Edia Learning, Inc.
Revised: September 9, 2021
Protecting Personal Information is Our Priority
Edia Learning, Inc. (“Edia,” “we,” “us,” or “our”) is committed to protecting the privacy of our users and supporters (“you” or “your”). We respect the confidential nature of the personally identifiable information we collect or develop that relates to, describes, or could reasonably be linked to you (“Personal Information”) from using our educational technology platform, which includes but is not limited to our websites, mobile applications, and any associated social media sites or pages (collectively, the “Site”) and various tools, content, features, products, services, and other materials available in connection with the Site (our “Services”).
Personal Information We Collect
We collect and maintain the minimal amount of Personal Information necessary to provide an excellent experience for our users. We will not sell, trade, or rent your Personal Information. The types and sources of Personal Information we collect are listed below:
Name and email address. To create an account, teachers and students must provide their names and email addresses. Names are used to associate students with their work (e.g. “Ben scored 87% on this assignment”), and email addresses are used for unique login, password recovery, and support requests. This information also allows us to comply with FERPA requests.
Assignment Data. Edia allows teachers to create assignments that students can complete. To this end, we store information about the configurations of assignments that teachers create (i.e. the name, format, options, lessons, due date, and duration) and student progress on these assignments (i.e. the answers that are submitted and the problems that are attempted, as well as associated timestamps).
Payment Details. When you purchase certain Services, we may collect data related to your payment method (e.g. valid credit card number, card brand, expiration date). We do not view or store your credit card information. This is handled by Stripe, a third-party payment processor.
Automatically Collected Data. We automatically collect certain technical usage information (“Usage Data”) when you use the Site or our Services. Usage Data includes the information that your web browser or mobile application automatically sends to our servers whenever you visit the Site, and may include your web request, IP address, operating system, browser type, access date and time, the address of a referring website, platform type, click history, pages viewed and the order of those pages, the amount of time spent on particular pages, and whether you opened an email. In addition, we may use third party analytics to collect Usage Data regarding the online usage patterns of our users so we can continually improve our Services.
Personal Information We Use and Share
We do not sell, trade, or rent your Personal Information. We use the Personal Information we collect about you to provide you with the best experience. More specifically, this information is used to:
Colleagues in Your District. If you are a teacher, to help you collaborate through the Site and our Services, we may share your name and actions on the Site with colleagues in your district. We will NOT share the names and actions of your students.
Service Providers. Targeted advertising is not permitted on the Site. We work with vendors, service providers, and other entities to help us provide our Services by performing tasks on our behalf. We may need to share or provide information to them to help them perform these business functions, for example sending emails on our behalf, database management services, database hosting, and security. We will only provide the information they need to deliver our Services, and such third parties are prohibited from using your Personal Information for other purposes.
Advertisers. To provide the Site and our Services free to teachers and students, we may display ads for relevant products or services (such as textbooks, tutoring services, and post-secondary programs) on the Site. Advertisers do not have access to your Personal Information and cannot target specific users by information you provide to Edia. We will not sell, rent, or trade your Personal Information. Ads on the Site may contain links to other websites of interest. If you use a link to leave the Site, we do not have control over the other website and we cannot be responsible for protecting the privacy of any information you provide to the other website.
Legal Compliance. Your Personal Information may be shared to the fullest extent permitted by law if we believe the release of your information is reasonably necessary to respond to legal process, a subpoena, or as similar request for information, a court order, or other legal obligation; cooperate with a request from law enforcement or other governmental agency in connection with efforts to investigate, prevent, or take other action regarding illegal activity, suspected fraud, or other wrongdoing; protect and defend our rights, property, or safety, or the rights, property, or safety of users of the Site or our Services; or detect, investigate, and help prevent data security threats or other malicious activity.
Web Analytics. We use analytics services to help us understand and improve how our Services are being used. Web analytics is the collection, reporting, and analysis of information about how you interact with the Site or our Services over time.
