MSi Student Privacy Policy

Interpretation and definitions

Definitions

For the purposes of this Student Privacy Policy:

Educational Institution

Any school, district, college, university, or other educational organization that uses our Service to provide educational content or services to students.

Student

Any individual enrolled in or receiving educational services from an Educational Institution that uses our Service.

Student Data

Any information that relates to an identified or identifiable student, including but not limited to educational records, academic performance data, and personally identifiable information.

MSI SSO

Our Single Sign-On authentication system that connects students through their educational institution's credentials.

LTI 1.3

Learning Tools Interoperability version 1.3, a standard that allows our Service to integrate with learning management systems and other educational platforms.

Teacher

Any educator, instructor, administrator, or other authorized personnel from an Educational Institution who facilitates student access to our Service.

Student data collection and processing

Data collected through MSI SSO

When students access our Service through MSI SSO authentication, we collect and process the following information:

• Student first name and last name — stored for identification and personalization purposes
• Teacher's email address — associated with the student account to maintain the educational relationship and enable teacher oversight
• Usage data — automatically collected information about how students interact with our Service

Data collected through LTI 1.3 integration

When Educational Institutions use LTI 1.3 platforms to access our Service:

• Anonymization capability — The sending platform can choose to anonymize all user information before transmitting the LTI request
• Minimal data collection — When anonymized, we may only receive non-identifying information necessary for Service functionality
• Institutional data — We may receive institutional identifiers to maintain the educational context without collecting personal student information

Additional data types

We may also collect:

• Educational progress data — Information about student performance, completion status, and learning analytics
• Device and usage information — Technical data about how students access and use our Service
• Communication data — Records of interactions between students, teachers, and our Service

Use of student data

We use Student Data solely for the following educational purposes:

Primary educational uses

• Service delivery — To provide educational content, assessments, and learning tools to students
• Progress tracking — To monitor student learning progress and provide feedback to teachers and Educational Institutions
• Personalization — To customize the learning experience based on individual student needs and performance
• Technical support — To troubleshoot issues and ensure proper Service functionality

Administrative uses

• Account management — To maintain student accounts and facilitate access to educational content
• Communication — To enable communication between students, teachers, and Educational Institutions regarding educational activities
• Compliance — To meet legal requirements and support Educational Institution compliance with educational laws

Data sharing and disclosure

Educational institution access

• Teachers and authorized personnel from the Educational Institution maintain access to their students' data as necessary for educational purposes
• Institutional administrators may access aggregated or individual student data as permitted by their educational institution's policies

No third-party service provider sharing

We do not share Student Data with third-party service providers. All Student Data processing is handled internally to ensure maximum privacy protection and data security.

Legal requirements

We may disclose Student Data only when required by law, court order, or to protect the safety and security of students and our Service.

Data security and protection

Technical safeguards

• Encryption — Student Data is encrypted both in transit and at rest
• Access controls — Strict access controls limit who can view or modify Student Data
• Regular audits — We conduct regular security audits to ensure data protection measures remain effective

Organizational safeguards

• Staff training — All personnel with access to Student Data receive privacy and security training
• Data minimization — We collect and retain only the minimum Student Data necessary for educational purposes
• Incident response — We maintain procedures for responding to potential data security incidents

Data retention and deletion

Retention periods

• Active student accounts — Student Data is retained while the student actively uses our Service through their Educational Institution
• Inactive accounts — Data is retained for a reasonable period after account inactivity to allow for account recovery. MSi may remove data after the enrolment period
• Institutional requirements — Retention periods may be extended to meet Educational Institution record-keeping requirements

Deletion rights

• Institutional control — Educational Institutions may request deletion of their students' data
• Automated deletion — Data may be automatically deleted after specified retention periods
• Parental rights — Parents may request deletion of their child's data in accordance with applicable laws

Student and parental rights

Access rights

• Students and their parents (for students under 18) may request access to Student Data we maintain
• Educational Institutions typically serve as the primary point of contact for such requests

Correction rights

• Students, parents, and Educational Institutions may request correction of inaccurate Student Data
• We will work with the Educational Institution to verify and implement necessary corrections

Consent and notice

• Institutional consent — Educational Institutions provide consent for student data collection and use on behalf of their students
• Parental notification — Educational Institutions are responsible for providing appropriate notice to parents regarding student data practices
• Opt-out options — Where possible, students or parents may opt out of certain data collection or use practices

Children's privacy

Our Service is designed for educational use and may be used by students under the age of 13. When collecting information from students under 13:

• We rely on Educational Institutions to obtain any necessary parental consent
• We collect only information necessary for educational purposes
• We do not use Student Data for commercial purposes unrelated to education
• We provide Educational Institutions with the ability to review and delete student information

Changes to this policy

We may update this Student Privacy Policy periodically. When we make material changes:

• We will notify Educational Institutions of the changes
• We will post the updated policy with a new "Last updated" date
• Educational Institutions are responsible for notifying their students and parents of policy changes as appropriate

Contact information

For questions about this Student Privacy Policy or our student data practices, please use the form on our Contact page.

Educational Institutions may also contact us through that form to exercise rights on behalf of their students or to discuss specific data handling requirements for their implementation.

This Student Privacy Policy is specifically designed for educational technology implementations and should be reviewed alongside your Educational Institution's privacy policies and practices.