{"id":6236,"date":"2025-03-26T14:29:21","date_gmt":"2025-03-26T14:29:21","guid":{"rendered":"https:\/\/www.smarteducator.ai\/privacy-policy\/"},"modified":"2025-11-04T17:45:07","modified_gmt":"2025-11-04T17:45:07","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.smarteducator.ai\/en-us\/privacy-policy\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"\n\n\t

Sendient\u00a0Privacy Notice (US)<\/b>\u00a0<\/p>\n

Effective:\u00a0<\/i>4 November\u00a02025<\/b>\u00a0<\/p>\n

    \n
  1. Scope<\/b><\/li>\n<\/ol>\n

    This Privacy Notice explains how Sendient.ai (“Sendient”,\u00a0“we”,\u00a0“our”) collects, uses, and protects personal information in the United States. It applies to our products and services, including\u00a0SmartEducator,\u00a0SmartDetector,\u00a0SmartAssessor, and internal HR\/employee systems.\u00a0<\/p>\n

    This notice is designed to meet requirements under:\u00a0<\/p>\n

      \n
    • Federal education and child protection laws<\/b>\u00a0(FERPA, COPPA, SOPPA, PPRA, CIPA).\u00a0<\/li>\n<\/ul>\n
        \n
      • State consumer privacy laws<\/b>\u00a0(including CCPA\/CPRA – California, VCDPA – Virginia, CPA – Colorado, CTDPA – Connecticut, UTDPA – Utah).\u00a0<\/li>\n<\/ul>\n
          \n
        1. About Us<\/b><\/li>\n<\/ol>\n

          Sendient\u00a0provides AI-driven assessment and compliance products. We are headquartered in the UK, with US operations.\u00a0<\/p>\n

          Controller vs Processor roles:<\/b>\u00a0<\/p>\n

            \n
          • Controller:<\/b>\u00a0Employee data\u00a0<\/li>\n<\/ul>\n
              \n
            • Processor:<\/b>\u00a0SmartEducator\u00a0(on behalf of schools\/educators),\u00a0SmartDetector\u00a0(user-submitted text),\u00a0Sendient\u00a0HR\/employee data,\u00a0SmartAssessor\u00a0(on behalf of corporate clients).\u00a0<\/li>\n<\/ul>\n
                \n
              1. What Data We Collect<\/b><\/li>\n<\/ol>\n

                Depending on the service, we may collect or process:\u00a0<\/p>\n

                  \n
                • Students\/education users (via schools):<\/b>\u00a0names, identifiers, submissions, grades, feedback, metadata.\u00a0<\/li>\n<\/ul>\n
                    \n
                  • SmartDetector\u00a0users:<\/b>\u00a0uploaded text (which may include incidental identifiers).\u00a0<\/li>\n<\/ul>\n
                      \n
                    • Corporate users (SmartAssessor):<\/b>\u00a0employee\/engineer form inputs, compliance data, audit logs.\u00a0<\/li>\n<\/ul>\n
                        \n
                      • Employees (HR):<\/b>\u00a0contact, payroll, welfare, performance.\u00a0<\/li>\n<\/ul>\n
                          \n
                        • Marketing and support:<\/b>\u00a0contact details, preferences, IP address, usage data.\u00a0<\/li>\n<\/ul>\n
                            \n
                          • Recruitment:<\/b>\u00a0CVs, education\/employment history, right-to-work info.\u00a0<\/li>\n<\/ul>\n
                              \n
                            1. How We Use Data<\/b><\/li>\n<\/ol>\n

                              We use personal information for:\u00a0<\/p>\n

                                \n
                              • Providing marking and feedback (SmartEducator).\u00a0<\/li>\n<\/ul>\n
                                  \n
                                • Identifying\u00a0AI-generated content (SmartDetector).\u00a0<\/li>\n<\/ul>\n
                                    \n
                                  • Compliance checks and certification (SmartAssessor).\u00a0<\/li>\n<\/ul>\n
                                      \n
                                    • HR\/payroll and employee welfare (internal).\u00a0<\/li>\n<\/ul>\n
                                        \n
                                      • Research, innovation, and service improvement.\u00a0<\/li>\n<\/ul>\n
                                          \n
                                        • Marketing (with opt-out).\u00a0<\/li>\n<\/ul>\n
                                            \n
                                          1. Legal Bases and Authority<\/b><\/li>\n<\/ol>\n
                                              \n
                                            • Schools\/education:<\/b>\u00a0FERPA and SOPPA govern school-provided student data.\u00a0Sendient\u00a0acts as a Processor, under contract with the school (Controller).\u00a0<\/li>\n<\/ul>\n
                                                \n
                                              • Children under 13:<\/b>\u00a0COPPA\u00a0requires\u00a0parental consent for data collection; we process only via schools acting “in loco parentis”.\u00a0<\/li>\n<\/ul>\n
                                                  \n
                                                • Consumer privacy:<\/b>\u00a0For direct users (e.g.\u00a0SmartDetector), we rely on contractual necessity and legitimate business interests, consistent with state privacy laws.\u00a0<\/li>\n<\/ul>\n
                                                    \n
                                                  • Employment:<\/b>\u00a0For employees, we process under employment contracts and applicable employment law.\u00a0<\/li>\n<\/ul>\n

                                                    We do not “sell” personal information. We do not share data for targeted advertising.\u00a0<\/p>\n

                                                      \n
                                                    1. Sharing Data<\/b><\/li>\n<\/ol>\n

                                                      We may share with:\u00a0<\/p>\n

                                                        \n
                                                      • Service providers (e.g. Microsoft Azure US for hosting,\u00a0Google,\u00a0Stripe for payments, Kinde for authentication).\u00a0<\/li>\n<\/ul>\n
                                                          \n
                                                        • Schools\/employers (if you are using their services).\u00a0<\/li>\n<\/ul>\n
                                                            \n
                                                          • Regulators, auditors, or law enforcement, if legally required.\u00a0<\/li>\n<\/ul>\n

                                                            All providers are bound by contracts and data protection agreements.\u00a0<\/p>\n

                                                              \n
                                                            1. Children’s Privacy<\/b><\/li>\n<\/ol>\n
                                                                \n
                                                              • COPPA:<\/b>\u00a0For children under 13, any data is collected only through schools with parental consent mechanisms. We do not knowingly allow children under 13 to create accounts directly.\u00a0<\/li>\n<\/ul>\n
                                                                  \n
                                                                • FERPA:<\/b>\u00a0Schools\u00a0remain\u00a0responsible for educational records.\u00a0Sendient\u00a0acts as a Processor.\u00a0<\/li>\n<\/ul>\n
                                                                    \n
                                                                  • SOPPA (Illinois):<\/b>\u00a0Contracts with districts cover security, data breach notification, and deletion requests.\u00a0<\/li>\n<\/ul>\n
                                                                      \n
                                                                    1. Your Rights<\/b><\/li>\n<\/ol>\n

                                                                      Depending on your state, you may have the following rights:\u00a0<\/p>\n

                                                                        \n
                                                                      • Access: to request a copy of the data we hold.\u00a0<\/li>\n<\/ul>\n
                                                                          \n
                                                                        • Correction: to update inaccurate data.\u00a0<\/li>\n<\/ul>\n
                                                                            \n
                                                                          • Deletion: to request deletion of data.\u00a0<\/li>\n<\/ul>\n
                                                                              \n
                                                                            • Data portability: to request transfer of your data.\u00a0<\/li>\n<\/ul>\n
                                                                                \n
                                                                              • Opt-out: of the sale or sharing of personal data (we do not\u00a0sell, but\u00a0provide this right where\u00a0required).\u00a0<\/li>\n<\/ul>\n
                                                                                  \n
                                                                                • Limit use of sensitive data (California).\u00a0<\/li>\n<\/ul>\n
                                                                                    \n
                                                                                  • Appeal rights (Virginia, Colorado).\u00a0<\/li>\n<\/ul>\n

                                                                                    Requests can be made via datacontroller@sendient.ai. We will verify your identity before responding. Parents can exercise these rights on behalf of their children.\u00a0<\/p>\n

                                                                                      \n
                                                                                    1. Data Retention<\/b><\/li>\n<\/ol>\n
                                                                                        \n
                                                                                      • Student\/assessment data:\u00a0retained\u00a0for contract duration + up to 2\u00a0years, unless\u00a0earlier deletion\u00a0requested.\u00a0<\/li>\n<\/ul>\n
                                                                                          \n
                                                                                        • HR\/payroll:\u00a0retained\u00a0as required by employment\/tax law (generally 6\u00a0years).\u00a0<\/li>\n<\/ul>\n
                                                                                            \n
                                                                                          • Recruitment: up to 12 months post-process.\u00a0<\/li>\n<\/ul>\n
                                                                                              \n
                                                                                            • Marketing: until you opt out.\u00a0<\/li>\n<\/ul>\n

                                                                                              \u00a0<\/p>\n

                                                                                                \n
                                                                                              1. How Third-Party Services Access and Use Data<\/b><\/li>\n<\/ol>\n

                                                                                                We only use third-party processors necessary to deliver\u00a0SmartEducator\u00a0services.\u00a0<\/p>\n

                                                                                                We do not sell student or teacher data.\u00a0<\/p>\n

                                                                                                We require all processors to meet or exceed UK GDPR, FERPA, COPPA, and regional education privacy standards.\u00a0<\/p>\n

                                                                                                Microsoft Azure (Hosting & Processing)<\/b>\u00a0<\/p>\n\n\n\n\n\n\n\n\n
                                                                                                Category<\/b>\u00a0<\/td>\nDetails<\/b>\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Accessed<\/b>\u00a0<\/td>\n\u2022 Student work, assessment content, teacher inputs, and account identifiers stored\/processed on Azure
                                                                                                \n\u2022 Metadata needed for application delivery, analytics, and security logging\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Usage<\/b>\u00a0<\/td>\n\u2022 Used solely to run\u00a0SmartEducator\u00a0,SmartAssessor\u00a0and\u00a0SmartDetector\u00a0services and provide AI-assisted marking and feedback
                                                                                                \n\u2022 AI models hosted in the UK\/EU\/US are used only when student data is processed in the user’s chosen region\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Sharing<\/b>\u00a0<\/td>\n\u2022 No sharing of customer content outside\u00a0Sendient\u00a0systems
                                                                                                \n\u2022 No data used by Microsoft for model training or product improvement\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Storage & Protection<\/b>\u00a0<\/td>\n\u2022 All data encrypted in transit and at rest
                                                                                                \n\u2022 Hosted in Microsoft Azure under enterprise-grade security
                                                                                                \n\u2022 UK\/EU users’ data hosted within UK\/EU region unless explicitly chosen otherwise\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Retention & Deletion<\/b>\u00a0<\/td>\n\u2022\u00a0Retained\u00a0only for duration of school contract or as otherwise instructed
                                                                                                \n\u2022 Full secure deletion within\u00a090 days<\/b>\u00a0of contract termination
                                                                                                \n\u2022 Deletion requests\u00a0honoured\u00a0via school administrator\u00a0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                                                                                                \u00a0<\/p>\n

                                                                                                Microsoft Azure AI Models (UK, Sweden, US)<\/b>\u00a0<\/p>\n\n\n\n\n\n\n\n\n
                                                                                                Category<\/b>\u00a0<\/td>\nDetails<\/b>\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Accessed<\/b>\u00a0<\/td>\n\u2022 Assignment content, Student\u00a0Submissions\u00a0and metadata used for AI-assisted grading workflows
                                                                                                \n\u2022 Only data necessary for model operation is transmitted\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Usage<\/b>\u00a0<\/td>\n\u2022 Used solely to carry out marking, feedback,\u00a0mark scheme\/rubric alignment, and analytics
                                                                                                \n\u2022 No data used to train Microsoft’s general AI models\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Sharing<\/b>\u00a0<\/td>\n\u2022 No sharing with Microsoft or external parties beyond model inference
                                                                                                \n\u2022 Processing only – no retention outside\u00a0Sendient\u00a0systems\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Storage & Protection<\/b>\u00a0<\/td>\n\u2022 Processing within Azure secure environments
                                                                                                \n\u2022 Models\u00a0operate\u00a0with encryption and strict access controls\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Retention & Deletion<\/b>\u00a0<\/td>\n\u2022 Data only passed temporarily to AI models for inference
                                                                                                \n\u2022 No persistence beyond processing event\u00a0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                                                                                                \u00a0<\/p>\n

