Privacy Policy For EduSmart Products
EduSmart is committed to protecting your privacy; this policy explains our collection of and use of your personally identifiable information (PII). At EduSmart, we're dedicated to protecting your privacy and the privacy of anyone. To that end, we have instituted certain policies - rules, you might call them - to help us make sure EduSmart remains a safe, trusted environment. Here, we outline those policies and our efforts to enforce them.
Policy For Students
EduSmart’s content is provided solely by subscription to schools, school districts, and other educational entities. EduSmart does not use any information about students for any marketing or promotional purposes whatsoever, either inside or outside EduSmart. We do not share personally identifiable information (PII) about students, with unrelated third parties, except as explicitly stated in this Privacy Policy.
Data Ownership and Access
Schools and students retain ownership of their data. Authorized school representatives may access, correct, or request deletion of student information at any time by contacting support@edusmart.com. Requests are processed within 30 days as required by law.
Your Consent
By using EduSmart Internet-based products and/or by browsing or navigating EduSmart web sites you accept, and agree to be bound by, the terms of this privacy policy. Collection, use, and disclosure of personally identifiable information is governed in accordance with the terms stated in this policy.
Information Tracking
In certain instances, when using EduSmart’s Internet-based products, users may be asked to enter a first and last name and grade level. We use this personal information only for the purpose specified at the time you input such information, including for access identity safeguards and other security purposes. Some usage of the websites and services is tracked for verification purposes. For example, when a student completes an assigned learning activity, that information will be available to the teacher or administrator who assigned the activity.
EduSmart uses a software technology called “cookies” to create a personalized web experience. The use of cookies is common in the Internet industry; you’ll find them at many sites. A cookie is simply a Hyper Text Transfer Protocol (HTTP) header that consists of a text-only string that is entered into the memory of a browser. EduSmart Cookies are host-based session cookies and do not contain Personally Identifiable Information. Please note: Your browser must be set to accept cookies to use EduSmart’s subscription–based websites and services.
We do track certain information, such as courseware and site usage. These data are used to analyze trends and/or internal statistical purposes only. No personal information is collected as a result of this tracking.
An Internet Protocol (IP) address is a number automatically assigned to your computer whenever you use the World Wide Web. Web servers—the computers that “serve up” web pages—automatically identify your computer by its IP address. EduSmart collects IP addresses for system administration and also to compile aggregate information and audit the use of our site. The EduSmart website logs IP addresses and browser types for systems administration purposes. These logs will be analyzed to improve the value of the materials available on the web site.
We do not store and link IP addresses with any personally identifiable information. We use IP addresses for compliance purposes and to prevent abuses of our systems and products.
Infrastructure Security
We apply established best practices for ensuring our infrastructure is secure:
- All traffic is encrypted using SSL/TLS with 256-bit encryption (HTTPS).
- EduSmart server access is given only to the trusted EduSmart employees who require it.
- EduSmart servers are guarded by various firewalls, with both external WAN access and internal LAN restrictions - powered by AWS infrastructure.
- EduSmart employs automatic installations (with no interruption to end-users) for all crucial operating system and application security patches as soon as they are released.
- EduSmart employs automatic installations (with no interruption to end-users) for all crucial operating system and application security patches as soon as they are released.
- We transfer all of the incoming and outgoing traffic through one secure proxy interface.
Physical Security
EduSmart is hosted on Amazon Web Services (AWS). AWS data centers adhere to the highest standards of physical security and processes and have fulfilled ISO 27001, ISO 9001, SOC 3 and other certifications. For more information on AWS security infrastructure visit https://aws.amazon.com/security/ and https://aws.amazon.com/compliance
Third-Party Service Providers
EduSmart uses third-party service providers for functions like hosting and authentication. These partners receive only essential information under strict data protection agreements. A list is available upon request.
Security Measures
EduSmart acknowledges that all personally identifiable information (PII) related to students, teachers, and administrators is owned by the customers it serves.
