Privacy Policy

Last updated: [Effective Date]

Worksheet Builder ("Worksheet Builder", "we", "us", or "our"), operated by [Company Legal Name], provides a web-based platform that helps teachers and schools create, manage, and use worksheets and educational resources, including AI-assisted features. This Privacy Policy explains how we collect, use, share, and protect information when you visit our website at [Website URL], create an account, or use our services (together, the "Service").

Worksheet Builder is currently offered as a free private beta. Features, data practices, and this policy may evolve as the Service develops. We will update this policy as those changes occur, as described in Section 12.

Please read this policy carefully. If you do not agree with it, please do not use the Service.

1. Introduction and Scope

Who we are

Worksheet Builder is a US-based EdTech (software-as-a-service) platform operated by [Company Legal Name]. We help educators create, upload, save, download, share, and manage worksheets and educational content, supported by AI-assisted tools.

What this policy covers

This policy applies to information we process through:

• Our marketing and informational website at [Website URL].
• Our web application and any associated tools, dashboards, and beta features.
• Communications you have with us, including support requests and newsletter sign-ups.

This policy does not cover third-party websites, products, or services that we do not operate, even if we link to them. Their own privacy policies govern your use of those services.

Who this policy is for

The Service is intended for:

• Teachers and individual educators.
• Schools and districts that authorize use of the Service.
• Students, only where a school or district has authorized their use of the Service.
• Parents and guardians interacting with us about a student's information.
• General visitors to our marketing website and newsletter subscribers.

Throughout this policy we distinguish two kinds of information:

• Marketing data — information about people who interact with our general audience, such as newsletter subscribers and visitors to our marketing website.
• School data — information about teachers and students that is processed through a school or district's authorized use of the Service for educational purposes.

We treat these two categories differently, and we say so wherever it matters. In particular, the advertising and marketing tools described in Sections 4 and 5 apply only to marketing data and are never applied to school data (including student information).

2. Information We Collect

We collect information in three ways: directly from you, automatically when you use the Service, and from your school or district when they authorize use of the Service.

Account and profile data

When you create an account or interact with us, you may provide:

• Name and email address.
• Account credentials and account settings.
• Role or organization information (for example, that you are a teacher or are affiliated with a particular school).

Content you upload or create

When you use the Service, you may create, upload, save, or share:

• Worksheets, lesson materials, prompts, and other educational content.
• Files and documents you upload to generate or edit resources.
• Content that may reference or include student information, where your school has authorized such use.

We refer to this collectively as "Content." Content may be processed by AI providers to deliver Service features, as described in Sections 3 and 5.

Schools and teachers are responsible for ensuring that any student information included in Content is appropriate for the authorized educational use. We encourage minimizing the amount of student personal information included in prompts and uploads.

Usage and device data

When you access the Service, we and our providers may automatically collect:

• Log and usage data, such as pages or features viewed, actions taken, and timestamps.
• Device and technical data, such as browser type, operating system, general (approximate) location derived from IP address, and similar diagnostic information.

Cookies and similar technologies

We and our providers use cookies and similar technologies to operate the Service, remember preferences, and understand usage. See Section 4 for details and your choices.

Payment information

The Service is currently a free private beta, so we generally do not collect payment information today. If we introduce paid features in the future, payments would be handled by third-party payment providers. In that case, those providers would process your payment details (such as card information), and we would receive limited information such as billing contact details and transaction status. We do not store full payment card numbers ourselves.

Support communications

When you contact us for support or otherwise communicate with us, we collect the information you choose to share, such as your name, email, the contents of your messages, and any attachments.

How we collect this information

• Directly from you — when you register, set up your profile, upload Content, subscribe to our newsletter, or contact support.
• Automatically — through cookies, log files, and similar technologies as you use the Service.
• From your school or district — when an authorized school official sets up accounts, rosters, or otherwise provides information so that teachers and students can use the Service.

