Effective Date: May 8, 2025
This Privacy Policy describes how ampEducator Inc. ("we", "our", or "us") collects, uses, and safeguards personal information through its academic management platform for Educators known as ampEducator (the “Service”). Our privacy policy covers entirely ampEducator Inc., including the work performed for us by our employees and contractors, the ampEducator "Service" (as per our Terms of Use) and our website at https://www.ampeducator.com/. This policy is designed to comply with applicable privacy laws including the Personal Information Protection and Electronic Documents Act (PIPEDA), the General Data Protection Regulation (GDPR), and the Family Educational Rights and Privacy Act (FERPA).
Scope
This policy applies to all personal information collected from:
- Clients
Institutions or organizations that subscribe to the Service.
- Users
Individuals (e.g., staff, faculty, students) added by the Client to their account and authorized to access the Service.
Clients are the data controllers for any personal data they upload, while ampEducator only acts as a data processor.
Information We Collect
- Account and Contact Information
Names, email addresses, institutional affiliation, job titles, phone numbers, and authentication credentials.
- Academic and Institutional Data
Student records, grades, attendance, timetables, disciplinary actions, educational health information that is required for enrollment / administrative in nature only (ie. accommodations, immunizations, allergies, action plans, doctors note for attendance/participation) not clinical (ie. diagnoses, counseling notes, lab results) and any other educational data uploaded by Clients.
- Technical and Usage Information
IP addresses, browser type, device identifiers, usage logs, and interactions with the Service.
- Cookies and Tracking Technologies
We use cookies and similar technologies to enhance user experience and analyze usage, in compliance with consent requirements under GDPR.
Legal Basis for Processing (GDPR)
We process personal data based on the following legal grounds:
- Performance of a contract (providing the Service to Clients)
- Compliance with legal obligations (e.g., FERPA for U.S. educational institutions)
- Legitimate interests (e.g., service improvement, fraud prevention)
- Consent, where required (e.g., for cookies or marketing communication)
Use of Information
We use information to:
- Deliver and manage the Service
- Authenticate users and authorize access
- Provide support and respond to inquiries
- Maintain service quality and improve features
- Fulfill legal and contractual obligations
Responsibilities of Clients
Clients are responsible for:
- Ensuring the accuracy and lawfulness of data entered into the Service
- Obtaining necessary consent from Users
- Responding to individual requests from Users
Sharing of Information
We do not sell or rent personal information. We only disclose information to:
- Authorized service providers under strict data processing agreements
- Legal authorities where required by law or valid legal process
- Business transferees in the case of mergers, acquisitions, or asset sales
Data Retention
Personal data is retained only as long as necessary to:
- Provide the Service
- Fulfill legal and contractual obligations
- Comply with educational recordkeeping requirements
Clients may manage data retention within their account settings and request deletion as described below.
Data Deletion Requests
Clients may request account and data deletion by contacting us at support@ampeducator.com. Upon verified request:
- All Client account data, including associated User information, will be deleted or anonymized
- Deletion will be completed within 30 days, subject to legal retention requirements
- Confirmation of deletion will be provided to the requesting party
Individual Users should submit data requests to their institutional administrator. If the institutional administrator is not available, unresponsive or unknown then Individual Users may request account and data deletion by contacting us at support@ampeducator.com.
Security Measures
We apply technical and organizational measures to safeguard data, including:
- Encryption in transit and at rest
- Role-based access control
- Regular audits and vulnerability assessments
- Data processing agreements with third-party vendors
Despite best efforts, no system is 100% secure.
International Data Transfers
Data may be processed in Canada, the U.S., or other jurisdictions with adequate safeguards, including:
- Standard Contractual Clauses (SCCs) under GDPR
- PIPEDA-compliant contracts with vendors
- FERPA-aligned practices for U.S. student records
Changes to this Policy
We may update this policy to reflect changes in practices, legal requirements, or Service features. We will notify Clients of material updates via the Service dashboard.
Contact Information
If you have questions or concerns about this Privacy Policy or your personal data, please contact us by email or mail:
Email
support@ampeducator.com
Address
Attn Privacy Officer
18 King Street East, Suite 1400
Toronto M5C1C4 CA
