Effective Date: January 3, 2016
A. OUR ACCESS
You authorize us to access Student Data that you may provide from time to time. We will access and process Student Data only in order to provide the Services. As between us, you own all right, title and interest to all Student Data, you are (and other Schools are) solely responsible for any and all Student Data, whether provided by you, students, or others, and we do not own, control, or license Student Data, except to provide the Services.
B. THIRD PARTY ACCESS
We provide access to Student Data only to those employees and certain trusted service providers who have a legitimate need to access such information in connection with providing the Services to you. Of course, anyone involved in the handling of Student Data will treat such data as strictly confidential and shall not redisclose such data except as necessary in order to provide the Services. We will maintain access log(s) that record all disclosures of or access to Student Data within our possession and will provide copies of those access log(s) to you on your request.
C. OTHER ACCESS
Student Data is controlled by Schools, and we cannot permit anyone else to delete or control Student Data or to transfer such content, or allow access to Student Data by parents or legal guardians; as such, we refer any data access requests to the applicable School.
A. IN GENERAL
B. ANONYMIZED DATA
You agree that we may collect and use data derived from Student Data, including data about any Users’ access and use of the Services, that has been anonymized, aggregated, or otherwise de-identified such that the data cannot reasonably identify a particular student, User, or School. We may use such data to operate, analyze, improve or market our Services. If we share or publicly disclose information (e.g., in marketing materials) that is derived from Student Data, that data will be aggregated or anonymized to reasonably avoid identification of a specific School or individual student. For example, we may (i) track the number of School administrators on an anonymized aggregate basis as part of our marketing efforts to publicize the total number of Users of the Services, and (ii) analyze aggregated usage patterns for product development efforts. You further agree that we may use, store, transmit, distribute, modify, copy, display, sublicense, and create derivative works of the anonymized, aggregated Student Data even after this Agreement has expired or been terminated.
A. DELETING STUDENT DATA
You may request in writing that we delete any of your Student Data (except as provided for the Section 3(B) above) in our possession at any time. We will comply with your request in a commercially reasonable time not to exceed ten (10) business days. If you grant access to Student Data to a Developer and subsequently need that data deleted, you need to request such deletion directly from that Developer.
B. TERMINATING YOUR ACCESS TO THE SERVICES
Within seventy-two (72) hours of our receipt of such notice of termination or earlier if commercially reasonable to do so, we will delete or de-identify all Student Data, except for Student Data residing on backups or internal logs which will be removed within sixty (60) days, and will provide notice to the School when Student Data has been deleted and/or anonymized as described in Section 3(B) above.
We care deeply about the privacy and security of Student Data. We maintain strict administrative, technical, and physical safeguards to protect Student Data stored in our servers, which are located in the United States. We limit access to Student Data only to those employees or service providers who have a legitimate need to access such data in the performance of their duties, and we provide employee training on privacy and data security laws and best practices. If there is any disclosure or access to any personally identifiable Student Data by an unauthorized party, we will promptly notify any affected Schools and will use reasonable efforts to cooperate with their investigations of the incident. If the incident triggers any third party notice requirements under applicable laws, you agree that, as the owner of the Student Data, you may be responsible for the timing, content, cost, and method of any required notice and compliance with those laws. However, at the request of the School and when permissible under applicable law, Mentor Mailbox agrees to bear responsibility for the timing, content and method of such required notice on behalf of the Schools. In all instances, Mentor Mailbox will indemnify Schools for all reasonable costs associated with compliance with such notice requirements arising from a breach of the Mentor Mailbox Service. For clarity and without limitation, Mentor Mailbox will not indemnify for any notification costs arising from a breach of a third party application whose service is accessed through the Mentor Mailbox Service.
Thanks for reading!