3. How We Use Your Information

We use the information we collect to:

• Provide and operate the Service — create and maintain accounts, store your Content, and deliver the features you request.
• Enable AI-assisted features — process your prompts and Content (including with AI providers) to generate, edit, and improve worksheets and educational resources.
• Maintain and improve the Service — understand how the Service is used, debug issues, develop new features, and improve performance and reliability, including during the private beta.
• Communicate with you — respond to support requests, send service and administrative messages, and (for our general audience) send newsletters or product updates you have requested.
• Protect the Service and our users — detect, prevent, and respond to fraud, abuse, security incidents, and violations of our terms.
• Comply with legal obligations — meet applicable legal, regulatory, and contractual requirements.

Limits specific to student/education data

For student and education data processed under school authorization, we:

• Use it only to provide and support the Service for the school's educational purposes and as directed by the school.
• Do not use it for targeted advertising.
• Do not use it to build profiles of students for any purpose other than supporting the school's authorized educational use.
• Do not use it to train third-party AI models for unrelated purposes. Content may be processed by AI providers to deliver Service features, but student data is not made available to train third-party models for purposes unrelated to providing the Service.

We may create and use de-identified or aggregated data that cannot reasonably be used to identify any student in order to operate, secure, and improve the Service, and we will not attempt to re-identify such data.

4. Cookies, Analytics, and Similar Technologies

We and our providers use cookies, pixels, local storage, and similar technologies to:

• Operate the Service — keep you signed in, remember preferences, and maintain security. These are essential to core functionality.
• Understand usage — through analytics tools that help us see how features are used so we can improve them.
• Support marketing — on our marketing website and newsletter, we may use cookies or similar technologies from advertising/marketing tools to measure and improve our outreach.

Where advertising and marketing technologies apply

Advertising and marketing cookies and tools apply only to our general audience — for example, visitors to our marketing website and newsletter subscribers. They are not applied within the student/education experience and are not used with student or education data.

Your choices

• Most browsers let you block or delete cookies through their settings. Blocking some cookies may affect how the Service works.
• Where required by law, we present a cookie banner or consent tool so you can manage non-essential cookies.
• We honor recognized opt-out preference signals, such as Global Privacy Control, for the sale or sharing of personal information where applicable law gives those signals effect.

5. Third-Party Services and Processors

We rely on trusted third-party providers ("processors" or "service providers") to operate the Service. We use the following categories of providers, and we limit the information shared to what each provider needs to perform its function on our behalf:

• Analytics tools — to understand usage and improve the Service.
• Payment providers — to process payments if and when paid features are introduced (not currently active during the free private beta).
• Cloud hosting — to host the Service, store data, and provide infrastructure.
• Email services — to send service, administrative, and (for our general audience) newsletter communications.
• AI tools/providers — to deliver AI-assisted features by processing prompts and Content.
• Advertising/marketing tools — to measure and support marketing only for our general audience (for example, newsletter and marketing-site visitors).

Safeguards with providers

• We seek to engage providers that offer appropriate security and privacy protections, and we direct them to use the information only to provide services to us.
• For student and education data, we direct our providers, including AI providers, not to use that data for targeted advertising, to build non-educational profiles, or to train third-party AI models for purposes unrelated to providing the Service.
• Advertising and marketing tools are not given access to student or education data.

We may update our providers over time as the Service evolves during and after the private beta. When the Service exits beta, we expect to publish more specific provider and cookie information.

6. How and When We Share Information

We share information only in the limited circumstances described below.

With service providers and processors

We share information with the third-party providers described in Section 5 so they can perform services on our behalf, subject to appropriate safeguards and use restrictions.

With your school or district

Where a school or district authorizes use of the Service, we may make account and education data, including relevant Content, available to authorized officials of that school or district. The student education records and student personal information processed through the Service remain under the ownership and control of the authorizing school or district. Schools and districts are responsible for managing access within their organizations and for their own use of the information. See Section 7 for more on our role and student data.

For legal and safety reasons

We may disclose information when we believe in good faith that it is necessary to:

• Comply with applicable law, legal process, or a valid governmental request.
• Enforce our terms and other agreements.
• Detect, prevent, or address fraud, security, or technical issues.
• Protect the rights, property, or safety of Worksheet Builder, our users, or the public.

In a business transfer

If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction. We will take reasonable steps to ensure that any successor continues to handle information consistent with this policy, and we will notify affected users where required.

What we do NOT do

• We do not sell personal information of any user, and we do not sell student personal information.
• We do not share personal information for cross-context behavioral advertising directed at students.
• We do not use student or education data for targeted advertising.
• We do not use student or education data to build non-educational profiles.
• We do not share student or education data with advertising or marketing tools.

7. Children's and Student Data

Protecting student and children's data is central to how we operate. The Service is designed for use by teachers and schools, and any student use must be authorized by a school or district.

School authorization and our role

• We make the Service available to students only under the authorization and direction of a school or district.
• The student education records and student personal information processed through the Service remain under the ownership and control of the authorizing school or district. Worksheet Builder does not own student data and processes it solely on the school's behalf and at its direction.
• Where a school designates us as such, we may act as a school official with a legitimate educational interest under the Family Educational Rights and Privacy Act (FERPA), and as a service provider processing data on the school's behalf. In this role, we are subject to the direct control of the school or district with respect to the use and maintenance of education records, we use those records only for the authorized educational purposes, and we do not re-disclose them except as permitted by the school or required by law.
• The Service is built to support schools' compliance with FERPA and is designed to align with the Children's Online Privacy Protection Act (COPPA), where applicable. We do not claim to be certified under, or to guarantee compliance with, these laws.

COPPA and parental consent

For students under 13, COPPA generally requires verifiable consent before collecting personal information online. Where a school authorizes use of the Service for educational purposes, the school may provide consent on behalf of parents for the educational use of the Service, consistent with COPPA's school-consent framework. The school provides this consent only for the educational use of the Service. Parents and guardians may direct any objection to, or withdrawal of, that consent through the student's school or district. When a school instructs us to do so, we will stop collecting the student's personal information and will delete it, except where retention is required by law. Schools are also responsible for obtaining any additional consents required by their own policies or applicable law.

Limits on use of student data

For student data, we do not:

• Use it for targeted advertising.
• Apply advertising or marketing tools to it.
• Build non-educational profiles of students.
• Use it to train third-party AI models for purposes unrelated to providing the Service.

AI providers may process Content to deliver Service features, but student data is not used to train third-party models for unrelated purposes.

Parental rights and FERPA rights

Under FERPA, parents (and "eligible students" — generally students who are 18 or older or who attend a postsecondary institution) have rights to inspect and review the student's education records and to request correction of records they believe are inaccurate or misleading. Because the Service is provided under school authorization, these rights are exercised through the student's school or district, which owns and controls the education records. We will work with schools and districts to help respond to verified requests to access, correct, or delete a student's personal information, consistent with applicable law and the school's instructions. See Section 8.

8. Your Privacy Rights and Choices

Depending on where you live and your relationship with us, you may have certain rights regarding your personal information. We honor the rights available to you under applicable law.

Rights that may be available to you

• Access — request a copy of the personal information we hold about you.
• Correction — request that we correct inaccurate or incomplete information.
• Deletion — request that we delete your personal information, subject to legal and operational exceptions.
• Portability — request a copy of certain information in a portable format.
• Opt-out — opt out of marketing communications and, where applicable, of any "sale" or "sharing" of personal information or targeted advertising.
• Withdraw consent — where we rely on consent, withdraw it at any time (without affecting prior processing).
• Non-discrimination — we will not discriminate against you for exercising your privacy rights.

US state privacy rights

Residents of certain US states may have additional rights under applicable state privacy laws, including the rights listed above. We do not sell the personal information of our users, and we do not use student or education data for targeted advertising, so those particular practices do not apply.

