Privacy Policy

EX in Education ("EX in Education," "we," "us") provides an employee-experience platform to schools, districts, and campuses ("Districts"). This policy explains how we handle information across our marketing website and our application. It does not replace the terms of any agreement or Data Privacy Agreement (DPA) between us and a District, which control where they conflict with this policy.

Information we collect

• Account & contact data you provide (e.g., name, work email, role, organization) when you request a demo, download a resource, or use the platform.
• Educator & staff data a District provides or authorizes (e.g., staff records, observations, coaching notes, survey responses) to deliver the service.
• Usage & device data such as pages viewed, actions taken, and standard log/analytics data, used to operate and improve the service.

Student data & FERPA

EX in Education is built as a staff/educator-experience platform and does not require student personally identifiable information to function. To the extent we process any education records on a District's behalf, we act as a "school official" with a "legitimate educational interest" under FERPA, under the District's direction, and only to provide the contracted service. We do not use such data for advertising and we do not sell it.

How we use information

• To provide, secure, support, and improve the platform.
• To communicate with you about demos, your account, and service updates.
• To meet legal, contractual, and DPA obligations.

How we share information

We share information only with: (a) service providers/subprocessors who help us operate the platform under confidentiality and data-protection obligations; (b) a District for its own data; and (c) as required by law. We do not sell personal information. A current subprocessor list is available to Districts on request.

Security

We protect information with encryption in transit and at rest, least-privilege access controls, multi-tenant isolation, and audited cloud infrastructure. See our Security page for details.

Data retention & deletion

Districts own their data. We retain it for the term of the agreement and per the applicable DPA, and we provide export and deletion on request or upon termination.

Your choices & rights

Districts and authorized individuals may request access, correction, export, or deletion of data we hold, consistent with the applicable agreement and law. Marketing contacts may opt out of marketing email at any time.

Children's privacy

The platform is intended for use by District staff, not by students or children, and is not directed to children. Any education-record processing occurs under District direction and FERPA as described above.

Changes

We may update this policy; we'll revise the "last updated" date and, for material changes affecting Districts, provide notice consistent with our agreements.

Contact

Questions or requests: privacy@exineducation.com.