Last Updated and Effective: March 20, 2018
Information You Provide
When Customers decide to use Ellevation, they provide us with data necessary to create a district account for staff users. This includes minimally required information about their students such as student first and last name and ID#, used for school purposes to allow Customers to view and monitor student activity within Ellevation.
Customer may choose to upload additional student information onto Ellevation, such as demographic, assessment, schedule, and instructional data , as well as comments on their student records. This information is used only for our Customers’ internal school purposes.
In addition, Customers may share comments on our instructional materials with other educators. Customers may also provide us with information when they contact us with questions, for troubleshooting or other customer service-related requests.
Information We Collect Automatically
When you use Ellevation, our servers automatically record information sent from your browser (“Log Data”). Log Data may include information such as your computer’s Internet Protocol (“IP”) address, browser type and machine model, pages of the Website that you visit, the time spent on those pages, the referring URL, and access times and dates. We use this information to monitor, analyze use of and administer Ellevation, and to better tailor it to your needs.
To collect this information, we use certain technologies including:
A cookie is a small data file sent from a website or application and stored on your computer or device. Cookies allow us to recognize your browser when you return to our Website, and to remember your login information. Cookies also allow us to serve certain features, to better understand how you interact with Ellevation, and to monitor aggregated usage. You can set your browser to detect some cookies, to stop accepting cookies or to prompt you before accepting a cookie. To learn more about browser cookies, including how to manage or delete them, look in the Tools, Help or similar section of your web browser, or visit http://allaboutcookies.org.
We use third party service providers to assist us in collecting and understanding Log Data.
By using Ellevation, you agree to our use of these tracking technologies.
How We May Use Your Information
Customer retains ownership and control of all personally identifiable student data that Ellevation maintains. At no point is Ellevation the owner of such data, nor at any point does Ellevation control such data.
We do not sell or rent personal information.
We use and disclose personal information only for the purposes of providing Ellevation to our Customers as described above, and as follows:
- As directed by our Customers to provide them with Ellevation features and services
- To our third party service partners to permit them to provide features and services on our behalf (see Third Party Service Providers section below);
- To investigate a suspected violation of the Terms of Service, suspected fraud or other unlawful activity;
- As may be required by law or as ordered by a court, where legally permissible, we shall notify Clients and shall work with Clients to seek to limit the scope of the required disclosure, as further described below;
- With your consent and as permissible under applicable laws and regulations.
In the event that we receive a court or other law enforcement request, including but not limited to an administrative subpoena or judicial warrant, for access to, use of, or inspection of Customer data, including Customer’s student data, wherever legally permissible, we will not act directly on such request, but will instead promptly refer such requests directly to Customer. To the extent we are legally required to provide the information requested prior to or in addition to such referral, wherever legally permissible we will promptly notify the Customer of the request and of Ellevation’s intent to comply with the request.
We may de-identify information in accordance with applicable law, including the standards set forth in the Family Educational Rights and Privacy Act (FERPA), and we may use de-identified information, including aggregated, de-identified data for a variety of purposes subject to applicable law, including:
- To improve our educational products for adaptive learning purposes and for customizing the student experience;
- To demonstrate the effectiveness of Ellevation, including in our marketing materials; and
- To develop and improve our educational products.
Third Party Service Providers
How You Can Access and Modify Your Information
If you would like to review, correct, update, or request that we delete personal information you have provided to us, you may do so by accessing the dashboard within the Ellevation platform. Since Ellevation is used at the discretion of our Customers, parents, guardians, and eligible students must work directly with their school or district to review or modify information in their education record that may be stored on Ellevation. While we can provide student records to verified parents and guardians, Ellevation’s Customers are the record of source for student information. Any modifications undertaken by Ellevation would be overwritten at the next data refresh cycle with the Customer which is why the school or district must be involved with any student record modifications. Any valid student record modification request presented to Ellevation will be relayed to the Customer, but we strongly recommend working directly with the school or district for quickest resolution.
If you have provided us with your information in order to receive information about our products or to subscribe to email updates, we may send you email marketing messages. You have the right to opt-out of receipt of those messages, and may do so at any time by clicking on the unsubscribe link that appears at the bottom of each message, or by contacting us at email@example.com.
We retain your information as long as you retain an active account with Ellevation as part of an active Agreement. Prior to termination of the Agreement and upon written request from Customer, Ellevation will provide Customer with a one-time, delimited file export of its data from the Services via SFTP. Within 45 days of termination, or within 14 business days of receipt of written request from Customer, Ellevation will securely destroy Customer’s personally identifiable student data, including such data held in Ellevation’s backup systems.
We will retain de-identified data for the purposes described above.
We are ISO 27002 compliant, an internationally recognized set of information security standards. As such, security measures to maintain the confidentiality, security, and integrity of the data entrusted to Ellevation have been deployed. These security measures, both technical and procedural, are continuously being monitored, tested, evaluated, and improved. We deploy commercially reasonable security precautions intended to protect against unauthorized access to any of our Customer data. We store data in secure server and cloud-based environments that use firewalls, VPNs, event logging, and other industry-standard protections in an effort to monitor and prevent access from outside intruders. We also encrypt the data in transit, require unique account credentials, and limit data access. Not all security risks are reasonably foreseeable, however, and Ellevation is not responsible for the consequences of security incidents that are not reasonably foreseeable and not reasonably within its control.
Non-material changes will become effective when posted in Ellevation. The “last updated” date at the top of this policy indicates when it was last revised.
For additional information regarding our privacy practices, please contact us at: firstname.lastname@example.org