Privacy Policy | Strived.io

1. Introduction

strived.io is a Software as a Service (SaaS) provider with a mission to empower educators and students by providing innovative tools while maintaining the highest standards of data privacy and security. We recognize the sensitive nature of student data and the trust placed in us by educational institutions, parents, and students.

This comprehensive privacy policy outlines our unwavering commitment to protecting personal information and ensuring compliance with all relevant educational and data protection regulations.

Our approach to privacy is guided by the following principles:

Transparency: We are open about our data practices and provide clear information to our users.
Purpose Limitation: We collect and use data only for specific, legitimate educational purposes.
Data Minimization: We limit data collection to what is necessary for our services.
Accuracy: We strive to maintain accurate and up-to-date information.
Storage Limitation: We retain data only for as long as necessary or required by law.
Integrity and Confidentiality: We implement robust security measures to protect data.
Accountability: We take responsibility for complying with these principles and can demonstrate this compliance.

2. Information We Collect

2.1 Types of Data Collected

We only collect the data that is provided to us and this data may include:

a) Personal Identifiers: Full name, Date of birth, Student ID number, Social Security Number (last four digits only, if required by the educational institution)

b) Contact Information: Email address, Phone number, Mailing address

c) Educational Records: Grades and transcripts, Attendance records, Test scores and assessment results, Course enrollment information, Graduation status

d) Behavioral Data: Disciplinary records, Special education status and related documentation, Extracurricular activities participation

e) Technical Data: IP address, Browser type and version, Device information, Log data related to system usage

2.2 Methods of Data Collection

a) Direct Collection from Educational Institutions: Bulk data transfers from school information systems via data dumps. Manual input by authorized school personnel through CSV files or browser input.

b) Integration with Other Authorized Educational Software: API connections with learning management systems. Secure file transfers from partnered educational technology providers.

c) Cookies and Similar Technologies: We use cookies to enhance user experience and collect aggregated usage statistics. Users can control cookie settings through their browsers.

2.3 Legal Basis for Data Collection

Contractual necessity: To fulfill our service agreements with educational institutions
Legitimate interests: To improve our services and support educational objectives
Legal compliance: To meet obligations under educational and data protection laws
Consent: Where required by law, we obtain appropriate consent for specific data processing activities

3. How We Use the Information

We are committed to using student data solely for educational purposes. Specifically, we use the collected information for:

3.1 Providing and Improving Educational Services

Delivering personalized recommendations, generating progress reports and performance analytics, facilitating communication between teachers and administrators, conducting research to enhance our educational tools and methodologies.

3.2 Analyzing Student Performance

Identifying areas where students may need additional support, recognizing patterns in learning behaviors and outcomes, providing insights to educators and administrators for instructional planning.

3.3 Customizing Learning Experiences

Adapting content difficulty based on individual student progress, recommending additional resources tailored to student needs, personalizing user interfaces to enhance engagement.

We strictly prohibit the use of student data for: Marketing or advertising purposes unrelated to educational services, creating student profiles for non-educational purposes, selling or renting student information to third parties.

4. Data Sharing and Disclosure

We recognize the importance of maintaining the confidentiality of student data. We may share student data with: School Administrators and Authorized Teachers, Third-party Service Providers (bound by strict confidentiality agreements), Researchers and Analysts (only with aggregated, de-identified data), Legal and Regulatory Authorities (when required by law).

We want to emphasize that under no circumstances do we sell, rent, or trade student personal information to any third parties for commercial purposes.

5. Data Retention and Deletion

We are committed to retaining student data only for as long as necessary to fulfill the purposes for which it was collected.

Active Student Data: Retained for the duration of the student's enrollment plus one academic year
Inactive Student Data: Retained for three years after the student's last activity
Aggregated, De-identified Data: May be retained indefinitely for research and system improvement

The data deletion process is typically completed within 90 days of the deletion request or contract termination with backups within 180 days.

6. User Rights

We respect the rights of students, parents, and guardians regarding their personal data, including:

Right to Access – Request access to personal information
Right to Rectification – Request corrections to inaccurate data
Right to Erasure – Request deletion of data
Right to Restrict Processing – Limit processing in certain circumstances
Right to Data Portability – Receive data in a machine-readable format
Right to Object – Object to processing for direct marketing

We will respond to all legitimate requests within 30 days.

7. Data Protection Measures

Technical Measures: All data is encrypted in transit and at rest using industry-standard protocols (TLS 1.3, AES-256). Role-based access control (RBAC) and multi-factor authentication (MFA) for all system access.

Organizational Measures: All employees undergo regular security awareness training and sign confidentiality agreements. Background checks are conducted on all employees who have access to student data.

Physical Security: We use AWS and Google Cloud data centers that are SOC 2 and ISO 27001 certified.

Compliance: FERPA, COPPA, GDPR where applicable, state-specific student data privacy laws.

8. Updates to the Privacy Policy

We may update this policy periodically to reflect changes in our practices, technologies, or regulatory requirements. For significant changes, we will provide a 30-day grace period before the new policy takes effect. We maintain an archive of previous versions of the privacy policy.