Student Data:The student data is used to provide you, and only you and your designated recipients, with the reports you've requested.
Data Disposition:We will immediately remove all the data you provide upon request. After 1 year we will expire and remove all of the data you have uploaded as well as the reports generated from that data.
Data transfers:Your data will never be sold, shared, or transferred to any third-party without your prior consent.
Security:We take this stuff seriously. All of the data you provide is encrypted when stored and only transfered by secure means.
If you're unsure how to proceed or your district requires their own data sharing agreement, contact the SHAPE Support Team at Support@ShapeMyDistrict.com
Compliance:SHAPE Education, LLC. (SHAPE) complies with all applicable state and federal laws and regulations pertaining to data privacy and security, including FERPA, COPPA, PPRA, SOPIPA, AB 1584, and all other California and Federal privacy statutes.
Authorized Use:The data shared with SHAPE, including persistent unique identifiers, shall be used for the purpose of providing the LEA with the reports and services available through this application. SHAPE also acknowledges and agrees that it shall not make any re-disclosure of any Student Data or any portion thereof, including without limitation, meta data, user content or other non-public information and/or personally identifiable information contained in the Student Data, without the express written consent of the LEA.
Employee Obligation:SHAPE requires all employees and agents who have access to Student Data to comply with all applicable provisions of this policy with respect to the data provided.
No Disclosure:De-identified information may be used by SHAPE for the purposes of development, research, and improvement of educational sites, services, or applications, as any other member of the public or party would be able to use de-identified data pursuant to 34 CFR 99.31(b). SHAPE agrees not to attempt to re-identify de-identified Student Data and not to transfer de-identified Student Data to any party unless (a) that party agrees not to attempt re-identification, and (b) prior notice has been given to the LEA and the LEA has provided consent for such transfer. SHAPE shall not copy, reproduce or transmit any data obtained, except as necessary to fulfill the services requested.
Disposition of Data:Upon request and in accordance with the applicable terms in subsection (a) or (b), below, SHAPE shall dispose or delete all Student Data obtained it is no longer needed for the purpose for which it was obtained. Disposition shall include (1) Erasing; or (2) Otherwise modifying the personal information in those records to make it unreadable or indecipherable by human or digital means. Nothing in this policy authorizes SHAPE to maintain Student Data obtained beyond the time period reasonably needed to complete the disposition. The duty to dispose of Student Data shall not extend to data that has been de-identified, pursuant to the other terms of this policy.
Advertising Prohibition:SHAPE is prohibited from using or selling Student Data to (a) market or advertise to students or families/guardians; (b) inform, influence, or enable marketing, advertising, or other commercial efforts by a SHAPE; (c) develop a profile of a student, family member/guardian or group, for any commercial purpose other than providing Service to LEA; or (d) use the Student Data for the development of commercial products or services, other than as necessary to provide Service to LEA.
Data Security:SHAPE abides by and maintains adequate data security measures, consistent with industry standards and technology best practices, to protect Student Data from unauthorized disclosure or acquisition by an unauthorized person. The general security duties of SHAPE are set forth below.