Institutional Trust Center

Platform Overview

MKTPraxis is an interactive marketing analytics education platform built by Dr. Andrew Baker, Associate Professor of Marketing at San Diego State University. It provides browser-based analytics tools, interactive reading modules, quizzes and assignments, live classroom games, and a market simulation designed for marketing courses.

Data & Privacy

What We Collect

What We Do NOT Collect

• No student ID numbers — the roster importer deliberately skips this column, so we never hold the identifier your SIS uses
• No card numbers — payments run through Stripe Hosted Checkout. Card data is entered on a page Stripe serves and never reaches our servers, which keeps us in the lowest PCI scope (SAQ-A).
• No advertising trackers or data sales — student data is never sold, rented, or shared for advertising
• No cookies for authentication — sign-in uses a token in browser localStorage. See the cookie table below for what is set.

Cookies

The platform does not use cookies to sign you in. Some cookies are still set, and an honest accounting matters more than a slogan:

Access Tiers

Tools carry one of three access levels. Enforcement is applied by our servers for paid content; the in-browser gate is a courtesy that tells a visitor what they are looking at.

• Open — usable without an account. Guest use generates no personal data.
• Account — requires a free sign-in. Uploading a CSV requires an account.
• Paid — requires an institutional entitlement or an individual licence. Reading modules, Praxis Pal, and the simulation are enforced server-side.

Data Sharing

We do not sell, rent, or share personal student data with third parties for advertising or marketing purposes. Data is shared only with:

• The student's instructor(s) — quiz scores, submitted work, tool engagement, course-scoped analytics only
• Anthropic — messages sent to the Praxis Pal assistant, and, where an instructor turns on AI-assisted grading, the submitted work being graded (see AI)
• Cloudflare R2 — object storage for uploaded files and archived AI transcripts
• Stripe — payment processing for individual licences
• Sentry — application error reports, configured to exclude personally identifying information
• Microsoft Clarity & Google Analytics — aggregate usage measurement on public marketing pages and tool pages. Neither is loaded on gradebooks, rosters, submissions, quizzes, or any other page that displays identifiable student records.
• SMTP2GO — for transactional and course email. Non-essential categories are individually opt-out.

Data Retention

Account Deletion

Students can request account deletion from their profile page. The process follows a 21-day grace period:

1. Student initiates deletion (requires password confirmation)
2. Account is immediately deactivated — login is blocked
3. Confirmation email is sent with the permanent deletion date
4. During the 21-day grace period, the student can contact us to reactivate
5. After 21 days, account is permanently deleted. Personal data is removed; educational activity data is anonymized.

Administrators can also process manual deletion requests within 30 days at info@mktpraxis.com.

Full policy: Privacy Policy

Security

Infrastructure

All infrastructure is hosted in United States regions, including the Cloudflare R2 bucket used for uploaded files and archived transcripts. No student data is stored outside the United States.

Encryption

• In transit: All connections use HTTPS/TLS. HSTS is enforced with a 1-year max-age, subdomain inclusion, and browser preload list registration.
• Session cookies: Marked Secure and same-site. CSRF protection enabled on all state-changing endpoints.
• Passwords: Hashed with PBKDF2-SHA256 (Django default). Never stored in plaintext. Validated against 4 strength rules (minimum length, common password blocklist, similarity check, numeric-only check).

Authentication

Data Isolation

Course data is strictly scoped. Instructors can only view students enrolled in their own courses. There is no cross-course data visibility — one instructor cannot access another instructor's student data, quiz results, or engagement analytics.

Security Assessments

MKTPraxis has not undergone a formal third-party security audit (e.g., SOC 2, ISO 27001). As a single-developer educational platform, we prioritize transparency about our security posture rather than claiming certifications we don't hold.

We welcome security questions from institutional IT teams. Contact info@mktpraxis.com for detailed technical discussions.

Subprocessors

Every third party that may process data on our behalf, and what each one receives.

AI Assistant (Praxis Pal)

MKTPraxis includes an optional AI-powered educational assistant called Praxis Pal. It helps students understand analytics concepts within the context of the tool they're using.

