Privacy Policy

1) Overview

Edvaluator provides a cloud-based, multi-tenant school management and real-time assessment platform for K–12 institutions (the “Services”). This Privacy Policy explains how we collect, use, share, and protect personal data when you visit www.edvaluator.com, request a demo, or use our Services through a school.

2) When Edvaluator is a Processor vs. a Controller

A. Data Processor (most in-product use)

For Student Data and school community data processed inside the Services, the School is typically the Data Controller, and Edvaluator acts as a Data Processor processing data on the School’s instructions.

B. Data Controller (marketing and sales)

When you visit our website, fill a form, request a demo, or communicate with us for sales/marketing purposes, Edvaluator acts as a Data Controller for that information.

3) Personal data we collect

We may collect:

A. Marketing & sales data (Controller context)

• Name, email, phone number, organization/school name, job title
• Messages you send (demo requests, inquiries)
• Website usage data (cookies, IP address, device/browser info)

B. Platform account data (Processor context, depending on School configuration)

• Names, emails, phone numbers (where enabled)
• User role (admin/teacher/parent/student)
• Login and security data (e.g., authentication logs)

C. Student Data (Processor context)

• Student identifiers (name, student ID, class/year group)
• Attendance, grades, assessments, teacher feedback
• Timetables, coursework/submissions (if enabled by the School)

D. Support and communications

• Support tickets, chat messages, and troubleshooting data

4) How we use personal data

We use personal data to:

• Provide, operate, maintain, and improve the Services
• Authenticate users and enforce role-based permissions
• Deliver dashboards, reports, and analytics configured by Schools
• Provide onboarding, training, and customer support
• Communicate service updates and security notices
• Secure the platform (audit logs, fraud/abuse prevention)
• Run marketing and sales activities (website forms, demo scheduling, follow-ups) where Edvaluator is the controller
• Comply with legal obligations

5) Legal bases (where applicable)

Where data protection laws require a legal basis, we rely on:

• Contract (to provide Services to Schools; to respond to demo/service requests)
• Legitimate interests (security, service improvement, preventing misuse, marketing to business contacts where permitted)
• Consent (where required for cookies/marketing communications)
• Legal obligation (compliance with applicable laws and lawful requests)

6) Cookies and analytics

We use cookies and similar technologies for security, functionality, and analytics.

We use Google Analytics to understand website traffic and improve our marketing pages. Google Analytics may collect information such as your IP address, device/browser, pages visited, and time spent.

You can control cookies through your browser settings or via our Cookie Settings. Some cookies are necessary for the website/Services to function.

7) How we share personal data

We may share personal data with:

• Schools and authorized users (as configured by the School)
• Service providers (e.g., hosting, analytics, customer support tools) under confidentiality and security obligations
• Legal authorities when required by law or to protect rights, safety, and security

We do not sell Student Data.

8) International transfers

If we transfer personal data across borders, we apply appropriate safeguards as required by applicable law.

9) Data retention

• Marketing data (Controller context): retained as long as needed for sales/marketing purposes, or until you request deletion/unsubscribe, subject to legal requirements.
• Customer/Student Data (Processor context): retained for the duration of the School’s contract and as instructed by the School, subject to legal requirements and backup retention practices.

10) Security

We use measures designed to protect personal data, including:

• Role-based access controls
• Audit logging
• Encryption in transit (and encryption at rest where applicable)
• Two-factor authentication for sensitive access (as enabled)
• Tenant isolation controls for multi-tenant security

11) Children’s privacy (K–12)

Edvaluator is intended for use by Schools. Student accounts are created and managed by Schools or authorized administrators. If you are a parent/guardian or student, requests about Student Data should generally be directed to your School first.

12) Your rights

Depending on your location and applicable law, you may have rights to access, correct, delete, or restrict processing of personal data.

Where Edvaluator is a processor, we may redirect your request to the School (controller) or assist the School in fulfilling it.

13) Updates

We may update this Privacy Policy from time to time. We will post the updated version on www.edvaluator.com and revise the effective date.