The importance of security for all personally identifiable information is of utmost concern to us. We exercise great care in providing secure storage of your information on private network servers not available by direct web addresses. All user information and coursework data are encrypted and transmitted through session keys to ensure that no one other than EduSmart can read the transmitted information. Please note: EduSmart websites and services are password-protected, subscription-only products. Subscribers may provide certain personally identifying information about students to enroll them as individual authorized users. This information includes name, grade level, class assignment, and other identifying information that subscribers may deem necessary to enable the assessment, assignment, and/or reporting features of the EduSmart product(s) used. Information provided by authorized users is not available to the general public on the Internet. EduSmart sites and services are password-protected so that only authorized users are permitted to access them or view the member information relevant to the accounts. We strongly recommend that you do not divulge your password to anyone. We have systems in place to provide secure transmission of your information from your computer to our servers. Only certain authorized EduSmart employees can access this information if it is relevant to their job duties. EduSmart has staff dedicated to maintaining this Privacy Policy and other privacy initiatives, periodically reviewing web security and making sure that EduSmart employees are aware of and comply with our security and privacy practices. We protect your data with administrative, technical, and physical safeguards, including encryption in transit and at rest, and role-based access controls.
EduSmart periodically conducts security audits to make sure we are doing everything possible to secure this data. Unfortunately, no data transmission over the Internet can be guaranteed to be 100 percent secure. As a result, while we strive to protect your personal information, EduSmart can’t guarantee or warrant the security of any information you transmit to us or from our online products or services, and you do so at your own risk. Once we receive your transmission, we use our best efforts and employ state-of-the-art technology to ensure its security on our systems. In case of a data breach, EduSmart will notify customers within 24 hours after the data breach is detected.
Information You Provide Directly
Register for an Event
When you register for an event, we collect your name, email address, organization name, and phone number. We use this information to communicate with you about the event and related services.
Leave a Comment
If you leave a comment or subscribe to a comment feed, we ask for your name and email address. We use this information to share your comments and provide you with updates to the comment feed.
Sign Up for our Email Newsletter
We collect your email address when you sign up for our email newsletter. We collect this information so we can deliver our newsletter to you.
Contact Us
When you contact us we collect your name, email address, phone number, and other information required in order to address your inquiry. We request this information in order to effectively address your comments and questions and provide you with relevant information in response to your inquiry.
Other
Other Services we offer may request or require you to provide us with additional information, which will be described at the point of collection.
Use Of Your Personally Identifiable Information
We require that those third party vendors maintain at least the same level of confidentiality, integrity, and availability that we maintain for such PII. EduSmart remains liable for the protection of your PII that we transfer to our service providers, except to the extent that we are not responsible for the event giving rise to any unauthorized or improper processing.
In certain cases, you may choose to give us personally identifiable information about yourself, such as your name, name of the school, grade level, and e-mail address in response to specific requests. This information is never passed to third parties. Only user IDs may be passed to EduSmart vendors, suppliers, or subcontractors (“Contractors”) in order to seamlessly integrate their product(s) with the EduSmart’s Internet-based products. EduSmart enters into contracts with such Contractors which contain confidentiality and non-disclosure provisions requiring that such Contractors maintain the confidentiality of any personally identifiable information which may be disclosed by EduSmart to the Contractor in order to utilize such Contractor’s product, and the Contractor promises not to disclose such information to any other party.
EduSmart is not responsible for any actions or policies of such third parties to whom you may voluntarily provide personally identifiable information, and you should check the applicable privacy policy of such party when providing personally identifiable information to them. Personally identifiable information retained by EduSmart will be used only for internal purposes such as ensuring website access security and tracking site and courseware usage.
We use the log-in information to identify you as an authorized user and ensure that you can see and use those areas of our web sites that are appropriate for you. For example, student users cannot access those areas of the EduSmart’s content which are intended solely for their teachers or administrators.
