FERPA & Student Data
For schools and districts, ArtifyTales acts as a school official under FERPA: student data is used only to run the service, never sold or advertised against, and deleted or returned whenever the school asks.
Our seven commitments to schools
- Only to provide the educational service the school signed up for.
- No sale of student data, no advertising, no unrelated secondary use.
- Student PII goes only to named subprocessors, under the same terms.
- The district directs how student data is used and maintained.
- Least-privilege access, logged, for staff with a genuine need.
- Deletion or export on request, and at the end of the agreement.
- Encryption in transit and at rest, access control, incident notice.
What we can provide for a review
- A signed Data Privacy Agreement, or your district’s own template.
- A student data addendum covering the seven commitments.
- The named list of subprocessors student content passes through.
- A description of our security controls and incident-notification process.
- Written confirmation of deletion or export at the end of the agreement.