services described.

9. Warranties and Disclaimers

We provide the Platform on an “as-is” and “as-available” basis. While we take reasonable steps to ensure continuity and security, we do not guarantee uninterrupted access or error-free operation.

To the maximum extent permitted by law:

• Our total liability is limited to the amount paid under your current annual subscription

• We are not liable for indirect, incidental, or consequential damages

10. Support and Maintenance

Standard support is available during business hours via email or our help desk. We may conduct scheduled maintenance and will provide reasonable notice where possible.

11. Confidentiality

Each party agrees to protect any confidential information disclosed under these Terms and not to use it for any purpose other than fulfilling this agreement.

Confidentiality obligations survive termination, and do not apply to publicly available or legally compelled disclosures.

12. Changes to Terms or Services

We may update these Terms from time to time. We will notify you of material changes by email or in-platform notice.

Continued use of the Platform following such updates constitutes acceptance of the revised Terms.

13. Dispute Resolution and Governing Law

These Terms are governed by the laws of Western Australia. Any disputes shall be subject to the exclusive jurisdiction of the courts of that region.

14. Education-Specific Considerations

• The Platform is designed for use by authorised school staff only

• Students do not access the Platform directly

• AI-generated marks are suggestions only; final grading decisions remain with the teacher

• Role-based access controls (e.g. for HODs, teachers) are implemented

15. Contact
TeacherEA Holdings Pty Ltd T/As Acrux Education

Email: info@acrux.education

Privacy: privacy@acrux.education

Data Protection: dpo@acrux.education

‍

Data Protection Policy

Effective Date: 01 January 2025

Last Updated: 01 January 2025

At Acrux Education, we are committed to safeguarding personal data and complying with applicable data protection laws in the jurisdictions in which we operate, including the Privacy Act 1988 (Australia), UK GDPR, and Singapore’s Personal Data Protection Act 2012 (PDPA).

This policy describes how we collect, use, store, and protect personal information when you use our products and services.

1. Who We Are

Acrux Education (“we”, “us”, “our”) provides a secure digital platform that enables schools and educators to manage assessments, track progress, and deliver educational outcomes.

Our platform is used by authorised school staff to administer and review assessments, manage student records, and access insights into teaching and learning.

Depending on context, we act as either:

• a Data Processor when handling data on behalf of schools, or
• a Data Controller for account-level and operational data

2. Data We Collect and Process

We collect and process the following categories of personal information:

a. Teacher Information

• Full name and email address
• Role and affiliated school
• Subjects taught and class assignments
• Login and usage activity (e.g. last login, page views)
• Support tickets and communications

b. Student Information (provided by schools)

• Full name and national student identifier
• Class enrollment and assessment records
• Assessment responses and associated metadata
• Marking and grading outcomes
• Derived analytics data (e.g. performance trends, error types)

c. Analytics and AI-processed Data

• To support insight reporting and AI-based marking, we generate and store analytics based on student responses.
• All large-scale analysis and AI training uses anonymised data with UUIDs in place of personal identifiers.

We do not collect student data directly. All student information is provided and managed by authorised school staff.

3. Purpose of Processing

We process personal data for the following purposes:

• To provide secure access to the Acrux platform for authorised school staff
• To manage user accounts, classes, and teaching assignments
• To deliver, store, and assess student work and results
• To facilitate automated marking and feedback using AI tools
• To generate performance analytics and progress insights for teachers and schools
• To support large-scale anonymised research and product improvement
• To respond to technical support queries and operational communications
• To comply with legal obligations and education data standards

Where possible, we use pseudonymised or anonymised data (e.g., UUIDs) when conducting analytics or research beyond the direct provision of school services.

4. Lawful Basis for Processing

We process personal data based on the following lawful grounds:

• Contractual necessity – to provide our services to schools and their authorised staff
• Legitimate interest – to operate and improve our platform, ensure security, and conduct research and development
• Legal obligation – to comply with applicable laws, including education regulations and privacy legislation
• Consent – where required, such as for receiving product updates or marketing communications

For student data, we act solely under the authority of schools and process such data only in accordance with their instructions.

5. How We Store and Protect Data

• Data is hosted in secure, access-controlled environments on Google Cloud Platform (GCP).
• Data may be stored in regions including Australia, the UK, and Singapore, depending on school location.
• We apply:
  • Encryption at rest and in transit
  • Role-based access control (RBAC)
  • Regular vulnerability assessments
  • Audit logs and incident response protocols

6. Data Sharing and Transfers

We may share data with trusted third parties under strict controls and only for legitimate operational or research purposes. These include:

• Cloud infrastructure providers (e.g. Google Cloud Platform) for hosting, storage, and security
• Internal staff and subcontractors under confidentiality agreements
• Legal and regulatory authorities when required by law
• Research institutions and universities for approved studies using fully anonymised datasets, with no identifying student or school information

Cross-border data transfers (e.g. for hosting or research) are protected by:

• Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms under UK GDPR
• Australian Privacy Principle 8.1 for overseas disclosure
• Singapore PDPA Sections 26–28 for international transfers

We do not sell or monetise any data, and no personal information is used for advertising or profiling.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy or to comply with legal and contractual obligations.

• Teacher and staff data: retained for the duration of the account + 12 months
• Identifiable student data (e.g. names, student ID, assessment submissions): retained for the duration of a student’s enrolment at the school or as directed by the school
• Anonymised student data (e.g. answer patterns, assessment analytics, AI training data): retained indefinitely for research and system improvement purposes. This data is fully anonymised and cannot be linked back to an individual.

When a school requests data deletion, we will:

• Delete all identifiable data associated with the request
• Retain only anonymised data, where such data cannot be used to re-identify any student or user

All deletion actions are logged and confirmed back to the requesting school.

8. Your Rights

Depending on your jurisdiction, you may have certain rights regarding your personal data, such as:

• The right to access, correct, or delete personal data
• The right to restrict or object to processing
• The right to request a copy of your data (data portability)

For teachers and school staff, you may contact us directly at privacy@acrux.education to exercise these rights.

For student data, all requests must be made through the student’s school. As a data processor, we are not permitted to act on direct student or parent requests unless instructed by the school.

We will assist schools with any data-related requests they submit on behalf of students or staff. We aim to respond to all valid requests within 30 days.

9. Children’s Data

Our platforms are designed for use by schools and educators. Students do not create accounts or directly interact with the platform. All student data is provided by authorised school staff.

We process student data only under contractual agreements with schools and in accordance with their instructions.

10. Data Protection Officer (DPO)

If you are based in the UK or Singapore and wish to contact our DPO:

Dr Leanne Russell

📧 dpo@acrux.education

11. Updates to This Policy

We may update this policy from time to time. Material changes will be communicated via the platform or email. The latest version is always available at www.acrux.education.

‍