Third-Party Services Used by EduSmart
EduSmart integrates with the following third-party services to deliver, secure, and enhance its offerings. Each provider maintains its own privacy and security policies:
- Amazon Web Services (AWS) – Hosting and infrastructure
- ReadSpeaker – Text-to-speech functionality
- Clever – SSO and rostering integration
- Classlink – Rostering and SSO
- Learnosity – Assessment and item delivery
- Google Analytics – Usage tracking and performance analysis
- Zoho (CRM & Desk) – Support ticketing and customer communication
Notification of Changes to Third Party Service Providers
EduSmart may periodically update the list of third-party service providers we use to deliver our services. If we make material changes to our third-party partners that affect how personal information is handled (for example, if we begin sharing different types of information, or add a new major provider), we will notify affected schools and users by email and/or through a prominent notice on our website at least 30 days before such changes become effective.
Schools and users have the right to contact us at support@edusmart.com to request additional details or to raise concerns about these changes. We update our list of third-party service providers regularly, and it is available upon request.
Request For Records/Deletion & Edit Procedure
For parents of children who access and use the services of our websites by means of a license for such use purchased by your child’s school, in order to obtain a copy of your child’s student record in relation to such access and use, you must refer such requests directly to your child’s school. If a user wishes to be deleted from the system or have data previously entered into the system deleted or edited, this can only be done by submitting such a request to your school or institution’s teacher or administrator. All approved deletion requests will be completed within 30 days.
Links To Other Websites
This and other EduSmart websites contain links to other third-party websites. EduSmart is not responsible for the content or privacy policies of these sites. Such third party websites are independently owned, controlled, and/or managed websites whose content we believe will be of possible interest and value to our subscribers. These other sites may send you their own cookies, collect data, or solicit personal information. While we let you know when you are visiting a site outside of the EduSmart website, we do not control the cookies or the content of third-party sites. Once you leave our servers, the use of any information you provide is governed by the privacy policy of the operator of the site you’re visiting. That policy may differ from ours. If you cannot find the privacy policy of any of these sites via a link from that site’s homepage, you should contact the site directly for more information before providing that site with any personally identifying information. We specifically recommend that children check with their parents or teachers before clicking links to any new sites.
EduSmart’s Assurances Related to the Family Educational Rights Privacy Act
EduSmart understands that many of its agency and institutional clients are subject to the Family Educational Rights Privacy Act (‹FERPA’) and provides this statement of its data protection practices to provide assurance to those clients.
To the extent EduSmart receives from its client’s education records (as that term is defined by FERPA), EduSmart notes that the client chooses what information to provide to EduSmart and also configures who—e.g., employees, students, parents—has access to that information via the EduSmart product/system. In addition, EduSmart offers the following assurances:
- EduSmart provides reasonable security for the education records (and the personally identifiable information contained therein) and only those EduSmart employees and agents with a ‹need to know’ have access to the education records.
- EduSmart does not use education records for any purpose other than the purposes for which the information was provided to EduSmart or in attempting to enhance the usability or efficacy of our products, services and systems.
- EduSmart does not disclose education records to third parties, other than its agents and service providers, except at the direction of the client who provided the education records to EduSmart. EduSmart’s agents and service providers use the education records only to perform services on EduSmart’s behalf.
EduSmart will delete customer records within 30 days after the expiration of the contract. There are various circumstances when EduSmart may deny the request, including (but not limited to) when EduSmart believes that applicable law or court order requires it to retain the education records, when EduSmart believes that retention of the education records is necessary to protect its rights, or when the request extends to backed-up, electronically stored education records, the destruction of which would be unreasonably burdensome.
Regulatory Compliance
EduSmart complies with FERPA, COPPA, and applicable state and international data privacy laws. Details of your rights under each law are available upon request.
Changes to This Privacy Policy
We encourage you to periodically review this Privacy Policy for the latest information on our privacy practices. If we make any material changes to our privacy practices, we will notify you in accordance with applicable law prior to the changes becoming effective.
Cookies and Tracking
We use cookies and similar technologies for authentication and to improve user experience. We do not use cookies for advertising or share cookie-derived data with third parties.
In case of mergers and acquisitions, EduSmart will not transfer customer data without the customer’s approval. If you have additional questions about EduSmart’s data protection practices as they relate to education records received from its clients, please contact Customer Support at support@edusmart.com.