GDPR-style rights

If you are in a jurisdiction with GDPR-style protections, you may also have rights to object to or restrict certain processing, and to lodge a complaint with a supervisory authority. Where we process personal data of such individuals, we rely on appropriate legal bases, such as consent, performance of a contract, legitimate interests, or compliance with legal obligations.

How schools and parents exercise rights for students

• For student and education data, rights are generally exercised through the school or district that authorized use of the Service.
• Parents and guardians who wish to access, correct, or delete a student's information should contact the student's school, which can direct requests to us. We will assist the school in responding to verified requests, consistent with applicable law.

How to exercise your rights

To make a request, contact us using the details in Section 13. We may need to verify your identity and, for student data, confirm the request through the relevant school or district before responding. We will respond within the timeframes required by applicable law.

Marketing choices

You can unsubscribe from marketing emails at any time using the link in those messages or by contacting us. We will still send necessary service and administrative messages.

9. Data Retention

We retain personal information for as long as needed to provide the Service and for the purposes described in this policy, including:

• Maintaining your account and Content while your account is active.
• Complying with legal, accounting, or reporting obligations.
• Resolving disputes and enforcing our agreements.

General and marketing data

As a general guide, we keep newsletter subscriber information until you unsubscribe and for a limited period afterward, support communications for a limited period after your request is resolved, and log and usage data for a limited period for security, diagnostic, and analytics purposes. We will set more specific retention periods as the Service exits beta and will update this policy accordingly.

Education data

For student and education data, we retain information in line with the authorizing school's or district's instructions and applicable law. On verified request from a school or district, or on termination of the relationship, we will delete or return education data within a reasonable period, except where retention is required by law.

Beta data

As a free private beta, certain data may be deleted or reset as we develop the Service. When we no longer need information, we will delete, anonymize, or de-identify it using reasonable measures, and we will not attempt to re-identify de-identified information.

10. How We Protect Your Information

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, and alteration. These may include:

• Encryption of data in transit and, where appropriate, at rest.
• Access controls that limit who can access personal information.
• Monitoring, logging, and other operational security measures.
• Use of reputable cloud hosting and service providers that maintain their own security programs.

No method of transmission over the internet or method of electronic storage is 100% secure. While we work to protect your information, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us of any suspected unauthorized use.

If we become aware of a security incident affecting student or education data, we will notify the authorizing school or district without undue delay and cooperate with them as required by applicable law and our agreement with them, so they can meet their own notification obligations.

11. International Users and Data Transfers

Worksheet Builder is based in the United States, and our service providers may process and store information in the United States or other countries. If you use the Service from outside the United States, your information will be processed in the United States and possibly other countries, where data protection laws may differ from those in your own country.

Where the law requires it, we take steps designed to ensure that international transfers of personal data are subject to appropriate safeguards, such as Standard Contractual Clauses or other recognized transfer mechanisms.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the Service, our practices, or legal requirements — including as the free private beta develops. When we make changes, we will update the "Last updated" date at the top of this policy and post the revised version at [Website URL].

If we make material changes, we will provide additional notice where appropriate, such as by email or through the Service. Your continued use of the Service after the updated policy takes effect means you accept the changes, except where additional consent is required by law.

13. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our data practices, please contact us:

• Worksheet Builder, operated by [Company Legal Name]
• General contact email: [Contact Email]
• Privacy contact email: [Privacy Contact Email]
• Mailing address: [Company Mailing Address]
• Website: [Website URL]

Schools, districts, parents, and guardians may also contact us at the privacy email above with questions about student data. For student-specific requests, please coordinate with the relevant school or district where possible, so we can verify and respond appropriately.

Governing law

This Privacy Policy is governed by the laws of the State of [State/Jurisdiction], United States, except where applicable law provides otherwise.

This document is a draft template provided for general information only and is not legal advice. Please have it reviewed by a qualified attorney licensed in your jurisdiction before you publish or rely on it.