How It Works

• Students type a question while using an analytics tool or reading a chapter
• The message and current on-screen context are sent to Anthropic's API (Claude Haiku)
• The AI responds with an educational explanation scoped to the current tool

Data Sent to AI Provider

Guardrails & Limits

• 30 messages per hour per student; 1,000 per day for instructor accounts
• Topic-scoped: Each tool context constrains the AI to relevant educational content
• Content filtering: System prompt prohibits harmful, offensive, or misleading content
• Retention: Transcripts are retained for up to 3 years, then deleted. See the retention table above.

AI-Assisted Grading

Instructors may optionally enable AI-assisted grading on an assignment. This is a separate feature from Praxis Pal, it is off unless an instructor turns it on, and it is the one place where student work itself is sent to an AI provider. It deserves to be stated plainly rather than buried.

How It Works

• An instructor writes a rubric and enables AI grading for that assignment
• The submitted work — text, and the contents of uploaded PDFs or images — is sent to Anthropic's API along with the rubric
• The model returns a suggested score and written feedback against each rubric dimension
• The instructor reviews it. A suggestion is not a grade until a human accepts it, and instructors can override any score or comment.

Accessibility

MKTPraxis is committed to making its platform accessible to all students, including those with disabilities. We are actively working toward WCAG 2.1 Level AA conformance.

Current Status

We run an automated accessibility audit across every page on the platform. In the most recent run, 176 pages were graded with an overall average of 85.8%. Publishing the distribution rather than a slogan is deliberate: 93 pages score an A, 7 a B, 45 a C, 29 a D, and 2 an F.

Measures in place across the platform:

• Skip navigation links
• Semantic HTML landmarks (<main>, <nav>, <header>)
• ARIA labels on data tables and interactive elements
• Keyboard-visible focus indicators (:focus-visible outlines)
• Respect for prefers-reduced-motion user preference
• Form labels and aria-describedby on inputs
• Color contrast ratios meeting AA thresholds in primary UI
• Per-student accommodation overrides (extra attempts, extended deadlines, time multipliers)

Known Gaps

That distribution means 76 pages currently sit below a B, and we would rather you read that here than discover it. The most common failures are unlabeled form inputs, a missing <main> landmark, and unlabeled data tables. The weakest area is a group of instructor-facing simulation management screens. Remediation is ongoing and prioritized by student-facing impact, which is why the student-facing tools and reading modules score highest.

VPAT

A formal Voluntary Product Accessibility Template (VPAT) is not yet available. We can provide our internal accessibility audit data and discuss specific accommodation needs for your students. Contact info@mktpraxis.com.

Reporting Barriers

If you or your students encounter an accessibility barrier, please report it to info@mktpraxis.com. We aim to address reported accessibility issues promptly.

FERPA

MKTPraxis is designed to support institutional compliance with the Family Educational Rights and Privacy Act (FERPA). The platform's architecture reflects FERPA principles:

• Minimum necessary data: We collect only what's needed for educational functionality, and deliberately do not collect student ID numbers
• Course-scoped access: Instructors can only view data for students enrolled in their own courses
• No third-party data sales: Student data is never sold, rented, or shared for advertising
• Student data rights: Students can view, export, and request deletion of their data
• Audit trail: Login events and access patterns are logged for security monitoring
• Disclosed processing: The subprocessor table above lists every party that may handle student data, including the AI grading path

Integrations & Browser Requirements

LMS Integration

MKTPraxis currently operates as a standalone platform. Students access it via registration codes provided by their instructor. Gradebook data is exportable as CSV for manual import into any LMS.

Browser Requirements

MKTPraxis runs in any modern web browser. No plugins, extensions, or software installs required.

• Supported: Chrome, Firefox, Safari, Edge (current and previous two major versions)
• Not supported: Internet Explorer
• Devices: Desktop, laptop, and tablet. Some tools work on mobile, but desktop is recommended for the best experience.

Compliance Checklist

Quick-reference table for common institutional requirements: