1. Our Commitment to Privacy
ClassClarus (“we,” “us,” or “our”) prioritizes the privacy of educators and students. We do not sell user data to any third party, nor do we transfer data to third parties for marketing or commercial purposes.
2. Information We Collect
We collect information necessary to provide educational tools, maintain security, and ensure FERPA compliance.
Account Data
When you authenticate via Google, we collect:
- First name and last name
- Email address
- Google profile photo URL
When you authenticate via email, we collect:
- Email address
- Optional: First name and last name are optionally set by the user
- Optional: Avatar image is optionally set by the user
Student and Class Data
The following data is optionally created or provided by the teacher to manage their classroom about their students. This data is only visible to the teacher, their students, and their parents or guardians, and school/district administrators:
- First and last names
- Roster numbers
- Seat assignments
- Gender
- Behavior records
- Academic metrics: grades, reading scores, tasks, and assignments
- Administrative data: attendance and expectations
- Point redemption and reward records
- Group assignments
- Team assignments
Third-Party Integrations
For users who sync with Google Classroom, we import class rosters containing student names and email addresses only. This information is required to authenticate and authorize the student when they login.
Usage Logs
To comply with FERPA audit requirements and ensure platform security, we log:
- IP address and User ID
- Access timestamps
- Specific data records viewed by the user
3. Family Educational Rights and Privacy Act (FERPA)
ClassClarus is designed to meet FERPA requirements regarding the protection of student education records.
- Administrative Control: Schools and districts maintain absolute control over their data. Administrators have the authority to manage, modify, or delete data at any time.
- Data Access & Transparency: All student data is immediately available to authorized users, including school/district administrators, the student's assigned teacher(s), and their verified parents or guardians.
- Auditability: Our usage logs provide a clear record of which authorized users have accessed specific educational data, supporting school compliance audits.
4. Data Security and Infrastructure
We employ rigorous technical measures to ensure your data remains secure:
- Storage: All data is stored on Amazon Web Services (AWS) in the US East-1 region.
- Encryption at Rest: Data stored on our servers is encrypted at rest using industry-standard AES-256 protocols.
- Encryption in Transit: All communication between the server and client is encrypted via TLS and HTTPS.
5. Data Retention and Deletion
Users maintain control over the lifecycle of their data.
- Immediate Deletion: Upon a request for deletion by an authorized official, data is removed from our active databases immediately.
- Data Portability: Users may export their data in our supported format prior to deletion if they wish to retain records.
6. Children's Privacy (COPPA)
We comply with the Children's Online Privacy Protection Act (COPPA). We rely on the school's authorization to act on behalf of parents to provide consent for the collection of student information for educational purposes, known as School Consent.
7. Contact Us
For questions regarding security protocols or compliance, please contact:
ClassClarus
Email: admin@classclarus.com
ClassClarus