Institutional Trust Center

Platform Overview

MKTPraxis is an interactive marketing analytics education platform built by Dr. Andrew Baker, Associate Professor of Marketing at San Diego State University. It provides browser-based analytics tools, quizzes, live classroom games, and a market simulation designed for marketing courses.

Data & Privacy

What We Collect

What We Do NOT Collect

• No real names required — students can use any username
• No payment information — platform is free for students
• No student-uploaded data on our servers — CSV files are parsed and analyzed entirely in the browser; raw data never leaves the student's device
• No cookies — authentication uses browser localStorage only

Data Sharing

We do not sell, rent, or share personal student data with third parties for advertising or marketing purposes. Data is shared only with:

• The student's instructor(s) — quiz scores, tool engagement, course-scoped analytics only
• Anthropic — if the student uses the optional Praxis Pal AI assistant, their messages (not personal data) are sent to Anthropic's API (Claude) for response generation (see AI Assistant section)
• Microsoft Clarity & Google Analytics — anonymous browsing patterns (page views, clicks) on public pages. These services do not receive usernames, emails, quiz scores, or any educational data
• SMTP2GO — for transactional emails only (password reset, MFA codes). No marketing emails unless user explicitly opts in.

Data Retention

Account Deletion

Students can request account deletion from their profile page. The process follows a 21-day grace period:

1. Student initiates deletion (requires password confirmation)
2. Account is immediately deactivated — login is blocked
3. Confirmation email is sent with the permanent deletion date
4. During the 21-day grace period, the student can contact us to reactivate
5. After 21 days, account is permanently deleted. Personal data is removed; educational activity data is anonymized.

Administrators can also process manual deletion requests within 30 days at info@mktpraxis.com.

Full policy: Privacy Policy

Security

Infrastructure

All infrastructure providers are US-based. No student data is stored outside the United States.

Encryption

• In transit: All connections use HTTPS/TLS. HSTS is enforced with a 1-year max-age, subdomain inclusion, and browser preload list registration.
• Session cookies: Marked Secure and same-site. CSRF protection enabled on all state-changing endpoints.
• Passwords: Hashed with PBKDF2-SHA256 (Django default). Never stored in plaintext. Validated against 4 strength rules (minimum length, common password blocklist, similarity check, numeric-only check).

Authentication

Data Isolation

Course data is strictly scoped. Instructors can only view students enrolled in their own courses. There is no cross-course data visibility — one instructor cannot access another instructor's student data, quiz results, or engagement analytics.

Security Assessments

MKTPraxis has not undergone a formal third-party security audit (e.g., SOC 2, ISO 27001). As a single-developer educational platform, we prioritize transparency about our security posture rather than claiming certifications we don't hold.

We welcome security questions from institutional IT teams. Contact info@mktpraxis.com for detailed technical discussions.

AI Assistant (Praxis Pal)

MKTPraxis includes an optional AI-powered educational assistant called Praxis Pal. It helps students understand analytics concepts within the context of the tool they're using.

How It Works

• Students type a question while using an analytics tool
• The message and current tool context are sent to Anthropic's API (Claude model)
• The AI responds with an educational explanation scoped to the current tool

Data Sent to AI Provider

Guardrails & Limits

• 30 messages per day per student (configurable per institution upon request)
• Topic-scoped: Each tool context constrains the AI to relevant educational content
• Content filtering: System prompt prohibits harmful, offensive, or misleading content
• 48-hour auto-purge: All conversation data is automatically deleted from our servers after 48 hours. Only anonymous usage counts are retained.

Accessibility

MKTPraxis is committed to making its platform accessible to all students, including those with disabilities. We are actively working toward WCAG 2.1 Level AA conformance.

Current Status

Our accessibility remediation is ongoing. Current measures include:

• Skip navigation links on all pages
• Semantic HTML landmarks (<main>, <nav>, <header>)
• ARIA labels on all data tables and interactive elements
• Keyboard-visible focus indicators (:focus-visible outlines)
• Respect for prefers-reduced-motion user preference
• Form labels and aria-describedby on inputs
• Color contrast ratios meeting AA thresholds in primary UI

VPAT

A formal Voluntary Product Accessibility Template (VPAT) is not yet available. We can provide our internal accessibility audit data and discuss specific accommodation needs for your students. Contact info@mktpraxis.com.

Reporting Barriers

If you or your students encounter an accessibility barrier, please report it to info@mktpraxis.com. We aim to address reported accessibility issues promptly.

FERPA

MKTPraxis is designed to support institutional compliance with the Family Educational Rights and Privacy Act (FERPA). The platform's architecture reflects FERPA principles:

• Minimum necessary data: We collect only what's needed for educational functionality (username, optional email, tool usage, quiz scores)
• Course-scoped access: Instructors can only view data for students enrolled in their own courses
• No third-party data sales: Student data is never sold, rented, or shared for advertising
• Student data rights: Students can view, export, and request deletion of their data
• Audit trail: Login events and access patterns are logged for security monitoring

Integrations & Browser Requirements

LMS Integration

MKTPraxis currently operates as a standalone platform. Students access it via registration codes provided by their instructor. Gradebook data is exportable as CSV for manual import into any LMS.

Browser Requirements

MKTPraxis runs in any modern web browser. No plugins, extensions, or software installs required.

• Supported: Chrome, Firefox, Safari, Edge (current and previous two major versions)
• Not supported: Internet Explorer
• Devices: Desktop, laptop, and tablet. Some tools work on mobile, but desktop is recommended for the best experience.

Compliance Checklist

Quick-reference table for common institutional requirements: