Security and Privacy Policy

TandemTrax LLC

Updated: November 18, 2020

TandemTrax LLC (“TandemTrax”, “we,” “us,” “our”) provides this Privacy Policy because we know that you care about how your information is collected, used, shared and retained. This privacy policy applies only to information collected when you access our website located at https://TandemTrax.com/ (“Website,” “site”). By visiting the Website or using the Services, you consent to this Privacy Policy.

Our Services enable educational institutions (“Schools” or “Customers”) to make better use of their chosen Cloud platform — Google Workspace and Google Classroom. Our Website serves as a channel for us to share information about our Services with current and potential Customers.

How we protect your information

TandemTrax takes very seriously the security and privacy of the personal information that it collects pursuant to this privacy policy. Accordingly, we will implement reasonable and appropriate security measures to protect such personal information from loss, misuse and unauthorized access, disclosure, alteration and destruction, taking into account the risks involved in processing and the nature of such data, and comply with applicable laws and regulations. We have also committed to comply with the Student Privacy Pledge (coordinated by FutureofPrivacy.org).

The type of information we collect, why we use it

We collect information for several purposes, including to provide services to our Customers and to communicate with and market to prospective customers.  The specific information and the purposes for collection are discussed below.

Service information

In the course of performing our Services, we collect several categories of information (collectively, “Service Information”).  Our Customers authorize the collection, processing and transfer of Service Information, and have the responsibility for providing notification to parents and guardians of students and for obtaining all consents as required under applicable laws and regulations.  Service Information is retained only as long as it’s necessary to provide the Services and support the particular Customer.

School information: Educational institutions who are Customers provide the following information about their schools: billing and IT contacts, timezone, class rosters – this includes class codes and titles, and teacher school email addresses. We track and collect the total number of student accounts processed for billing purposes.

School Information is only used to provide Services and support in a manner consistent with this privacy policy; to improve our Services; and to provide our Customers with additional information about our Services.

Teacher information: In addition to the class rosters information that the school provides, we also collect information from teachers about their area of responsibility, such as the grade level and subject that they teach or advise. This information is used to deliver services and  inform us in the development of new services, and is retained only as long as the teacher is a user of TandemTrax services.

Student information:  Schools provide student school email addresses for students using TandemTrax Services.  For Customers that elect to have our Services handle the creation of student accounts, we also collect additional student information required by the Cloud Platform to create accounts, such as first and last name and school email address.  Student Information is used to provide our Services and support our customers.

Student Information is retained by TandemTrax only for the period of time required to process the information and to provide the Services to our Customers.

We do not solicit or collect information directly from students or their parents or guardians – student information can only be provided by their educational institution which is our Customer, and which retains the legal responsibility for collecting and sharing this information with service providers and TandemTrax.

Student generated information: Students create significant amounts of content in their school’s Google Cloud platform – such as emails, documents, sites, or blog posts.  This information is controlled by their institutional policies through controls provided by the Google Cloud platform, and independently of TandemTrax.  Student Generated Content and content metadata (for example document titles, creation dates) held in the School’s Google Cloud platform are essential for providing the Services, and we access and process it only for that purpose. We do not collect or maintain copies of the Student Generated Content held in the School’s Cloud platform.

Application preferences information:
Users (students) can specify their preferences of the application’s behavior during their usage of TandemTrax Student Dashboard Digital Backpack. This includes information such as the selecting an avatar and interface color settings for their personal view of the Student Dashboard.

Users (district) can upload specific resources to which they have license for sharing with students. Examples include textbooks, novels, workbooks. Users (teachers) can select from the district uploaded resources to make them accessible by the student users in their class(es) are stored within TandemTrax and displayed in the student digital backpack library.

This information is stored within TandemTrax systems to provide services for the user, and is retained by TandemTrax only for as long as necessary to provide the associated Services.

Product Usage Information: TandemTrax collects information about our users’ usage of TandemTrax systems. Usage information from students are anonymized before they are recorded. Usage information is used to measure the performance of our services, to maintain and improve our services, and to help us develop new services.

Support Information:  In the course of providing Services to our Customers, the diagnostic and troubleshooting processes may require additional information to be collected (troubleshooting a student account rename for example might require access to the student’s previous name).  This information is limited in scope to what is required to resolve the support request, and is not stored in or shared with other TandemTrax systems.

Sales & marketing information

We collect information through our Website for Sales and Marketing Services from visitors who wish to learn more, purchase or participate in our Services or seek support for our product.  For example, we collect information when you request marketing information, register for a Webinar, apply for a job, interact with us via social media, take a survey, or otherwise communicate with us.  The types of information we collect may include your name, e-mail address, location, phone number, school/district affiliation, role, experience, certifications and relevant professional development, and any other information you choose to provide.

Contact information is used by our sales, support, marketing and product teams to contact visitors for the purpose of providing the requested information or services support.

Information we collect from other sources: If you interact with us through a social media site, we may have access to publicly available information from that site, such as follows and likes, in accordance with the policies determined by the social media site.  If you attend an event or a conference we sponsor or support, your contact details may be directly or indirectly shared with us.

Web analytics: Like most organizations, we rely on automatic data collection technologies when you visit our Website or use the Services. We may collect information such as your IP address, internet service provider, browser type, operating system and language, referring and exit pages and URLs, date and time, amount of time spent on particular pages, what sections of the Website you visit, number of links you click while on the Website, search terms, and other data.

Operational information: We also collect Website and Service health diagnostics, and technical logging data used for troubleshooting and performance management.

Referral source: We may identify and record the referring source (other internet location) that directed a visitor to our Website. We collect the referring Website address from the HTTP “referrer header” provided by your browser. We use this information to better serve our current and potential clients, measure our marketing services and to identify where we might find future Customers.

Cookies: Cookies are small text files that help us to personalize the content of our Website.  We use cookies to recognize repeat visitors, and manage the user experience on our Website and Services. If you prefer, you can choose to turn off all cookies via your browser settings. However, some features of our Website require cookies to function, and if you turn your cookies off then your experience of our Website may be sub-optimal.

How we disclose information

We do not sell student, teacher, or any other information in any form.

Third-party service providers: Like many businesses, we hire other companies to perform certain business-related services. We may disclose personal information to certain types of third party companies but only to the extent needed to enable them to provide such services. The types of companies that may receive personal information and their functions are: mail services (hard copy and email); hosting services; database management/back-up services; real-time messaging services; monitoring services; and payment processors. If Student Information is required, we encrypt it prior to transfer whenever possible. All such third parties function as our agents, performing services at our instruction and on our behalf pursuant to contracts which require they provide at least the same level of privacy protection as is required by this privacy policy and implemented by TandemTrax.

TandemTrax currently uses third party Sub-processors to provide infrastructure services, and to help us provide customer support and email notifications. Prior to engaging any third party Sub-processor, TandemTrax performs industry standard due diligence to evaluate their privacy, security and confidentiality practices, and executes an agreement with each Sub-processor implementing all applicable obligations.

TandemTrax may use the following Sub-processors to host Customer Data or provide other infrastructure that helps with delivery of our Services:

  • Google
  • Raygun
  • SendGrid
  • Pusher
  • Pendo

TandemTrax may use the following Sub-processors to perform other Service functions:

  • SalesForce
  • Zendesk
  • HubSpot
  • Slack
  • MailChimp
  • Zoom
  • LogMeIn
  • Xero
  • HawkSEM

Business transfers: In the event of a merger, dissolution or similar corporate event, or the sale of all or substantially all of our assets, we expect that the information that we have collected, including personal information, would be transferred to the surviving entity in a merger or the acquiring entity. All such transfers shall be subject to our commitments with respect to the privacy and confidentiality of such personal information as set forth in this privacy policy.

Disclosure to public authorities, other third parties: We are required to disclose personal information in response to lawful requests by public authorities, including for the purpose of meeting national security or law enforcement requirements. We may also disclose personal information to other third parties when compelled to do so by government authorities or required by law or regulation including, but not limited to, in response to court orders and subpoenas. We also may disclose your information when we have reason to believe someone is intending to or is causing harm to other users, or anyone else that could be harmed by such activities, or our rights or property.

Your choices and rights

We do not take part in any form of marketing to students or children.

Opt out for direct marketing. If you are a teacher or school administrator and have provided us with your information, we may send you product marketing communications. You may opt out of these communications at any time by sending a request to privacy@TandemTrax.com. Please allow us a reasonable amount of time to process your request.

Access to personal information. TandemTrax acknowledges the right of individuals to access their personal information. If you are a parent or guardian and wish to delete your child’s records from our database, please contact the appropriate School official and ask them to carry out this action in collaboration with our team.  Upon request to privacy@TandemTrax.com, we will provide you with confirmation as to whether we are processing your personal information, and have the data communicated to you within a reasonable amount of time.

Retention of customer personal information. If you are a Customer or someone who has expressed interest in our Services, we will retain your personal information in a form that identifies you only for as long as it serves the purpose(s) for which it was initially collected as stated in this privacy policy, or subsequently authorized. After such time periods have expired, we may either delete your personal information or retain it in a form such that it does not identify you personally.

If you have requested us not to contact you, we will retain your contact details on the do-not-contact list.

Data Protection Officer. (Mohammad Salih (msalih@tandemtrax.com) is the company’s data protection officer (“DPO”).

Links to external websites

The Website may contain links to third party websites (“External Sites”). TandemTrax has no control over the privacy practices of these External Sites. As such, we are not responsible for the privacy policies of those External Sites. You should check the applicable third party privacy policy and terms of use when visiting any External Sites, and before providing any personal information to such External Sites.  TandemTrax disclaims any responsibility for any activity or omission that occurs on an External Site.

Residents of the state of California

If you are a resident of California, you have certain rights and protections under the law regarding the processing of your personal data.  In circumstances where TandemTrax acts as a data processor, you must contact your data controller (your educational institution) to avail yourself of these rights and protections. We will verify that you are the person about whom we collect personal information, or an authorized representative, before we act on any privacy requests.

Legal basis for processing: If you are a resident of California, if and when we process your personal data as a data controller, we will only do so in the following situations:

  • We need to use your personal data to perform our responsibilities under our agreement with you or our customer with whom you have a relationship (e.g., for processing payments for or for providing the TandemTrax services you or our Customers have requested).
  • We have a legitimate interest in processing your personal data. For example, we may process your personal data to communicate with you about changes to our Services or to provide, secure, and improve our Services.
  • We have your consent to do so. For example, we may seek your consent to send you marketing communications.

Data subject requests: If you are a resident of California, you have the right to know what categories of personal data we hold about you, to access any such personal data, and to ask that your personal data be corrected, erased, or transferred. You may also have the right to object to, or request that we restrict, certain processing. If you would like to exercise any of these rights, you may email us at privacy@TandemTrax.com. Alternatively, you may contact us as indicated below.

Changes to this privacy policy

We may change this privacy policy from time to time. When material changes are made to this privacy policy, Customers will be notified through the contact email given to us at least two weeks prior to modification taking effect. In that time, the primary administrative contact for a Customer may request that we delete the Service Information from our systems if it does not wish to be bound by the new policy. Please allow us a reasonable amount of time to comply with your request.

How to contact us

TandemTrax’s principal headquarters are located at 144 Turnpike Rd, Southborough, MA 01772. If you have any privacy related requests, or would like to learn more about our privacy policy, you can reach us via the following:

  • Email: privacy@TandemTrax.com
  • Telephone: 800-609-8994