PRIVACY POLICY

Last update: March 16,2023

Thank you for choosing to be part of our community at EdLight, PBC (“EdLight”, “we”, “us”, or “our”). EdLight provides products and services designed for students to submit work for teachers to review and provide feedback, even in remote or hybrid learning environments, including through a web application available at app.edlight.com, mobile applications, and APIs (collectively, with any related services, the “Services”).

We are providing this Privacy Policy to explain what personal information we collect when you use our Services, how we use it and what rights you have concerning your personal information.  “You” refers to a user of the Services - including a school or school district (each, a “School”), teacher or other educator (“Teacher”), or student (“Student”) – or a user of our website(s), including but not limited to https://edlight.com (the “Site”) or mobile applications.

This Privacy Policy governs the personal information we process through the Services, including personal information regarding Students subject to applicable federal or state education privacy laws (“Student Data”).  This Privacy Policy also applies to any personal information collected through the Site or over the Internet for sales, marketing, and other related business purposes (“Site Data”).

Before using the Site or the Services or otherwise submitting any personal information to us, please review this Privacy Policy carefully and contact us at privacy@edlight.com if you have any questions or concerns. In addition to this Privacy Policy, the Services are compliant with the Family Educational Rights and Privacy Act (“FERPA”) and applicable state laws.

Table of Contents
1. WHAT INFORMATION DO WE COLLECT?
2. How do we use your information?
3. WILL YOUR INFORMATION BE SHARED WITH ANYONE?
4. Do we use cookies and other tracking technology?
5. DOES EDLIGHT SELL OR RENT STUDENT DATA?
6. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?
7. HOW LONG DO WE KEEP YOUR INFORMATION?
8. DO WE COLLECT INFORMATION FROM MINORS?
9. WHAT ARE YOUR PRIVACY RIGHTS AND CHOICES?
10. SECURITY
11. LINKS TO OTHER WEBSITES AND SERVICES
12. DO WE MAKE UPDATES TO THIS POLICY?
13. HOW CAN YOU CONTACT US ABOUT THIS POLICY?

1. What information do we collect?

In Short:  We collect personal information that you and other users, including Students, Teachers, and Schools, provide to us or is otherwise automatically collected through the Site or the Services.

Information You Provide

The personal information you provide depends on whether you are, for example, a Student, a Teacher, or a Site visitor, the context of your interactions with us and the Services, the choices you make and the products and features of the Site or the Services used.  Please note that you can choose whether to share personal information with us, but certain features of the Site or the Services may not function if you do not provide the necessary information. 

Services Data: The personal information we collect when you use the Services (i.e., our web and mobile applications, the Services Data) may include the following categories:

  • Identification Information: We collect your name and email address in order to create a unique account for the Services so that we can communicate with you, and so Teachers and Students can communicate with each other.
  • Photo/Visual Information: We collect images of Student work that Students take through the Services.  Student work is at the center of our beliefs about how Students learn -- without seeing the work that Students do, Teachers cannot effectively support Students.  We help to protect Student privacy when taking images of work by allowing users to crop work down to the relevant parts and providing filters that can obfuscate the background of an image.  However, if the user does not properly crop or filter the images, we may inadvertently collect information included in the background of the images, which may include Personal Information (for example, faces or locations).  Please note that EdLight is not responsible for any Personal Information of users or other individuals inadvertently captured in images uploaded via the Services.
  • Student Data: When Students upload images of their work or otherwise use the Services, we collect personal information that is governed by applicable federal and state education privacy laws.  Such Student Data may include Student’s name, email address, classwork and assessment responses.

Site Data:  The Personal Information we collect when you visit the Site or that you provide directly to us as a part of your relationship with EdLight (i.e., our marketing website edlight.com, the Site Data) may include the following categories:

  • Identification Information: Site visitors may choose to provide their name, email address, school or organization name, location, and role when filling out a form or requesting more information about the Services.
  • Financial Information: If you are a School or Teacher purchasing access to the Services, our payment processor(s) will collect the financial information necessary to process your payments, such as your payment card number and authentication details. Please note, however, that we store only a tokenized version of such information and do not maintain payment card information on our servers.
  • Communication Information: We may collect information when you contact us with questions or concerns and when you voluntarily respond to questionnaires, surveys or requests for market research seeking your opinion and feedback.  Providing communication information is optional to you.
  • Social Media Information: We have pages on social media sites like Instagram, Facebook, Medium, Twitter, and LinkedIn (“Social Media Pages”). When you interact with our Social Media Pages, we will collect Personal Information that you elect to provide to us. In addition, the companies that host our Social Media Pages may provide us with aggregate information and analytics regarding the use of our Social Media Pages.

