Privacy Policy Last updated: June 2026
1\. Introduction and Scope
Welcome to Symporead. Symporead is an English reading application, platform, website, and related service operated by SympoTech Inc. (“Symporead,” “we,” “our,” or “us”). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when schools, school districts, educational organizations, teachers, administrators, students, parents, guardians, and other authorized users access or use Symporead, including our website located at symporead.com, our application, platform, and any related products, features, content, tools, and services that link to or reference this Privacy Policy (collectively, the “Service”).
Symporead is designed primarily for use through schools, school districts, educational organizations, or other institutions (each, an “Institution”). Where the Service is provided through an Institution, student accounts and student use are generally created, assigned, or authorized by the Institution, and student information is processed to provide school-authorized educational services. In those cases, our handling of student information may also be governed by a separate purchase order, pilot agreement, subscription agreement, data privacy addendum, school data privacy agreement, or other written agreement between Symporead and the applicable Institution.
This Privacy Policy is intended to describe our privacy practices and support compliance with applicable privacy and student data protection laws, including the Children’s Online Privacy Protection Act (“COPPA”), the Family Educational Rights and Privacy Act (“FERPA”), and applicable state student privacy laws, where applicable. If an applicable written agreement between Symporead and an Institution contains additional or different privacy, security, data retention, deletion, or student data provisions, that written agreement will apply to the extent expressly stated in that agreement.
2\. For Parents and Students
Symporead is generally provided to students through an Institution-authorized educational program. This means that student accounts are typically created, assigned, or authorized by the Institution, and students use the Service for educational purposes approved by the Institution.
Parents and students may review this Privacy Policy to understand what information Symporead collects, how we use it, who may access it, how long it may be retained, and how student information may be reviewed, corrected, exported, deleted, returned, or de-identified. Because student information collected through the Service may be part of the Institution’s education records or may otherwise be controlled by the Institution, requests from parents or students to access, correct, delete, or export student information should generally be directed to the applicable Institution. If a parent or student contacts Symporead directly, we may refer the request to the applicable Institution or coordinate with the Institution before responding.
Symporead does not knowingly permit children under 13 to create accounts or use the Service independently outside of an Institution-authorized context. If we learn that a child under 13 has provided personal information to us outside of an Institution-authorized use of the Service, we will take reasonable steps to delete the information or obtain appropriate authorization where required by law.
3\. Role of Institutions and Symporead
Where the Service is provided through an Institution, the Institution is responsible for authorizing student use of the Service, designating authorized users, managing classroom or school-level access, and providing any required notices to parents or legal guardians. Where permitted by applicable law, the Institution may provide consent on behalf of parents for Symporead to collect and process student information solely for school-authorized educational purposes.
For FERPA purposes, to the extent Symporead receives or processes education records or personally identifiable information from education records, Symporead processes such information as a service provider to the Institution and, where applicable, as a school official under the Institution’s direction and control. Symporead uses student information only to provide, maintain, secure, support, and improve the Service for school-authorized educational purposes, as described in this Privacy Policy and any applicable written agreement with the Institution.
For COPPA purposes, where the Service is used by an Institution for school-authorized educational purposes and where applicable law permits the Institution to provide consent on behalf of parents, Symporead relies on the Institution to provide or obtain any required parental notice or consent. Symporead does not use student information collected in the school-authorized context for targeted advertising, commercial profiling, or unrelated commercial purposes. Prior to collecting student personal information through an Institution, Symporead will provide the Institution with a direct notice describing the information collected and its purposes, as required by applicable law.
4\. Information We Collect
4.1 Information About Teachers, Administrators, and Other Adult Users. We may collect personal information from teachers, administrators, Institution personnel, parents, guardians, and other adult users, including name, email address, account credentials, Institution affiliation, role or title, account settings, support requests, communications with Symporead, and other information provided when creating, managing, or using an account. If an Institution pays for the Service, we may collect billing and payment-related information from the Institution or its representatives, which may be processed by third-party payment processors.