Sale or Merger. If we reorganize or otherwise transfer part or the whole of the Site, our Services, or our assets to another organization (such as in the course of a merger, dissolution, liquidation), your Personal Information may be shared with the successor entity.
Right to Access Your Personal Information
You may request access to your Personal Information by submitting a written request by email to email@example.com for the following:
Upon receipt of a verifiable request from you, we will promptly take steps to deliver the requested information to you in a user-friendly readable and transferable format. Your request must include enough details to allow us to properly understand, evaluate, and reply. If we are unable to verify your identity, we will not release your Personal Information or comply with your request.
Right to be Forgotten (deleting your account)
You may request that we delete any (or all) of your Personal Information that we collected. Upon receipt of a verifiable request from you, we will take steps to delete your Personal Information from our records and direct any service providers to delete your Personal Information from their records or notify you that your request for deletion cannot be honored. We may deny your deletion request if we believe that retaining your information is necessary to complete the transaction, fulfill our obligations, or keep a record of the transaction for which we collected your Personal Information; comply with legal obligations or any applicable law or regulation; detect security threats, protect against fraud, or other illegal activity; or otherwise use your information in a lawful manner for internal purposes only in a way that is compatible with the business context in which you provided the information.
How We Store and Protect Personal Information
Storage and Processing. Any information collected on the Site or through our Services is stored and processed in the United States. If you use our Services outside of the United States, you consent to have your data transferred to the United States.
Keeping Information Safe. We maintain strict administrative, technical and physical procedures to protect information stored in our servers, which are located in the United States. We use highly rated hosting providers (AWS) with onsite 24-hour security and teams of experts dedicated to monitoring network security. Access to information is limited through user/password credentials by the administrator of the Site only. When you enter any information anywhere on the Site, we encrypt the transmission of that information using secure socket layer technology (SSL/TLS) by default. We ensure passwords are stored and transferred securely using encryption, salted hashing, and key stretching to help prevent brute force password cracking.
Although we make concerted good faith efforts to maintain the security of Personal Information, and we work hard to ensure the integrity and security of our systems, no practices are 100% immune, and we can’t guarantee the security of information. Outages, attacks, human error, system failure, unauthorized use, or other factors may compromise the security of Personal Information at any time. If we learn of a cybersecurity event that may involve your Personal Information, we will attempt to notify you electronically (subject to any applicable laws) so that you can take appropriate protective steps; for example, we may post a notice on our homepage (www.edia.app) or elsewhere on the Site, and may send an email to you at the email address you have provided to us.
Information About Children
We are committed to providing a safe, secure, and educational experience for all users of the Site and our Services. We will never knowingly request Personal Information from or directly market to a child under the age of 13 without prior verifiable consent from such child’s parent or legal guardian (“Parental Consent”). If you are under the age of 13, you are not allowed to use our Services or create an account without Parental Consent. If you are at least 13 years old but not yet 18 years of age, we encourage you to obtain permission from your parent or guardian to access the Site and use our Services.
IF YOU ARE UNDER THE AGE OF 13, DO NOT SUBMIT ANY PERSONAL IDENTIFIABLE INFORMATION THROUGH THE SITE.
With Parental Consent, we may collect information from children under the age of 13 such as name, email address, and other account information. With proper identification, parents and legal guardians may revoke Parental Consent or review, correct, and request deletion of their child’s information stored in our databases by contacting us by email at firstname.lastname@example.org. When Parental Consent is revoked, we will stop collecting, using, processing, or disclosing information from that child. We encourage parents and legal guardians to monitor their child’s online activity and to help enforce our privacy practices.
If you are under 18 years of age and reside in California, you have the right to request removal of unwanted information that you publicly post on the Site. To request removal of such information, please contact us by email at email@example.com and include a statement that you reside in California. While we will make sure the information is not publicly displayed on the Site, the information may not be completely or comprehensively removed from our databases.