Privacy Policy

EduTransit ("EduTransit," "we," "us," or "our") provides field trip management software for K–12 school districts across the United States and its territories. This Privacy Policy explains what information we collect, how we use and share it, and the choices available to you. It applies to our website and the EduTransit application (together, the "Services").

When we provide the Services to a school district, the district controls the student and trip information it submits, and we process that information on the district's behalf and under its instructions.

Information we collect

We collect the following categories of information:

• Information you provide. When district staff request a demo, contact us, or set up an account, we collect details such as name, email address, phone number, school or district, role, and the contents of your messages.
• Trip and participant information. To deliver the Services, we process information that a district and its authorized users submit about field trips and participants. Depending on what the district chooses to enter, this may include student names, grade or class, emergency contacts, parental permissions, transportation details, and trip-relevant notes (for example, medical or dietary information). This information is provided and controlled by the district.
• Information collected automatically. When you use the Services we collect device and usage data such as IP address, browser type, pages viewed, and timestamps, through cookies and similar technologies, to operate, secure, and improve the Services.

How we use information

We use information to provide, maintain, secure, and improve the Services; to create and administer accounts; to coordinate and communicate about field trips; to respond to inquiries and provide support; to detect, prevent, and address fraud, abuse, and security issues; and to comply with legal obligations. We use student and trip information only to provide the Services to the relevant district and in accordance with the district's instructions.

Student data, FERPA & COPPA

When we handle student education records on behalf of a district, we act as a "school official" with a legitimate educational interest under the Family Educational Rights and Privacy Act (FERPA, 20 U.S.C. § 1232g; 34 CFR Part 99), and we remain under the district's direct control with respect to that data.

For students under 13, we support districts in meeting their obligations under the Children's Online Privacy Protection Act (COPPA) by collecting and using student information solely to provide the Services for the school's benefit.

Because we provide the Services to districts across all U.S. states and territories, we also comply with applicable state student-data-privacy laws in the jurisdictions where our district customers operate.

• We do not sell student data.
• We do not use student data for targeted advertising or to build profiles for any purpose unrelated to providing the Services.
• Parents and eligible students should direct requests to access, correct, or delete student information to their school district, which controls that data. We assist districts in fulfilling such requests.

How we share information

We share information only as described below:

• Service providers. We share information with vendors that host and support the Services (for example, cloud hosting and infrastructure providers) under contracts that require appropriate confidentiality and security protections.
• Within your district. Trip and participant information is accessible to authorized users within the relevant district.
• Legal and safety. We may disclose information when required by law or when we believe disclosure is necessary to protect the rights, safety, and security of users, the public, or EduTransit.
• Business transfers. If EduTransit is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Privacy Policy.

We do not sell personal information or student data.

Cookies and analytics

We use cookies and similar technologies for essential functionality, security, and to understand how the Services are used. You can control cookies through your browser settings; disabling some cookies may affect how the Services function.

Data security

We maintain administrative, technical, and physical safeguards designed to protect information, including encryption of data in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Data retention and deletion

We retain information for as long as needed to provide the Services and as required by our agreements with districts and by applicable law. Upon a district's request or upon termination of the Services, we delete or return student data as set out in our agreement with that district.

Your rights and choices

Depending on your location, you may have rights to access, correct, or delete personal information we hold about you. District staff can update their account information or contact us for assistance. Requests concerning student data are handled through the relevant school district, which controls that data.

Children’s privacy

The Services are intended for use by school districts and their authorized staff, not directly by children. Student information is collected and processed under the direction of the district as described in this Privacy Policy.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version with a revised "Last updated" date and, where appropriate, notify districts.

Contact us

If you have questions about this Privacy Policy or our data practices, contact us at info@EduTransit.com.