4.2 Independent and Guest User Accounts The Service accommodates two (2) categories of non-institutional access, the applicability of which depends upon whether you elect to register for an account or to access the platform on an anonymous basis. The data collection practices applicable to each category are set forth below.:
· Anonymous Guest Users. You may access and review selected materials made available through the Service on a temporary "Guest" basis, without registering, authenticating, or providing any personally identifying information (including, without limitation, a name or email address). In connection with any Guest session, we do not collect personal identifiers that directly identify you. We do, however, employ third-party product analytics tools, as further described in Section 9, which generate a randomized, anonymized session identifier that is stored locally on your device. Such identifier serves solely to temporarily retain your reading position and to enable core functionality of the Service for the duration of the applicable session. · Independent Users (Passwordless Email Registration): Should you elect to establish an individual account in order to access the full features of the Service, including the saving of vocabulary, the tracking of long-term reading progress, and the retention of historical AI chat transcripts, we will collect your email address. We do not collect, and do not require, a username or account password. For purposes of authentication, you shall provide your email address in order to receive a temporary, single-use verification code (a one-time password, or "OTP"). Your verified email address shall thereafter serve as a secure identifier for the purpose of preserving and safeguarding your learning history.
4.3 Institutional Student Account and Identifier Information. In order to provide the Service, we collect student information at the direction or under the authorization of the applicable Institution, including the student's first and last name, school-issued email address (where applicable), a secure username, and the authentication credentials or tokens necessary to create, verify, and support student accounts.
Where requested by an Institution and specifically supported under an applicable written agreement, student accounts may, at the Institution's option, be created, rostered, or authenticated through third-party platforms (such as Google Classroom, Clever, ClassLink, school single sign-on ("SSO") providers, or learning management systems ("LMS")). In any such case, and solely to the extent enabled for that specific Institution, we may receive additional administrative student identifiers, class or group assignments, grade levels, or teacher assignments as are necessary to authenticate the student and to automatically associate the student with the applicable classroom roster.
4.4 Learning and Educational Data. We may collect information generated directly through a student's use of the Service in order to track reading progress and to provide interactive learning features. Such data includes a student's active reading positions (consisting of the book ID, book name, and the specific CFI or text structural indicator), progress tracking by book or chapter, saved words or sentences, and historical chat transcripts from interactive reading sessions. We may also collect student input data necessary to evaluate comprehension, including written or oral responses and specific answers to chapter comprehension questions.
4.5 Audio, Oral Responses, and Transcripts. Some features of the Service may allow students to record oral responses, reading exercises, or speaking assignments. Where such features are enabled, Symporead may process student audio to provide oral-response, speech-to-text, speaking evaluation, transcription, feedback, reading or oral-response evaluation results, and related educational features.
Student audio recordings may be considered sensitive personal information, biometric information, or similar protected information under certain applicable laws, depending on how they are collected, processed, or used. Symporead processes student audio recordings only to provide the applicable educational features described in this Privacy Policy and any applicable agreement with the Institution. Symporead does not use student audio recordings to identify a student’s unique voiceprint, authenticate identity, create biometric profiles, or for targeted advertising, commercial profiling, or any unrelated commercial purpose.
Unless otherwise stated in an applicable written agreement with the Institution, raw audio files are transmitted through encrypted connections to Symporead's processing systems or service providers for the purpose of generating transcripts, feedback, evaluation results, and related educational outputs, and raw audio files are not retained by Symporead beyond what is necessary for the delivery of these educational features and are not used for any other purpose. Transcripts, evaluation results, and related learning records generated from student audio may be stored as part of the student’s learning history or educational record, as directed by the Institution and as described in this Privacy Policy and any applicable agreement with the Institution.
Symporead may use third-party service providers to support speech-to-text, transcription, oral-response evaluation, or related educational features. Where such providers process student audio or transcripts on Symporead’s behalf, they are required to process such information only to provide services to Symporead and not for their own targeted advertising, commercial profiling, or unrelated commercial purposes. The identities of subprocessors that process student information on behalf of Symporead are set forth in Section 13 of this Privacy Policy.
