Articles in this section

Trust Center

Our Commitment to Privacy, Security & Responsible AI

Last updated: August 20, 2026

At ImmerseMe, trust is foundational to everything we build.

We partner with educators, institutions, and learners around the world to deliver immersive language-learning experiences while protecting student data, supporting responsible AI use, and making procurement and compliance easier for institutions.

 
Protect Your Data

We protect student data at all times with strong technical and organ­ization­al safeguards.

 
Education First

We use personal data only to deliver and improve educational learning experiences.

 
Never Sell Data

We never sell personal data or use it for commercial purposes.

 
No Advertising

We never use student data for advertising, marketing or profiling.

 
Transparent by Design

We clearly explain how our platform works, how data is used, and how AI supports learning.

 
Support Compliance

We help schools and institutions meet their privacy, security and compliance obligations.

 

  Built for Education

ImmerseMe is designed specifically for:

  • K–12 schools and districts
  • Higher education institutions
  • Vocational and training organizations

We align with global education and privacy frameworks, including:

🇺🇸 FERPA🇺🇸 COPPA

🇪🇺 GDPR🇬🇧 UK GDPR

🇦🇺 APPs🇳🇿 Privacy Act 2020

  Responsible AI

We use AI to enhance language learning — not replace educators. AI conversation is optional and may be enabled or disabled at the organization level.

Our approach to AI is simple:

  • AI is used as a learning-support tool
  • Human oversight (teachers) remains essential
  • AI outputs are assistive, not authoritative
  • We use safety and moderation controls to reduce misuse
  • We minimize data shared with AI providers and do not use institutional data to train an ImmerseMe-owned foundation model
We do not use student data for advertising.
We do not use identifiable student data to train general-purpose AI models.

 

  Security & Infrastructure

We use a layered security approach designed for a modern education SaaS platform, including:

  • Primary ImmerseMe-controlled production infrastructure and persistent customer data are hosted in Microsoft Azure Australia East (Sydney)
  • Data in transit is protected using HTTPS/TLS, with cloud-provider encryption at rest for Azure managed storage
  • Role-based access controls and additional protections are used for privileged administration
  • Secure-development, change-management, vulnerability-management, logging, incident-response, and vendor-risk processes are formally documented
  • Monthly OWASP ZAP dynamic application testing is part of the current recurring application-security program
  • Daily database backups, defined recovery targets, and business-continuity procedures support resilience

Some approved providers use global networks or international processing, so ImmerseMe is Australia-centered rather than Australia-only.

  Data Protection & Privacy

We operate under a clear education-first privacy model:

  • Schools and institutions retain ownership of customer-provided data
  • ImmerseMe processes school-managed data to provide, secure, and support the service
  • We do not sell student personal information or use learner data for third-party advertising, data brokerage, or unrelated commercial profiling
  • Privacy-rights and deletion requests are handled through documented procedures
  • Data retention, deletion, incident response, and privacy-impact assessment are governed by approved internal standards

We support:

  • Data access and deletion requests
  • Institutional control and oversight
  • Compliance with regional data protection laws

  Subprocessors & Transparency

We work with trusted technology partners to operate and support ImmerseMe. The table below is intentionally abbreviated for readability; our Privacy Policy and Data Processing Addendum contain the fuller privacy and processing details.

Subprocessor Role Primary Processing
Microsoft Azure Core hosting, storage, speech & AI safety Australia East (Sydney); global support/subprocessors
Cloudflare DNS, CDN, WAF & edge security Global edge network
Vercel Web app hosting & delivery Sydney-configured functions; distributed edge
OpenAI Optional AI conversation United States / global provider network
LiveKit Cloud Real-time voice/media & agent infrastructure Global dynamic mesh; inference restriction enabled
SendGrid / Twilio Transactional email International / vendor-hosted
Edlink Optional rostering & SSO Customer-selected: United States, Canada, Germany or Australia
ClassLink Optional rostering & SSO Customer deployment dependent
Bunny.net Video & media delivery Global CDN edge
Usersnap Optional support & feedback EU (Frankfurt / related EU locations)

All material subprocessors that process personal data on our behalf are subject to appropriate contractual, privacy, and security obligations. We review material vendor changes through our vendor-risk and privacy-impact processes.

Accessibility & Assurance

Accessibility is a design and development requirement for ImmerseMe 2.0, with WCAG 2.2 Level AA as the target baseline. A current independent accessibility assessment and VPAT/Accessibility Conformance Report are in progress.

ImmerseMe also maintains customer security and privacy assurance materials, including HECVAT responses and supporting policy/evidence documentation. We do not claim SOC 2, ISO 27001, ISO 27701, NIST, or other certification unless explicitly stated.

 

  Policies & Legal Framework

Our public documents explain how we protect data, set expectations for safe use, and operate responsibly:

  Supporting Institutions

We understand the needs of schools, districts, universities, and other education providers.

We aim to:

  • make procurement and compliance straightforward
  • Provide clear documentation and transparency
  • Support implementation with practical guidance
  • Build long-term partnerships with educators

This Trust Center is a public summary of verified practices. Where a contract, DPA, Privacy Policy, or current security assessment provides more specific terms, that document controls for its subject matter.

We believe the future of learning should be immersive, effective, and built on trust.

 

Questions about privacy, security, or compliance?

We are always happy to help. Contact our team at hello@immerseme.com

 

Was this article helpful?
0 out of 0 found this helpful