STEMboard Privacy Policy
Last Modified: January 10, 2021)
STEMboard is designed for use in schools, and we are committed to the highest standards of protection for student data and personally identifiable information (“PII”) at all times. In addition to this Privacy Policy, we also comply with the Family Educational Rights and Privacy Act (“FERPA”), and the Children’s Online Privacy Protection Act ("COPPA"), and applicable state laws.
This Privacy Policy explains how STEMboard, Inc., ("we" or “STEMboard”) use, protect, and disclose the information we collect when you use the STEMboard services (the “Services”) through our website www.stemboard.com (“Site”), applications on Devices (“Apps”), through APIs, and through third parties. A “Device” is any computer used to access the Services, including without limitation a desktop, laptop, smartphone, tablet, or other consumer electronic device.
THE INFORMATION WE COLLECT AND STORE
STEMboard may collect and store the following information when running our Services.
Information You Provide
STEMboard does not intentionally collect any personally identifiable information ("PII") from users identified as students. Depending on how you use the Services, you may be required to provide certain personally identifiable information ("Personal Information") through your Google Account, which may include, but is not limited to, your:
Email Address (associated with a Google Account
Name (if you include it in your Google profile)
Your image and likeness if you include it in your Google profile or include in content that you create with our Services (these type of files are referred to as your "User Content")
User Content may include text images and media that you include in your STEMboard presentation
You may choose not to provide your Personal Information; however, if you do not provide your Personal Information you may not be able to use all the functions offered by the Services.
Users only use Google Single-sign-on to login, which is stored on the site, and may collect additional information such whether a user is a teacher or student, in order to assign the user to the correct user group. Documents may be uploaded to STEMboard by users in order to share them with other users for collaborative processing. STEMboard does not store these files once the sharing process is completed. Annotations made by users are stored on the site in order to display them to other users viewing a shared document, and to display them to the user if the same file is later re-opened.
Google's Consent form Google API Console .
Please note that users can choose whether to share this information with us, but certain features may not function without it. As a result, users may not be able to access certain features if required information has not been provided. We will not require a user to provide more information than is reasonably necessary to provide the service to the user, and we use this personal data for no other purpose than providing the service to the user. Users can annotate documents and provide comments to other users they share a document with. None of this information is shared with any third parties without the user’s consent. None of this information is used to display advertising. The Service does not display advertising whatsoever.
For questions about your Personal Information on our Services, please contact madonna@mystemboard.com.
Usage Data
In addition, when you use our Services, the following types of information may all be logged automatically ("Usage Information"):
Your Device’s Internet Protocol ("IP") address,
Type of mobile device you use,
Operating system of your mobile device,
Browser type,
Non-precise geographic location (e.g. zip code and city)Technical information about your device, system and App software, and peripherals,
Date and time stamps associated with transactions,
System configuration information, and
Metadata concerning your User Content, and other interactions with our Services.
THE WAY WE USE INFORMATION
We use your information:
to provide and improve our Services,
to administer your use of our Services,
to better understand your needs and interests,
to personalize and improve your experience
to provide or offer software updates and product announcements
to enhance current, and develop new, products and services
to determine general, non-identifying demographics like location (down to the city level), age range (e.g. 25-35), and equipment profiles (e.g. Chromebook with medium-size screen).
If you submit Personal Information to us, we will only use it for the purpose you requested or for which it is collected or for any purpose you subsequently authorize. STEMboard will never sell your information or use it to build to marketing profile.
HOW WE USE YOUR INFORMATION
We primarily use the information that we collect or receive about you to respond to your requests and improve our Sites and Services. We also may use your information, including personal information, for the following purposes:
To respond to your inquiries and for other customer service purposes;
To keep your personal information secure and protect our Sites and Services (including to verify user identities and prevent fraud and abuse);
To personalize your experiences while using our Sites and Services;
To enable us to provide you with our Services, and to improve and promote our Services;
For research, historical, and analytical purposes;
For marketing and promotional purposes. For example, we may use your information, such as your email address, to send you news and newsletters or to otherwise contact you about products or information we think may interest you;
To better understand how users access and use our Sites both on an aggregated and individualized basis; and
As permitted or required by law.
Email Preferences
We and our third-party service providers use cookies and similar technologies to analyze trends to track information about your use of our Sites or Services and gather demographic information about our user base as a whole. We may combine this information with other personal information we collect from you (and our third party service providers may do so on our behalf). You can control the use of cookies at the individual browser level, but if you choose to disable cookies, it may limit your use of certain features or functions on our websites or service. By continuing to use our Sites and Services, you are agreeing to our use of cookies as described in this Policy.
Cookies: Cookies are small files that are placed onto your device (e.g., computer, smartphone or other electronic device) that store information when you visit a website. Pixel tags (also called web beacons, clear gifs, or tags) are a similar technology that consists of small images or snippets of code that can help the website owners learn how you interact with websites and emails.. Some cookies allow us to make it easier for you to navigate our Sites and Services, to deliver relevant local resources, remember browser preferences, and improve our visitors’ experiences on the sites. There are two types of cookies: session and persistent cookies.
Session Cookies: Session cookies exist only during an online session. They are typically deleted from your computer when you close your browser or turn off your computer. We use session cookies to allow our systems to uniquely identify you during a session or while you are logged into the Sites or a Service. This allows us to process your online transactions and requests and verify your identity, after you have logged in, as you move through our Sites.
Persistent Cookies: Persistent cookies remain on your computer after you have closed your browser or turned off your computer. We use persistent cookies to track aggregate and statistical information about user activity.
Disabling Cookies: Most web browsers automatically accept cookies, but if you prefer, you can edit your browser options to block them in the future. The Help portion of the toolbar on most browsers will tell you how to prevent your computer from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether. Visitors to our Sites who disable cookies will be able to browse certain areas of the Sites, such as the cart feature, which holds your order, but some features may not function.
More information about cookies can be found at http://www.allaboutcookies.org/ and https://ico.org.uk/for-the-public/online/cookies/.
Third Party Analytics
We use automated means to evaluate usage of our Sites and Services. We use these tools to help us improve our performance and user experiences. These entities may use cookies and other tracking technologies to perform their services. We do not share your personal information with these third parties.
Do-Not-Track Signals
Our systems do not recognize browser “do-not-track” requests. You may, however, disable certain tracking as discussed above (e.g., by disabling or declining cookies).
HOW INFORMATION MAY BE SHARED
STEMboard does not sell or rent any of your personal information, and we will never share your personal information publicly without your consent. However, we may share your information with certain trusted third-party services to help us provide, improve, promote, or protect our services. For example, we may store your data on a third-party data storage service to support delivery of our services. We may also share your data with third-parties to provide services such as processing your payment transactions, improving our Services, or to provide other services. Whenever we share data with such third-party services, we require that they use your information only for the purposes we’ve authorized, and that they protect your personal information at least to the same standards we do. We also reserve the right to disclose personal information when it is reasonably necessary to conduct our business, to protect our legal rights and property, and to comply with the law or law enforcement. Otherwise, your personal information is never shared with any individual or other organization in a way that is inconsistent with this Policy.
DATA RETENTION
STEMboard retains personal information as long as is necessary for the purposes set out above. This is a case by case determination that depends on things like the nature of the data, why it is collected, why it is processed, and relevant legal or operation retention needs. For example, we may retain your data to effectively provide you the Services, as well as to improve our historical and statistical analytics. We may also be legally required to hold some types of information to fulfil our statutory obligations. We review our retention periods for personal information on a regular basis. When no longer required for any of the purposes set out in this Policy, we will destroy, erase, or anonymize your information. Legal requirements may also necessitate our retaining some or all of the personal information we hold for a period of time that is longer than we might otherwise hold it, including to resolve disputes, enforce our agreements, or to protect our legal rights.
SECURITY OF MY PERSONAL INFORMATION
We take security seriously, and the security of your personal data is important to us. We have implemented commercially reasonable and industry standard precautions to protect the information we collect from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. Please be aware no data security measures can guarantee 100% security.
CHILDREN
Civitas does not knowingly collect any personal information from children under the age of 13, and children under 13 are not permitted to register for or use our services. If we become aware that a child under age 13 has provided us with personally identifiable information, we’ll delete it, unless another exception such as parental consent applies.
HOW WE COLLECT USAGE DATA
STEMboard collects some information (ourselves or using third party services) using logging and cookies, such as IP address, which can be correlated with Personal Information. We use this information for the above purposes and to monitor and analyze use of our Services, for the Service’s technical administration, to increase our Service’s functionality and user-friendliness, and to verify users have the authorization needed for our Services to process their requests. As of the date this policy went into effect, we use Google Analytics to track anonymous usage across all users. The Privacy Policy of Google Analytics are available online, and information on how to opt out of that service.