4.6 AI Interaction Data. If students, teachers, or other authorized users interact with AI-supported features (including SympoChat), we may process prompts, questions, responses, text selections, reading context, voice/audio transcripts generated through the Service (as further described in Section 4.4), AI-generated explanations, AI-supported discussion history, and related usage data to provide reading assistance, vocabulary explanations, comprehension support, discussion prompts, speaking feedback, or other educational features.
By default, API requests transmitted to third-party AI service providers do not include direct student identifiers such as students' real names, school names, student IDs, email addresses, or phone numbers. Only de-identified context necessary to perform the specific educational function is transmitted.
Where a specific institutional agreement requires the processing of limited identifiable information, Symporead will do so only to the extent strictly necessary, subject to applicable legal bases, appropriate data protection addenda, access controls, and purpose limitations. Under no circumstances will AI interaction data be used for advertising, profiling, or any commercial purpose unrelated to the Service.
AI interaction data associated with students is treated as student information and remains subject to the restrictions described in this Privacy Policy and any applicable written agreement with the Institution.
4.7 Technical, Usage, and Device Information. We may automatically collect technical and usage information when users access or use the Service, including IP address, browser type, device type, operating system, user-agent information, log data, authentication events, session information, error reports, performance data, approximate location derived from IP address, and information about how users interact with the Service. For student accounts, this information is used to provide, secure, maintain, troubleshoot, and improve the Service and is not used for targeted advertising or commercial profiling.
4.8 Public Website and Adult-Facing Interactions. When adult users visit our public website or adult-facing pages, submit inquiries, request product information, communicate with us, or participate in sales or support discussions, we may collect information such as name, email address, Institution affiliation, role, message content, website usage information, and related communications. We may use limited cookies or analytics tools on public website pages and adult-facing portions of the Service as described below.
5\. How We Use Information
We use personal information and student information for the following purposes:
(a) to provide, operate, maintain, secure, and support the Service; (b) to create, authenticate, manage, and support Institution-authorized accounts; (c) to provide reading assistance, vocabulary support, comprehension tools, AI-supported discussion features, speaking or oral-response exercises, transcripts, evaluations, reports, dashboards, and related educational features; (d) to allow teachers, administrators, and other authorized Institution users to assign content, manage classrooms or student groups, review student progress, review written or oral responses, review transcripts, view evaluation results, and support student learning; (e) to communicate with Institutions, teachers, administrators, parents, guardians, and other adult users about the Service, including administrative notices, support, security, updates, and service-related communications; (f) to diagnose bugs, troubleshoot issues, monitor service performance, maintain security, prevent fraud or misuse, and protect the Service and its users; (g) to comply with applicable law, legal process, contractual obligations, and requests from Institutions; (h) to enforce our Terms of Service and other applicable agreements; and (i) to improve the Service, including through aggregated, de-identified, or otherwise privacy-protective information, where permitted by applicable law and applicable agreements with Institutions.
We do not use student information for targeted advertising, behavioral advertising, commercial profiling, or marketing to students.
6\. AI, Audio, and Transcription Features
The Service may include AI-supported reading assistance, vocabulary explanations, discussion prompts, comprehension support, speech-to-text transcription, oral-response evaluation, or other educational support features. These features may process student responses, prompts, transcripts, reading activity, selected text, saved words, pronunciation or oral-response data, and other learning information to provide educational feedback and support.
We may use third-party service providers, including AI, speech recognition, transcription, hosting, or infrastructure providers, to help provide these features. Where such providers process student information on our behalf, we require them to process such information only to provide services to Symporead and not for their own targeted advertising or unrelated commercial purposes. Where applicable, Symporead enters into data processing agreements with its service providers to support these obligations. Where the terms of any such agreement materially affect the protections described in this Privacy Policy, such differences will be reflected in an updated version of this Privacy Policy or disclosed to affected Institutions in writing. The identities of subprocessors that process student information on behalf of Symporead are set forth in Section 13 of this Privacy Policy.
