Privacy Policy

Last updated: January 2, 2025

The Ed platform, edstem.org and Ed company ACN 607 247 272 (hereafter referred to as "Ed" or "we" or "our") understands your privacy is important, and has developed this privacy policy that describes how we collect and use your personal information when you are using the Ed website, platform, applications and related web technologies hereafter referred as the "Service" and the steps we take to protect your data.

1. Information Collection

When you interact with our Service, we may collect the following information from you, as described below:

  1. Information you provide:

    We collect information from you when you interact with the Service, e.g. making a discussion post, writing and developing code, submitting an exercise, etc.

  2. Information collected automatically:

    When you interact with our Service, we collect information that is automatically sent to us, this includes your IP address, any information that your browser sends to our Service as well as your activity in the Service

  3. Information from third parties:

    When you allow us to collect your information from certain third parties. e.g. when you sign in using your institution's single sign on or LTI interface, your name and email is provided and collected by us to provide the Service.

2. Information Use

We use the information we collect from you in a way that is consistent with this Privacy Policy.

The information we collect is used only in the following manner:

  1. Provide customer support

  2. Provide, maintain, and improve the Service

  3. Provide any notifications you have chosen to receive

3. Information Disclosure

Ed is not in the business of selling your information. Ed does not provide, sell, rent or lease your information to any third parties. However, there are certain circumstances where your information may be disclosed to certain third parties.

  1. Consent:

    We may disclose your information with your consent.

  2. To your institution:

    If you are a student in a course delivered by a particular institution, the instructors on behalf of the institution may access your information. This may happen automatically via the LTI interface.

  3. Business transfer:

    If we or our business assets are acquired and user information among our assets transferred to or be acquired by a third party. You acknowledge that such transfers may occur, and that any parties who acquire us may continue to use your personal information according to this policy.

  4. Legal obligation:

    We may disclose your information if required to do so by law, to comply with our legal obligations or to protect the safety and integrity of our Service.

4. Information Security

We take security seriously and use industry standard practices to protect personal information from loss or theft, as well as unauthorized access, disclosure, copying, use or modification. We regularly review our information collection, storage and processing practices.

5. Student Data and FERPA

Whilst using Ed you may use personally identifiable Student Data that in the USA is protected as defined in the Family Educational Rights and Privacy Act ("FERPA"), 20 U.S.C. § 1232(g). Ed agrees to treat Student Data as confidential and not to share it with third parties other than as described herein.

You authorize Ed to access and process Student Data solely for the purposes of providing the Service, as an outsourced institutional function pursuant to FERPA 34 CFR Part 99.31(a)(1). The instruction staff or institution owns right, title and interest to all Student Data you provide or otherwise make available to us, and Ed does not own, control or license such Student Data, except so as to provide the Service described herein. You acknowledge and agree that, as between the parties, you are solely responsible for any and all Student Data, whether provided by instruction staff, Student, institution or any other third party.

We do not share your personal information with third parties, except where required by law, to protect our own rights, or to provide a service to you. We only retain personal information for as long as necessary to provide you with a service.

6. GDPR

Ed complies with European Union General Protection Data Regulation ("GDPR"), Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. With respect to Data Processing performed by Ed, and for the purposes of GDPR, the institution is the Controller and Ed is the Processor. Any agreement between the institution and Ed, and any directions contained in notices from the institution to Ed pursuant to § J.4 together constitute the institution's documented instructions to Ed for the purposes of GDPR. The subject matter of the Data Processing with respect to GDPR is the processing and service that Ed provides.

Ed shall provide the institution with assistance and information required by GDPR, to the extent applicable, as it relates to Data Processing. As contemplated by GDPR, Ed's provision of assistance may relate to data protection impact assessments, prior consultations, demonstration of compliance with Article 28 of GDPR, and audits. Ed will also immediately notify the institution if, in its opinion, an institution infringes GDPR.

7. Australasia

Ed adheres to the Commonwealth of Australia Privacy Act [including the Australian Privacy Principles (APPs), Privacy Amendment (Private Sector) Act, Privacy Amendment (Notifiable Data Breaches) Act, Privacy Legislation Amendment (Enforcement and Other Measures) Act] as well as the New Zealand Privacy Act, which regulate handling of personal information and sensitive information.

8. Other Privacy Legislation

We will adhere to applicable privacy law, statutes, regulations and orders of any official government body with jurisdiction over our company and the academic institution. This includes state and federal law in the United States, provincial and federal law in Canada, English and UK law, and EU law.

9. Cookies and related technologies

We use cookies and local storage objects referred to herein collectively as "cookies" and other related approaches to collect information about your use of our website and to provide you the service.

We only use cookies that are essential for your use of the website, in particular enabling you to access parts of our service that require authentication.

10. Children

Our services are for users over the age of 13. We do not knowingly collect or store personal information from children (visitors under the age of 13). If you are under the age of 13, you are ineligible to use the Service. If you believe your child has provided us with personal information, we encourage you to contact us immediately, and we will promptly remove such information from our Service.

11. Changes to our Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time and from time to time without prior notice. Please review this policy periodically, and especially before you provide any information. This Privacy Policy was last updated on the date indicated above. Your continued use of the Service after any changes or revisions to this Privacy Policy shall indicate your agreement with the terms of such revised Privacy Policy.

12. Contact

For any questions or concerns please contact support@edstem.org