We store all of our user data on Google Cloud Platform and user generated content/work on Amazon AWS.
DATA OWNERSHIP
All data remains the property of and is solely owned, and thereby controlled, by you. You grant STEMboard a non-exclusive, royalty free license, to use equipment, software, your data or other material of yours solely for the purpose of providing, maintaining, and supporting you and other licensees with STEMboard Products and Services. However, STEMboard may use and distribute the data for any lawful purpose outside the scope of the Agreement, provided always that such Data must be de-identified.
ACCESS & CORRECTING ERRONEOUS DATA
Under FERPA, a school must provide a parent, teacher or school administrator with an opportunity to inspect and review his or her child’s education records within 45 days following its receipt of a request. A school is required to provide a parent with copies of education records, or make other arrangements, if a failure to do so would effectively prevent the parent from obtaining access to the records.
Requests to review student data from parents, teachers, and administrators may be directed to madonna@mystemboard.com. In the event there is any erroneous data contained in the student record, STEMboard will advise parents, legal guardians, and eligible students to contact the school to update their information in their Google profile.
DATA TRANSFER
User Content may be transferred from STEMboard by sharing files or folders from your Google Drive. Google also provides a tool called Takeout that allows you to export and transfer all data at one time (see: https://takeout.google.com/settings/takeout).
PAYMENT INFORMATION
If you provide credit card or debit card information to complete a purchase, it is our policy to use third-party payment processing systems that comply with the Payment Card Industry Data Security Standard (PCI-DSS), which is an industry wide security standard designed to protect the confidentiality and security of your credit card information, by encryption using secure socket layer technology (SSL) and storage with AES-256 encryption.
Although no method of transmission over the Internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards. Your credit card information will also be subject to our payment processor’s privacy policy in addition to ours. As of the date this policy went into effect, STEMboard uses Stripe Privacy Policy for payment processing.
If you wish to dispute a charge by mail or telephone please contact us at hello@PearDeck.com. STEMboard complies with all legal requirements of your State’s applicable laws regarding providing refunds for unauthorized charges. When you make a charge, we shall display a completed charge screen. This is your electronic receipt. You should print or save this electronic receipt for your records. YOU REPRESENT AND WARRANT THAT YOU HAVE THE LEGAL RIGHT TO USE ANY CREDIT CARDS, DEBIT CARDS OR OTHER PAYMENT MEANS USED TO INITIATE ANY TRANSACTION.
INFORMATION SHARING AND DISCLOSURE
Further, you agree that STEMboard may transfer the anonymous information we collect in the event of any corporate restructuring or any sale, assignment or transfer of substantially all of its rights in the Apps.
We may disclose information about you if we become subject to a subpoena or court order, or if we are otherwise legally required to disclose information. We may also use and disclose information about you to establish or exercise our legal rights, to enforce the Terms of Use, to assert and defend against legal claims, or if we believe such disclosure is necessary to investigate, prevent, or take other action regarding actual or suspected illegal or fraudulent activities or potential threats to the physical safety or well-being of any person. If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction, but we will notify you (for example, via email and/or a prominent notice on our website) of any change in control or use of your Personal Information or User Content, or if either become subject to a different Privacy Policy. We will also notify you of choices you may have regarding the information.
STEMboard will display your Personal Information in your profile page and elsewhere on our Services according to the preferences you set in your account. Any information you choose to provide should reflect how much you want others to know about you. Please consider carefully what information you disclose in your profile page and your desired level of anonymity. You can review and revise your profile information at any time. We do not sell your personal information to third parties. We may also share or disclose your information with your consent, for example if you use a third party application to access your account. Through certain features of our Services, you may also have the ability to make some of your information public. Public information may be broadly and quickly disseminated.
Service Providers, Business Partners and Others. STEMboard may use certain trusted third party companies and individuals to help us provide, analyze, and improve our Services (including but not limited to data storage, maintenance services, database management, web analytics, email communication, payment processing, and improvement of the Service’s features). These third parties may have access to your information only for purposes of performing these tasks on our behalf and under obligations similar to those in this Privacy Policy. As of the date this policy went into effect, we use:
Service Providers used for business functions:
Google Analytics to collect, analyze and report usage data
Stripe to collect subscription data for premium users
Service Providers used for the technical infrastructure of our application:
Amazon’s Web Services (AWS) to store some of your information (for example, your User Content)
Google's Cloud Platform and Google Drive to store some of your information (for example, your User Content. Google Teachers may also export student responses to a Google Spreadsheet)
Third-Party Applications. STEMboard may share your Information with a third party application with your consent, for example when you choose to access our Services through such an application. We are not responsible for what those parties do with your information, so you should make sure you trust the application and that it has a privacy policy acceptable to you.