Unless otherwise stated in an applicable written agreement with the Institution, Symporead does not allow third-party AI or transcription providers to use student information processed on our behalf for their own advertising or unrelated commercial purposes. If student information is used to improve the Service, we will do so in a manner consistent with this Privacy Policy, applicable law, and any applicable written agreement with the Institution, including through aggregated, de-identified, or otherwise privacy-protective information where appropriate.
AI-generated or AI-supported outputs may not always be accurate, complete, or appropriate for every student, educational level, or context. Teachers, administrators, parents, guardians, and students should review and use AI-supported outputs appropriately. The Service is intended to support educational use and should not be treated as the sole basis for academic, placement, disciplinary, admissions, or other high-stakes decisions.
7\. How We Share Information
7.1 With Institutions and Authorized School Users. Where the Service is provided through an Institution, authorized teachers, administrators, and Institution personnel may be granted access to view a student's specific learning progress and completed work. Such access includes the ability to review a student's current reading position and completed books, saved vocabulary words or sentences, historical interactive chat transcripts, and specific answers submitted for chapter comprehension questions. The specific information accessible to each school user shall depend upon that user's role, the Institution's custom platform configuration, and the applicable written agreement between Symporead and the Institution.
7.2 With Students, Parents, and Guardians. Student information may be made available to the applicable student and, where appropriate, to parents or guardians through the Institution or in coordination with the Institution. Because student information may be part of the Institution’s education records or otherwise controlled by the Institution, parent and student requests regarding student information should generally be directed to the Institution.
7.3 With Service Providers and Subprocessors. We may share information with service providers and subprocessors that help us operate, host, secure, support, analyze, and improve the Service. These may include cloud hosting providers, authentication or single sign-on providers, learning platform integrations, analytics providers for adult-facing website pages, support tools, AI or transcription providers, security tools, and payment processors. Service providers that process student information on our behalf are required to use such information only to provide services to Symporead and in accordance with applicable contractual and legal requirements.
7.4 With Professional Advisors and Legal Authorities. We may disclose information to legal, financial, insurance, security, technical, or other professional advisors where reasonably necessary for legitimate business, compliance, security, or legal purposes. We may also disclose information if we believe disclosure is reasonably necessary to comply with applicable law, legal process, government requests, or contractual obligations; to protect the rights, safety, or security of Symporead, Institutions, students, users, or others; to investigate fraud, security incidents, abuse, or misuse of the Service; or to enforce our Terms of Service or other agreements.
7.5 Business Transfers. If Symporead is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar business transaction, information may be disclosed or transferred as part of that transaction, subject to applicable law and any applicable written agreement with the Institution.
7.6 Aggregated or De-identified Information. We may use and share aggregated or de-identified information that does not identify and cannot reasonably be used to identify an individual, including for analytics, research, service improvement, reporting, and product development, subject to applicable law and any applicable agreement with the Institution.
8\. No Sale, Targeted Advertising, or Commercial Profiling of Student Information
Symporead does not sell student information. Symporead does not use student information for targeted advertising, behavioral advertising, commercial profiling, or marketing to students. Symporead does not allow third-party advertising networks to collect student information through the student-facing Service for cross-context behavioral advertising.
We do not use student information to build advertising profiles, and we do not disclose student information to third parties for their own advertising or unrelated commercial purposes. If we use cookies or analytics on adult-facing public website pages, those tools are not intended to track students within the student-facing Service or to use student information for targeted advertising.
9\. Cookies, Analytics, and Product Improvement
We may use cookies and similar technologies (such as web beacons and local storage) that are necessary for authentication, security, account management, and core Service functionality. These technologies help us keep users logged in, protect accounts, maintain service performance, and prevent misuse.
On public website pages and adult-facing portions of the Service, we may use limited analytics tools to understand website traffic and diagnose performance issues.
