Privacy Policy

The Service is provided to school districts, educational agencies, and similar institutions ("Institutions") for use by their authorized personnel. Much of the information processed through the Service consists of student records and related education information that we process on behalf of, and in accordance with the instructions of, the relevant Institution. With respect to that information, the Institution is the responsible party, and we act as its service provider and as a "school official" with a legitimate educational interest under the Family Educational Rights and Privacy Act ("FERPA"). Our processing of student records is governed by our written agreement with the Institution, which controls over this Privacy Policy to the extent of any conflict concerning such records.

This Privacy Policy describes our own practices with respect to account information and information collected through our websites, for which we are responsible.

Information you provide. When an Institution authorizes you to use the Service, we collect the information used to create and administer your account, such as your name, work email address, and assigned role. We also collect information you provide when you contact us for support or otherwise communicate with us.

Information collected automatically. When you use the Service, we automatically collect certain technical information, including log data, device and browser information, IP address, and information about your activity within the Service, including through cookies and similar technologies as described below.

Information processed on behalf of Institutions. The Service processes student records and related information that Institutions and their authorized users enter into or make available through the Service. We process this information solely on behalf of, and as directed by, the Institution.

We use information for the following purposes:

• to provide, maintain, secure, and support the Service;
• to authenticate users and administer accounts;
• to monitor, detect, investigate, and prevent security incidents, fraud, and misuse, and to maintain records required for security, audit, and compliance purposes;
• to communicate with you regarding the Service, including administrative and support messages; and
• to comply with applicable law and enforce our agreements.

We process student records only to provide the Service to the relevant Institution and as otherwise permitted by our agreement with that Institution.

We do not sell personal information. We may disclose information as follows:

• Service providers. We share information with third parties that perform services on our behalf, such as cloud hosting and infrastructure and transactional communications. These providers are bound by obligations to protect the information and to use it only as necessary to perform services for us.
• Institutions. We make information available to the Institution that authorized your account and to users authorized by that Institution.
• Legal and safety. We may disclose information where required by law or legal process, or where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Cordika, our users, or others.
• Business transfers. We may disclose information in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case the recipient will remain bound by commitments consistent with this Privacy Policy.

We recognize the sensitivity of student information and handle it in accordance with applicable law, including FERPA and the California Student Online Personal Information Protection Act ("SOPIPA"). We do not sell student personal information, use it for targeted advertising, or use it to create a profile of a student except in furtherance of authorized educational purposes. We use and disclose student personal information only as permitted by our agreement with the relevant Institution and by applicable law. Requests by parents, guardians, or eligible students to access, correct, or delete a student's records are directed to and determined by the Institution, which maintains those records; we assist the Institution in fulfilling them.

We use cookies and similar technologies that are necessary to operate the Service, including to keep you signed in and to maintain the security of your session. We do not use cookies or similar technologies for advertising.

We retain personal information for as long as necessary to provide the Service and to fulfill the purposes described in this Privacy Policy, including to comply with our legal obligations, resolve disputes, and enforce our agreements. Student records are retained and deleted in accordance with our agreement with the relevant Institution and its instructions. When information is no longer required, we delete or de-identify it.

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, use, alteration, and disclosure, appropriate to the nature of the information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

The Service is intended for use by Institutions and their authorized personnel. Students do not create accounts, and we do not knowingly collect personal information directly from children. To the extent the Service processes information about children, it does so on behalf of and under the authorization of the Institution, consistent with FERPA and, where applicable, the Children's Online Privacy Protection Act ("COPPA").

You may review and update your account information within the Service or by contacting your Institution's administrator. Depending on your jurisdiction, you may have additional rights regarding your personal information, including rights to access, correct, or delete it. If you are a California resident, we do not sell or share your personal information as those terms are defined under California law, and you may have rights to access and delete personal information we hold about you. To exercise a right, contact us as described below; where the information constitutes student records controlled by an Institution, we will direct your request to that Institution.

We operate and process information in the United States. If you access the Service from outside the United States, you understand that your information will be processed in the United States.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date above and take additional steps as required by law.

If you have questions about this Privacy Policy or our privacy practices, contact us at: