Crudspa Foundation - Privacy Notice

Introduction

Crudspa Foundation is committed to protecting the privacy of our users, particularly students, educators, and administrators who use our SaaS-based products. This Privacy Notice explains how we collect, use, and protect personal information and under what circumstances we may share or sell that information.

Information We Collect

We may collect the following types of information when you use our services:

Personal Information: This includes names, email addresses, student IDs, and other identifiers provided during the registration or use of our services.
Usage Data: We collect data on how our services are accessed and used, including information about user interactions, features accessed, and performance metrics.
Device Information: Information about the devices used to access our services, such as IP addresses, browser type, and operating system, may be collected.
Content Data: Any data entered or uploaded into our services, such as assignments, grades, communications, and other educational materials.

How We Use Information

The information we collect is used for the following purposes:

To Provide and Improve Our Services: We use the data to operate, maintain, and enhance the functionality and performance of our products.
To Communicate: We may use your contact information to send important notices, updates, and other relevant communications related to our services.
To Ensure Compliance: We may use the data to comply with legal obligations, resolve disputes, enforce our agreements, and protect the rights and safety of our users.

Crudspa Foundation does not share or sell any personal information except under the following circumstances:

Data Use Agreements (DUAs): We may share or sell data if a Data Use Agreement (DUA) is in place with the school district. These agreements outline the specific terms under which data may be shared or sold, ensuring that all actions comply with applicable laws and district policies.
Legal Requirements: We may disclose data to comply with legal obligations, such as responding to a subpoena, court order, or other governmental requests.
Protection of Rights: We may share data to protect the rights, property, or safety of Crudspa Foundation, our users, or others, as required or permitted by law.

Data Security

We take the security of your data seriously and implement a variety of security measures to protect it, including:

Encryption: Data is encrypted both in transit and at rest to safeguard it from unauthorized access.
Access Controls: Access to personal data is restricted to authorized personnel only, based on role and responsibility.
Regular Security Audits: We conduct regular audits and assessments of our security practices to identify and mitigate potential risks.

Data Retention

We retain personal data for as long as necessary to provide our services and fulfill the purposes outlined in this notice, unless a longer retention period is required by law or contract. Once data is no longer needed, it is securely deleted or anonymized.

Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: The right to request access to the personal data we hold about you.
Correction: The right to request corrections to any inaccurate or incomplete data.
Deletion: The right to request the deletion of your data, subject to legal and contractual obligations.
Data Portability: The right to request a copy of your data in a structured, commonly used, and machine-readable format.
Objection: The right to object to the processing of your data in certain circumstances.

To exercise these rights, please contact us at support@crudspa.org.

Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify users of any significant changes by posting the updated notice on our website and/or through other communication channels.

Contact Us

If you have any questions or concerns about this Privacy Notice or our data practices, please contact:

Privacy Officer
Crudspa Foundation
Jason Looney jason@crudspa.org