Within the student-facing and user-facing portions of the Service, we utilize third-party product analytics tools, including PostHog, in order to understand how users interact with the application. This includes session replay technology, which permits us to visually reconstruct a user's experience within the application for the limited purposes of diagnosing technical defects, improving usability, and optimizing educational workflows. Such session replays may capture on-screen interactions within the application interface. Session replay data is used solely for the foregoing technical and operational purposes and is not used for advertising, behavioral profiling, or any commercial purpose; where technically applicable, input fields and other directly identifying information are subject to masking measures designed to limit their capture.
In order to limit the association of analytics data with directly identifying information, analytics events are linked to a randomized internal account identifier (uid) rather than to a student's real name or email address within the event properties. While the majority of analytics tracking occurs within the user's browser or device interface, certain analytics events and error reports are also transmitted securely from our servers (for example, server-side error logging and backend processing of certain learning interactions). Analytics data is processed securely by PostHog, as set forth in Section 13\.
Product analytics and session replay are not enabled by default. When you use the Service, we will request your affirmative consent before enabling these features, and they will be activated only after such consent has been obtained. You may withdraw your consent and disable these features at any time through the Privacy Settings dashboard. For users accessing the Service through an Institution, these features may instead be governed and enabled at the direction of the Institution under the applicable written agreement. With respect to student users, these features are not enabled on the basis of a student's own consent or action; they are enabled only where authorized by the Institution under the applicable written agreement (acting pursuant to applicable school or parental consent) or where verifiable parental consent has otherwise been obtained.
We do not use advertising cookies or third-party behavioral tracking technologies (such as cross-site ad targeting) anywhere in the user-facing Service. If the Institution requires additional restrictions on analytics, cookies, or tracking technologies, those restrictions may be addressed in the applicable written agreement with the Institution.
10\. Student and Parent Rights
Parents, guardians, and eligible students may have rights under applicable law to review, correct, export, or request deletion of student information. Where student information is maintained on behalf of an Institution, such requests should generally be submitted to the Institution. Symporead will assist the Institution in responding to such requests as required by applicable law and any applicable written agreement with the Institution. Institutions may submit requests for deletion, return, or export of student information by contacting Symporead at info@symporead.com. Symporead will acknowledge and process such requests in a timely manner and confirm completion in writing.
If a parent, guardian, or student contacts Symporead directly regarding student information, we may ask for information necessary to identify the applicable Institution and student account, and we may refer the request to the Institution or coordinate with the Institution before responding. We may not be able to respond directly to certain requests without the Institution’s involvement if the information is controlled by the Institution or forms part of the Institution’s education records.
Adult users may request access to, correction of, or deletion of their own account information by contacting us at info@symporead.com. We may need to verify the identity and authority of the person making the request before responding. Certain information may be retained where required or permitted by law, for security, compliance, fraud prevention, dispute resolution, backup, or recordkeeping purposes.
11\. Data Retention, Deletion, Return, and De-identification
We retain personal and student information for as long as reasonably necessary to provide the Service, comply with applicable law, fulfill contractual obligations, and enforce our agreements.
Where the Service is provided through an Institution, student information is generally retained for the period required by the applicable institutional agreement. Upon expiration or termination of the applicable agreement, student information will be deleted, returned, or de-identified in accordance with the applicable agreement and applicable law.
We may retain limited information where required or permitted by law, for legitimate security, backup, compliance, dispute resolution, fraud prevention, or recordkeeping purposes, provided that such retained information remains subject to appropriate confidentiality and data protection obligations. We may retain aggregated or de-identified information that no longer identifies a student or other individual.
Upon contract termination or an Institution's request, Symporead can execute batch deletion, return, or de-identification of data across the entire School District (or tenant) scope. This process is executed by authorized engineers following standard operating procedures across our Cloudflare D1 and R2 environments (rather than via a customer self-service button), and audit logs along with completion confirmations are maintained.