Non-private or Non-Personal Information. STEMboard may disclose your non-private, aggregated, or otherwise non-personal information, such as usage statistics of our Services. However, in such cases, your usage data is aggregated with the usage data of others and does not identify you individually.
DELETING YOUR INFORMATION
To delete your account using Google, please remove the STEMboard application from your [Google Drive Permissions] (https://security.google.com/settings/security/permissions?pli=1) and delete your STEMboard user content from your Google Drive.
STEMboard ENTERPRISE ACCOUNT
If you have a STEMboard Enterprise from your school or organization account, your Administrator may be able to:
access information in and about your STEMboard Enterprise account;
disclose, restrict, or access information that you have provided or that is made available to you when using your STEMboard Enterprise account; and
control how your STEMboard Enterprise account may be accessed or deleted;
Please refer to your organization's policies if you have questions about your Administrator's rights.
LINKED SITES
Our Services may contain links to other Web sites whose privacy practices may differ from those of STEMboard. If you submit personal Information to any of those sites, your Information is governed by their privacy statements. We encourage you to carefully read the privacy statement of any Web site you visit.
SECURITY
STEMboard takes reasonable steps to help protect Information against loss, misuse, unauthorized access or disclosure. STEMboard expressly disclaims any representation or warranty, whether express or implied, with respect to offering any definitive promise of security in connection with The anonymous information we collect.
OUR POLICY TOWARD CHILDREN
We are required under the Children’s Online Privacy Protection Act (COPPA), with limited exceptions, to obtain verifiable parental consent in order to collect, use, or disclose personal information from Children. COPPA allows the Child’s School to obtain consent for the online collection of personal information from Children who are students of the School.
If a Child wants to use our Service, he/she must first obtain an Account from his/her School. Before an Account is provided to a School, we require that the School (on behalf of the Parent) (a) consent to the collection, use and disclosure of personal information of the Child, through the Service, in accordance with this Children’s Privacy Policy, and (b) agree that the Child’s online activities are subject to the Terms of Service.
As required under COPPA, we allow Parents certain choices regarding the personal information submitted by their Children Parents should make any permitted requests with the School and have the School, as the Parent’s agent, pass on those requests to STEMboard. We may rely on the instructions that we receive from the School that we reasonably believe are given by a Child’s Parent to the School. For example, if a representative from the Child’s School contacts us and provides the Account information we request, we may assume that the person calling is acting on behalf of the Child’s Parent.
We provide Parents the following choices with respect to the collection, use, retention and disclosure of Personal Information. A Child’s registration information is always accessible to him/her. A Parent has the right to review her Child’s Personal Information, which the Parent can obtain by contacting her Child’s School. After reviewing the Child’s Personal Information, the Parent may ask us to update or delete the Child’s Personal Information by requesting such changes through the Child’s School. A Parent may prohibit us from sharing a Child’s Personal Information with a third party by requesting such prohibition through the Child’s School. Notwithstanding any such requests, we may continue to share a Child’s Personal Information with third parties for the Internal Purposes and Enforcement Purposes (each as described above).
If a Parent chooses to prohibit any future collection, use or disclosure of the Child’s Personal Information, the Parent may do so by terminating the Child’s Account through the School, and requesting the deletion of the Child’s Personal Information through the School. Upon receiving such request from the Child’s School, we will delete the Child’s Account information from our live databases and all the information and data stored for such Account. Company will not have any liability whatsoever for any termination of the Account or related deletion of the Child’s Personal Information. When we delete Personal Information, it will be deleted from our active databases but may remain in our archives.
DATA LOCATION
If you reside outside the U.S., the information we collect will be transferred to the U.S. and processed and stored there under U.S. privacy standards. By using the Services and providing Information to STEMboard, you consent to the use, transfer and processing of the anonymous information we collect as set forth in this Privacy Policy, all of which activities will take place in the U.S.
CONTACTING US
If you have any questions about this Privacy Policy, please contact us at madonna@mystemboard.com.