Acrux Education
Legal documentation

Policy documents.

All Acrux Education policy documents in one place.

Acrux Education Pty Ltd · Version: 1.0 · Effective: January 2025

Privacy Policy

Effective Date: 01 January 2025

Last Updated: 18 February 2026

Acrux Education (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website

Acrux Education | AI-Powered Maths Assessment Marking for Educators  (“Site”).

1. Information We Collect

We may collect the following types of information:

a. Personal Information You Provide

  • Name, email address, phone number

  • School or organisation name

  • Any messages or requests submitted through contact forms or demo requests

b.  Automatically Collected Information

  • IP address and browser type

  • Referring website or source

  • Pages visited and time spent

  • Cookies and tracking technologies (see Section 6)

2. How We Use Your Information

We may use the information we collect for the following purposes:

  • To respond to enquiries and demo requests

  • To improve the functionality and content of our Site

  • To analyse website traffic and usage patterns

  • To send marketing communications (with your consent, where required)

  • To contact schools and educators about our services using publicly available business contact information (under legitimate interest)

  • To comply with legal obligations

3. Sharing Your Information

Sharing Your Information

We may share your information with:

  • Trusted third-party service providers (listed below)

  • Legal or regulatory authorities where required by law

  • In connection with a business sale, merger or acquisition

We do not sell your personal information to third parties.

Third-Party Service Providers

The following services may process personal data on our behalf. A complete and current list of sub-processors, including the categories of data each processes, the purpose, the country of processing, and the cross-border transfer mechanism, is published at acrux.education/legal/sub-processors.

  • Platform infrastructure and security - Google Cloud Platform — Infrastructure, hosting, and databases (regional: AU, UK, SG)

  • Cloudflare — DNS, CDN, security, and performance

  • Amazon Web Services (SES) — Transactional and marketing emails AI and content processing (used in marking and analytics)

  • Anthropic — AI inference for marking suggestions and feedback generation

  • Google Cloud Vision — Optical Character Recognition for handwritten student responses

  • Mathpix — Mathematical notation extraction School data integration

  • Wonde — School data synchronisation (where applicable) Operational and analytical

  • Sentry — Error monitoring and application performance

  • Google Analytics — Website usage analytics

  • Google reCAPTCHA — Bot and spam protection

  • CookieYes — Cookie consent management

  • Smartlead — Email outreach and campaign automation (prospect contact data only — no school or student data)

  • GitHub — Source code management (no customer data)

Before any data is sent to an external AI provider for marking, student work is anonymised within the Acrux platform using single-use identifiers. No personally identifiable student information is exposed to AI providers. Anthropic and Google Cloud Vision do not train their models on Acrux data; the equivalent training opt-out has been verified disabled with Mathpix.

All third-party providers are contractually bound to data protection requirements. Cross-border transfers are governed by Standard Contractual Clauses, the EU-US Data Privacy Framework, the New Zealand Privacy Act 2020 cross-border provisions, or equivalent safeguards as outlined in our Data Protection Policy.

4. How We Store and Protect Your Data

Data is stored in the cloud region that aligns with the school's jurisdiction:

  • Australian schools: hosted in Sydney (australia-southeast1)

  • New Zealand schools: hosted in Sydney, Australia (australia-southeast1). Cross-border transfer is permitted under the New Zealand Privacy Act 2020 on the basis that Australia provides comparable safeguards. This transfer mechanism is documented in our Data Protection Policy.

  • United Kingdom schools: hosted in the United Kingdom (europe-west2)

  • Singapore schools: hosted in Singapore (asia-southeast1)

Each region operates as an independent instance — student and school data does not cross between regions.

We use appropriate technical and organisational measures to protect data from loss, misuse, or unauthorised access, including encryption in transit and at rest, role-based access control, audit logging, and regular vulnerability assessments. Personal data is retained only for as long as necessary to fulfil the purposes outlined in this policy. Specific retention periods are documented in our Data Protection Policy.

5. Your Rights

Depending on your location, you may have rights to:

  • Access the personal information we hold about you

  • Request correction or deletion of your personal information

  • Request a copy of your personal information in portable form

  • Withdraw consent to marketing communications

  • Restrict or object to processing

  • Lodge a complaint with your local privacy regulator

To make a request, contact us at: [email protected]

Acrux acknowledges privacy requests within 5 business days and provides a substantive response within 30 days, free of charge.

For student data, requests must be made through the student's school. Acrux acts as a data processor on the school's behalf and does not act on direct requests from students or parents unless instructed by the school.

6. Cookies and Tracking

Our website uses cookies and similar tracking technologies to:

  • Provide website functionality

  • Understand how visitors use our Site

  • Improve user experience

You can manage cookie preferences in your browser settings. For more detail, see our Cookie Policy.

Our Site may contain links to external websites. We are not responsible for the privacy practices of those sites. We recommend you review their policies before providing personal information.

8. Children’s Privacy

Our website is intended for use by schools and educators. We do not knowingly collect personal information from individuals under 16 without appropriate consent.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify users by email and require users to review and acknowledge the updated policy through an in-application notice on next login before continuing to use the platform. The "Last Updated" date at the top of this policy will reflect any changes.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, contact us at:

Acrux Education (TeacherEA Holdings Pty Ltd)

Email: [email protected]