Once the deletion request is processed, primary data is permanently removed from the production environment. To ensure system availability and disaster recovery, limited backup and recovery point data will persist within our Cloudflare infrastructure. Core student data is hosted in Cloudflare D1 (FedRAMP jurisdiction, ENAM region), while object and file storage data is hosted in Cloudflare R2 (APAC region). Corresponding backup or recovery point data will automatically expire and be purged in accordance with Cloudflare's platform mechanisms and retention policies (including a 7-day automated abort rule for incomplete multipart uploads within R2 lifecycle rules). Prior to final expiration, any such retained backup data is isolated from active production use and may only be accessed for legitimate security, auditing, disaster recovery, compliance, or legal obligations.
12\. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information and student information from unauthorized access, disclosure, alteration, or destruction. These safeguards may include access controls, authentication controls, encryption, logging, monitoring, internal policies, vendor controls, and restrictions on access based on role and need.
Access to student information is limited to personnel and service providers who need such access to provide, maintain, secure, support, or improve the Service, or to comply with legal or contractual obligations. Personnel and service providers with access to student information are subject to confidentiality or data protection obligations.
No system or method of transmission or storage is completely secure. However, SympoTech maintains a formal incident response framework under which the Chief Technology Officer (CTO) serves as the primary person responsible for data security and breach containment. In the event of a confirmed unauthorized access, acquisition, or disclosure of Student Data (a "Data Breach"), SympoTech will initiate its Incident Response Protocol immediately under the oversight of the CTO to contain the breach, mitigate further risks, and conduct a forensic assessment.
SympoTech will notify the affected educational institution(s) without unreasonable delay after confirming the breach, and in any event within the timeframe required by applicable law. This notification will provide the Institution with all reasonably available details regarding the nature of the breach, the categories of data affected, and the corrective actions being implemented. Following our notification, the Institution may be responsible for providing notices to parents, students, or regulators where required by law or the applicable agreement.
13\. Service Providers and Subprocessors
We use service providers and subprocessors to help deliver, host, secure, support, and improve the Service. The table below identifies the categories of subprocessors that may process student information on behalf of Symporead, together with the identity of each provider where known and confirmed.
| Category | Provider | Data Processed | Processing Location | | :---- | :---- | :---- | :---- | | Cloud hosting, infrastructure, and CDN | Cloudflare Inc. (D1, R2) | All student data, educational records, and transit data | United States (US-East Region, D1) ; APAC region (Cloudflare R2) | | Database and Backend Infrastructure | Supabase, Inc. | Relational application database storage, user account profiles, authentication data, and core educational records | United States (AWS Infrastructure) | | AI Processing & Speech Recognition | OpenAI, L.L.C. | Voice/audio inputs and temporary text transcriptions for chat features | United States (and potentially other jurisdictions where OpenAI and its subprocessors operate) | | Product Analytics | PostHog, Inc. | De-identified usage logs, feature interaction metrics, user interface clicks, and visual session recordings | United States (PostHog Cloud US) | | Edge AI Inference | Cloudflare Inc. (Workers AI) | Localized voice-to-text processing, text classification, and algorithmic analysis of student text inputs. | Global Edge Network (processed near the user's location) | | Payment Processing & Subscription Billing | Stripe, Inc. | Adult/Institution billing data, credit card details, transaction history, and associated customer contact info. (Note: No student financial data is collected or processed). | United States |
We require all subprocessors that process student information to do so only to provide services to Symporead and in accordance with applicable contractual and legal requirements, including restrictions on use for targeted advertising or unrelated commercial purposes.
Where required by an applicable agreement with an Institution, Symporead will provide the Institution with notice of any material changes to the subprocessors listed above, including the addition of new subprocessors that will process student information, prior to such changes taking effect. Institutions that have entered into a data privacy addendum or similar agreement with Symporead should refer to that agreement for applicable notice, objection, and approval rights regarding subprocessor changes.