Information Provided By Other Users Through The Services

Other users may provide us with personal information about you through the Services.  If you are a Student, we may receive personal information, including Student Data, about you from Teachers or Schools.  For example, a Teacher or School must provide Students’ personal information, such as Students’ names and email addresses, so that the Students can create an account on the Services.  Additionally, Teachers provide personal information on Students (i.e., Student Data) in the form of grades and feedback on Student work uploaded through the Services to allow Students to revise their work and learn.  Note that Teacher feedback is not viewable by other Students, only by the Student who submitted the work.

Schools also may provide Student Data and other personal information regarding Students, including potentially sensitive Student Data like disability status.Schools may also choose to upload relevant demographic data for Students, as well as other information about Students in order to better understand trends in Student work and Teacher feedback.  EdLight strives to be a tool for equitable instruction, and we are committed to building tools that help Schools identify and address areas of unserved need. To do this, we need to know enough about Students to identify gaps in equity, for example by providing Schools to identify disparities by race, English Learner status, gender, age, or income level.

Information Provided By Third Parties Through The Services
If you use an integration such as Google Classroom,  we may receive information from the integration partner, such as your name, email address and assignments.

Information Automatically Collected
We automatically collect certain information when you visit, use or navigate the Site and the Services. This information may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use the Site or the Services and other technical information. This information is needed to maintain the security and operation of the Site and the Services, and for our internal analytics and reporting purposes.

In particular, the following information is created and automatically logged in our systems:

  • Log Information: Information that your browser automatically sends whenever you visit the Site or use the Services. Log Information includes your Internet Protocol address, browser type and settings, the date and time of your request, and how you interacted with the Site or the Services.
  • Cookies Information: Please see the “Cookies” section below to learn more about how we use cookies.
  • Device Information: Includes name of the device, operating system, and browser you are using. Information collected may depend on the type of device you use and its settings.
  • Usage Information: We collect information about how you use the Site or the Services, such as the types of content that you view or engage with, the features you use, the actions you take, and the time, frequency, and duration of your activities.
  • Location Information: We derive a rough estimate of your location from your IP address.
  • Email Open/Click Information: We may use pixels in our email campaigns that allow us to collect your email and IP address as well as the date and time you open an email or click on any links in the email.

2. How do we use personal information?

Student Data: We use Student Data only to provide the Services and as permitted or required by applicable state and federal laws and our agreements with Schools and the Terms of Service. We do not use Student Data to market to Students or for the purposes of targeted advertising.

Other Personal Information: We may use other personal information for the following purposes:

  • To provide the Services;
  • To respond to your inquiries, comments, feedback, or questions;
  • To send administrative information to you, for example, information regarding the Services and changes to our terms, conditions, and policies;
  • To contact Site visitors to tell them about products or services we believe may be of interest. You may opt out of our marketing communications as described in the “What Are Your Privacy Rights And Choices?” section below;
  • To analyze how you interact with our Services;
  • To maintain and improve the Services;
  • To develop new products and services;
  • To conduct Research;
  • To prevent, identify, investigate and deter fraud, criminal activity, or misuses of the Services, and to ensure the security of our IT systems, architecture, and networks; and
  • To comply with legal obligations and legal process and to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or other third parties.

Aggregated Information: We may aggregate personal information and use the aggregated information to analyze the effectiveness of the Site and the Services, to improve and add features to the Site and  the Services, and for other similar purposes.  From time to time, we may analyze the general behavior and characteristics of users and share aggregated information like general user statistics with customers, prospective customers and business partners. We may collect aggregated information through the Site or the Services, through cookies, and through other means described in this Privacy Policy.

3. Will your information be shared with anyone?

In Short:  We only share personal information to provide the Services, to comply with laws, to protect your or our rights, to fulfill business obligations, as explained at the time you provide the information, or as otherwise described below.

In certain circumstances we may share the categories of personal information described above without further notice to you, unless required by the law, with the following categories of third parties:

  • Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may share personal information with third-party companies and individuals that provide services on our behalf or help us operate our Services, including providers of hosting services, cloud services, and other information technology services providers, email communication software and email newsletter services, advertising and marketing services, payment processors, customer relationship management and customer support services, analytics services, lawyers, bankers, auditors, insurers.
  • Business Transfers: If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of all or a portion of our assets, or transition of service to another provider (collectively a “Transaction”), your personal information and other information may be transferred as part of the transaction.  Your personal information may also be shared in the diligence process with counterparties and others assisting with the Transaction and transferred to a successor or affiliate as part of that Transaction along with other assets. Any successor entities will act in accordance with this privacy policy or offer users the option to have their personal information deleted.
  • Legal Requirements: If required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, including to meet national security or law enforcement requirements, (ii) protect and defend our rights or property, (iii) prevent fraud, (iv) act in urgent circumstances to protect the personal safety of users, or the public, or (v) protect against legal liability.
  • Other Users: Certain actions you take on the Services may be visible to other users of the Services, and other users may be able to communicate with you through the Services and view your profile.  For example, when you upload or provide feedback to Student work through the Services, that information will be made available to other users authorized to view it.  You acknowledge that by sharing Student work or feedback or otherwise using the Services, you make the information shared available to other users (although we do not share this information with users outside of your School) and that we cannot control, and shall not be responsible for, any use other users make of such information.

4. Do we use cookies and other tracking technology?

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. We use these cookies to operate and administer the Site and the Services, gather usage data on the Site and the Services, and improve your experience. A “cookie” is a piece of information sent to your browser by a website you visit. Cookies can be stored on your computer for different periods of time. Some cookies expire after a certain amount of time, or upon logging out (session cookies), others survive after your browser is closed until a defined expiration date set in the cookie (as determined by the third party placing it), and help recognize your computer when you open your browser and browse the Internet again (persistent cookies). For more details on cookies please visit All About Cookies (https://www.allaboutcookies.org/).

On most web browsers, you will find a “help” section on the toolbar. Please refer to this section for information on how to receive a notification when you are receiving a new cookie and how to turn cookies off. Please see the links below for guidance on how to modify your web browser’s settings on the most popular browsers:

  • Internet Explorer (https://support.microsoft.com/en-us/topic/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d#ie=ie-11)
  • Mozilla Firefox (https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop?esab=a&s=cookies&r=6&as=s&redirectslug=enable-and-disable-cookies-website-preferences&redirectlocale=en-US)Mozilla Firefox
  • Google Chrome (https://support.google.com/accounts/answer/61416?hl=en)
  • Apple Safari (https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac)

Please note that if you limit the ability of websites to set cookies, you may be unable to access certain parts of the Site or the Services and you may not be able to benefit from the full functionality of the Site or the Services.

Advertising networks may use cookies to collect Personal Information. Most advertising networks offer you a way to opt out of targeted advertising. If you would like to find out more information, please visit the Network Advertising Initiative’s online resources at http://www.networkadvertising.org and follow the opt-out instructions there.

If you access the Site or the Services on your mobile device, you may not be able to control tracking technologies through the settings.

Analytics: We use Google Analytics, a web analytics service provided by Google, Inc. (“Google”), on the Site. Google Analytics uses cookies to help us analyze how users use the Site and enhance your experience when you use the Site. For more information on how Google uses this data, go to www.google.com/policies/privacy/partners/.

Third Party Tracking and Do-Not-Track Features: We and our third party service providers may use cookies or other tracking technologies to collect information about your browsing activities over time and across different websites following your use of the Site and use that information to send targeted advertisements.

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. No uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Policy.

5. Does EdLight sell or rent student data?

No.

EdLight does not, and will never, sell Student Data.

6. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

Our servers are located in the United States and the Services are targeted at U.S.-based users. If you are accessing the Services from outside the U.S., please be aware that your information may be transferred to, stored, and processed by us in our facilities and by those third parties with whom we may share your Personal Information (see "WILL YOUR INFORMATION BE SHARED WITH ANYONE?" above) in other countries.

7. HOW LONG DO WE KEEP YOUR INFORMATION?

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (such as tax, accounting or other legal requirements).

When personal information is no longer necessary for the purposes set out in this Privacy Policy, or when required by law, we will delete the personally identifiable information, or, if this is not possible (for example, because your personal information has been stored in cold backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

8. DO WE COLLECT INFORMATION FROM MINORS?

Our marketing website (edlight.com), the Site, is not directed to children who are under the age of 13, and the Site Data does not knowingly contain any Personal Information collected from children under 13.

Our web and mobile applications (app.edlight.com), the Services, exist to help Students learn, which requires collecting information from Students, some of whom may be under the age of 13 (“Children” or, each, a “Child”).  We are required under the Children’s Online Privacy Protection Act (“COPPA”), with limited exceptions, to obtain verifiable parental consent in order to collect, use, or disclose personal information through the Services from Children. COPPA allows the Child’s School to obtain consent for the online collection of personal information from Children who are Students of the School.

