Privacy Policy

1. Who this policy applies to

This policy applies to school administrators, teachers, staff, students, parents or guardians, and other users who access Campus on behalf of or through a school or educational institution (each, an "Institution").

Campus is designed for schools. Institutions decide who may use the Service and what educational information is uploaded. When an Institution uses Campus to manage student or staff records, the Institution is generally the data controller and Assign Nest acts as a service provider or processor on the Institution's instructions, subject to applicable law.

2. Information we collect

We collect information in three broad categories: account information, school and educational information, and technical information.

• Account information: name, email address, profile image, authentication identifiers, language and display preferences, and account role or permissions.
• School information: school name, address, billing details, subscription plan, staff and student roster data, classroom structure, assignments, grades, submissions, comments, files, payment records, and invite codes.
• Payment information: billing status, charges, invoices, and payment metadata. Payment card details are processed by our payment partners and are not stored by us in full.
• Technical information: IP address, device and browser type, approximate location derived from IP, log data, cookies or similar technologies, and usage events needed to operate and secure the Service.

3. How we use information

We use personal information to provide, maintain, secure, and improve Campus, including to authenticate users, enforce permissions, deliver assignments and grades, process school payments, provide support, prevent fraud and abuse, comply with law, and communicate about the Service.

Where GDPR or similar laws apply, our legal bases may include performance of a contract, compliance with legal obligations, legitimate interests such as security and product improvement, and consent where required.

4. School and student data

Institutions are responsible for having a lawful basis to collect and share student and staff information with Campus, for providing required notices, and for responding to rights requests relating to education records where the Institution is the controller.

We process student and school data only to provide the Service, as instructed by the Institution, and as described in this policy or a separate data processing agreement when required. We do not use student personal information for unrelated advertising profiles.

Institutions may access, export, correct, or delete data they control through Campus administrative tools, subject to retention requirements and applicable law.

5. How we share information

We do not sell personal information. We share information only as described below.

• With the Institution and authorized users according to role-based permissions within Campus.
• With service providers that help us operate the Service, such as cloud hosting, authentication, file storage, analytics, email delivery, and payment processing. These providers may access information only to perform services for us and subject to contractual protections.
• When required by law, regulation, legal process, or governmental request, or to protect rights, safety, and security.
• In connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to continued protection of personal information.
• With your direction or the Institution's authorization.

6. International transfers

Assign Nest may process and store information in the United States and other countries where we or our service providers operate. If you are located in the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards for cross-border transfers where required, such as Standard Contractual Clauses or other lawful transfer mechanisms.

7. Data retention

We retain personal information for as long as needed to provide the Service, fulfill our contractual and legal obligations, resolve disputes, enforce agreements, and maintain security. Institutions may delete or request deletion of certain data through the Service, subject to backup cycles, legal holds, and legitimate business needs.

When an account or school is closed, we may retain limited information as required by law or for audit, billing, and security purposes.

8. Security

We use administrative, technical, and organizational measures designed to protect personal information, including access controls, encryption in transit, monitoring, and least-privilege access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your privacy rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information, and to data portability or withdrawal of consent where processing is based on consent.

Users in the EEA, UK, or Switzerland may lodge a complaint with a supervisory authority. California and certain other U.S. state residents may have additional rights described below.

To exercise rights relating to information controlled by an Institution, contact your school first. For direct account information controlled by Assign Nest, contact us using the details below. We may need to verify your identity and coordinate with the Institution where appropriate.

10. U.S. state privacy rights

Where applicable, residents of California and other U.S. states with comprehensive privacy laws may have the right to know what personal information we collect, request access or deletion, correct inaccurate information, opt out of certain processing such as targeted advertising or profiling in furtherance of legal or similarly significant effects, and not receive discriminatory treatment for exercising privacy rights.

Assign Nest does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are commonly defined in U.S. state privacy laws. If that changes, we will provide required notice and choice mechanisms.

11. Children's privacy

Campus may be used by schools to manage information about students, including minors. Schools are responsible for obtaining any required parental or guardian consents and for determining that use of Campus complies with applicable children's privacy laws, including COPPA and FERPA where relevant.

If you believe a child's personal information was provided to us improperly outside a school relationship, contact us and we will review the request.

12. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember preferences, secure the Service, and understand usage. You can control cookies through browser settings, but disabling certain cookies may affect functionality.

13. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Service, by email, or by other reasonable means before the effective date. Continued use after the effective date constitutes acceptance of the updated policy, except where further consent is required by law.

14. Contact us

Assign Nest is the entity responsible for this Privacy Policy. For privacy questions or requests, contact us at privacy@assignnest.com.