14\. Data Storage, Residency, and International Access
Student information and educational records processed through the Service are stored on secure cloud infrastructure. As of the date of this Privacy Policy, Symporead utilizes Cloudflare data infrastructure (including D1, KV, and R2) as its primary hosting environment for student data. To ensure heightened security and compliance, the core student database is deployed within a FedRAMP-jurisdiction configuration (Cloudflare D1). Object and file storage data is hosted in Cloudflare R2, which is currently configured in the APAC region. All other student data, educational records, and related personal information are stored within United States-based infrastructure unless otherwise expressly stated in a written agreement with the applicable Institution.
If Symporead changes the primary hosting location or infrastructure provider for student data, or adds a new hosting region outside the United States beyond those identified in this Privacy Policy, Symporead will provide advance written notice to affected Institutions prior to implementing such changes. Institutions will have the opportunity to raise concerns through the applicable written agreement with Symporead. Any material change to the primary data storage location will be reflected in an updated version of this Privacy Policy, and the "Last updated" date will be revised accordingly.
Symporead's technical, development, and support personnel may be located in jurisdictions outside the United States, including in other countries. Such personnel may access systems, infrastructure, or service environments to provide technical maintenance, development, security monitoring, or support services. This access does not change the location where student data is stored. Access by personnel located outside the United States is subject to role-based access controls, the principle of least privilege, confidentiality obligations, and data protection safeguards designed to limit exposure of student information to what is reasonably necessary for the applicable technical or support purpose. Where feasible, access to student data by non-U.S. personnel is restricted through technical controls, including network-level access restrictions and the use of de-identified or masked data environments for development and testing purposes.
Some of Symporead's service providers and subprocessors may be located in or may process data in jurisdictions outside the United States. Where such providers process student information on Symporead's behalf, they are required to do so subject to appropriate contractual protections, including data protection obligations consistent with applicable law. The primary subprocessors used to host and process student data are identified in Section 13 of this Privacy Policy, together with their processing locations.
If an applicable written agreement with an Institution requires specific data residency commitments, restrictions on cross-border transfers, restrictions on access by personnel in particular jurisdictions, or other geographic data handling requirements, Symporead will handle student information in accordance with that agreement to the extent operationally feasible. Institutions with specific data residency or access restriction requirements should address those requirements in their written agreement with Symporead prior to deployment.
15\. State Privacy Rights
Residents of certain U.S. states may have rights under applicable privacy laws, such as rights to know, access, correct, delete, or obtain a copy of certain personal information, and rights to opt out of certain types of data sharing or targeted advertising.
For student information maintained on behalf of an Institution, requests from parents, guardians, or eligible students should generally be submitted to the Institution, and Symporead will assist the Institution as required by applicable law and any applicable agreement. Adult users may submit privacy requests regarding their own account information by contacting us at info@symporead.com.
Symporead does not sell student information or use student information for targeted advertising. If we determine that any state privacy law requires us to provide additional notices, rights, or mechanisms, we will provide them as required by applicable law.
16\. Third-Party Websites and Services
The Service may contain links to third-party websites, services, or content. This Privacy Policy does not apply to information collected by third parties, and Symporead is not responsible for the privacy practices of third-party websites or services that are not operated by Symporead. We encourage users to review the privacy policies of any third-party services they access.
Where the Institution chooses to integrate the Service with third-party tools, such as single sign-on providers, learning management systems, classroom tools, or other educational technology platforms, the Institution’s and the third party’s terms and privacy practices may also apply.
17\. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or the Service. If we make material changes to how we handle student information, we will provide notice to the applicable Institutions as required by applicable law or any applicable written agreement. We may also provide notice by posting the updated Privacy Policy on our website or through other reasonable means. The “Last updated” date above indicates when this Privacy Policy was last revised.
18\. Contact Us
For privacy inquiries, requests, or questions about this Privacy Policy, please contact us at:
Symporead Operated by: SympoTech Inc. Email: info@symporead.com Website: symporead.com
If you are a parent, guardian, or student seeking to access, correct, delete, or export student information associated with an Institution, please contact the applicable Institution first. Symporead will cooperate with the Institution to respond to such requests as required by applicable law and any applicable written agreement.