If a Child wants to use the Services, he/she must first obtain an account from his/her Teacher or School. Before an account is provided, we require that the Teacher (if using a Teacher Account, as described in the Terms of Service) or School (on behalf of the Child’s parent or legal guardian) (a) consent to the collection, use and disclosure of personal information of the Child through the Services, including by third parties, in accordance with this Privacy Policy, and (b) agree that the Child’s online activities are subject to the Terms of Service.

As required under COPPA, we allow parents or legal guardians certain choices regarding the personal information submitted by their Children. Parents should make any permitted requests with the School and have the School, as the parent’s agent, pass on those requests to EdLight. We may rely on the instructions that we receive from the School that we reasonably believe are given by a Child’s parent to the School. For example, if a representative from the Child’s School contacts us and provides the account information we request, we may assume that the person calling is acting on behalf of the Child’s parent or legal guardian.

We provide parents or legal guardians the following choices with respect to the collection, use, retention and disclosure of personal information. A Child’s registration information is always accessible to the parent. A parent has the right to review her Child’s personal information, which the parent can obtain by contacting her Child’s School. After reviewing the Child’s personal information, the parent may ask us to update or delete the Child’s personal information by requesting such changes through the Child’s School. A parent may prohibit us from sharing a Child’s personal information with a third party by requesting such prohibition through the Child’s School.

If a parent or legal guardian chooses to prohibit any future collection, use or disclosure of the Child’s personal information, the parent may do so by terminating the Child’s account through the School, and requesting the deletion of the Child’s personal information through the School. Upon receiving such request from the Child’s School, we will delete the Child’s account information from our live databases and all the information and data stored for such account. We will not have any liability whatsoever for any termination of the account or related deletion of the Child’s personal information. When we delete personal information, it will be deleted from our active databases but may remain in our archives.

9. WHAT ARE YOUR PRIVACY RIGHTS AND CHOICES?

In Short:  You may review, change, or terminate your account at any time.

Students and parents have the right to request access to the personal information we collect from them, change that information, or delete it. To request to review, update, or delete your personal information, please submit a request to the contact information below. If you would at any time like to review or change the information in your account or terminate your account, you can contact us at info@edlight.com.

Terminating Your Account

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, some information may be retained in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Service and/or comply with legal requirements.

Opting Out of Email Marketing

You can unsubscribe from our marketing email list at any time by clicking on the unsubscribe link in the emails that we send or by contacting us using the details provided below. You will then be removed from the marketing email list – however, we will still need to send you service-related emails that are necessary for the administration and use of your account.

Access & Correcting Erroneous Student Data

Under FERPA, a School must provide a parent or legal guardian with an opportunity to inspect and review his or her Child’s education records within 45 days following its receipt of a request. A School is required to provide a parent, or eligible Student, with copies of education records, or make other arrangements, if a failure to do so would effectively prevent the parent from obtaining access to the records.

Requests to review Student Data from parents or eligible Students may be directed to privacy@edlight.com. In the event there is any erroneous data contained in the Student Data, EdLight will advise parents and eligible Students to contact the School to update their information in their Google user profile.

10. SECURITY

You use the Site and the Services at your own risk. We have implemented and maintain commercially reasonable information technology security measures designed to protect personal information from unauthorized disclosure to or access by a third-party. Your account and associated information is protected by a password, which you should keep secret at all times. We encrypt password information stored in our databases. Additionally, all interactions with the Services are encrypted in transit with TLS 1.2 grade encryption or better. Although we make concerted efforts to protect personal information and maintain security, it is not 100% guaranteed. Please keep this in mind when disclosing any personal information via the Internet. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Site and Services, or third party websites.

11. LINKS TO OTHER WEBSITES OR SERVICES

The Site or Service may contain links to other websites or services not operated or controlled by Company, including social media services (“Third Party Sites”). The information that you share with Third Party Sites will be governed by the specific privacy policies and terms of service of the Third Party Sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact the Third Party Sites directly for information on their privacy practices and policies.

12. DO WE MAKE UPDATES TO THIS POLICY?

In Short:  Yes, we will update this Privacy Policy as necessary to stay compliant with relevant laws and account for changes in the Services.

We may update this privacy policy from time to time. The updated version will be indicated by an updated “Revised” date and the updated version will be effective as soon as it is accessible. If we make material changes to this Privacy Policy, we will notify you by prominently posting a notice of such changes on login Site and, if required by applicable law, by directly sending you a notification. By continuing to use our Service after we have prominently posted an updated Privacy Policy, you consent to the revised Privacy Policy and practices described in it.

13. HOW CAN YOU CONTACT US ABOUT THIS POLICY?

If you have questions or comments about this Privacy Policy, you may email us at privacy@edlight.com or by post to:

EdLight, PBC
155 Federal St, Suite 700
Boston, MA 02110