                                                                                                Google Drive (via\u00a0Edlink\u00a0Integration)<\/b>\u00a0<\/p>\n\n\n\n\n\n\n\n\n
                                                                                                Category<\/b>\u00a0<\/td>\nDetails<\/b>\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Accessed<\/b>\u00a0<\/td>\n\u2022 Read-only access to assignment files and submissions stored in Google Drive\u00a0\n

                                                                                                \u2022 Only for authorised teachers and classes\u00a0synced\u00a0via\u00a0Edlink\u00a0<\/p>\n\u2022 Access limited to specific files linked to assignments\u00a0<\/td>\n<\/tr>\n

                                                                                                Data Usage<\/b>\u00a0<\/td>\n\u2022 Files retrieved only when a teacher chooses to use AI-assisted grading\u00a0\n\u2022 Used solely to support marking workflows and return feedback to the school\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Sharing<\/b>\u00a0<\/td>\n\u2022 Shared only within the contracted school organisation\u00a0\n\u2022 No third-party sharing beyond Google\/Edlink\u00a0processing\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Storage & Protection<\/b>\u00a0<\/td>\n\u2022 Files stored in encrypted Azure storage\u00a0\n

                                                                                                \u2022 Only stored if teacher explicitly requests AI grading\u00a0<\/p>\n\u2022 Role-based access ensures access only for authorised school users\u00a0<\/td>\n<\/tr>\n

                                                                                                Retention & Deletion<\/b>\u00a0<\/td>\n\u2022\u00a0Retained\u00a0only during contract or teacher opt-in\u00a0\n

                                                                                                \u2022\u00a0Deleted\u00a0within 90 days after contract termination or school request\u00a0<\/p>\n\u2022 Teachers may request deletion anytime\u00a0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                                                                                                \u00a0<\/p>\n

                                                                                                Edlink\u00a0(Integration partner for Google Classroom & Microsoft Teams)<\/b>\u00a0<\/p>\n\n\n\n\n\n\n\n\n
                                                                                                Category<\/b>\u00a0<\/td>\nDetails<\/b>\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Accessed<\/b>\u00a0<\/td>\n\u2022 Student rosters, class metadata, assignment IDs, and submission links\u00a0\nApart from Google Classroom\u00a0(where Google Drive is used), Student submissions and Assignments plus other assignment materials are also accessed
                                                                                                \n\u2022 Only accessed when a school authorises integration\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Usage<\/b>\u00a0<\/td>\n\u2022 Used solely to\u00a0sync\u00a0students, classes,\u00a0assignments\u00a0and student submissions\u00a0for\u00a0SmartEducator\u00a0workflows
                                                                                                \n\u2022 No use for advertising, profiling, or analytics beyond school-approved functions\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Sharing<\/b>\u00a0<\/td>\n\u2022 Data shared only between the school,\u00a0Edlink, and SmartEducator
                                                                                                \n\u2022 No sharing with external third parties\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Storage & Protection<\/b>\u00a0<\/td>\n\u2022\u00a0Edlink\u00a0securely stores integration metadata and access tokens
                                                                                                \n\u2022 Transport encrypted; GDPR\/FERPA compliant\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Retention & Deletion<\/b>\u00a0<\/td>\n\u2022 Data\u00a0retained\u00a0only while integration is active
                                                                                                \n\u2022 Removal occurs when school disables integration or contract ends\u00a0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                                                                                                \u00a0<\/p>\n

                                                                                                Microsoft Teams for Education<\/b>\u00a0<\/p>\n\n\n\n\n\n\n\n\n
                                                                                                Category<\/b>\u00a0<\/td>\nDetails<\/b>\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Accessed<\/b>\u00a0<\/td>\n\u2022 Class roster data, assignments, submissions, and associated metadata
                                                                                                \n\u2022 Access only with school authorization via\u00a0Edlink\u00a0or direct integration\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Usage<\/b>\u00a0<\/td>\n\u2022 Accessed to retrieve and process student submissions for marking
                                                                                                \n\u2022 Only teachers and authorised school staff can\u00a0initiate\u00a0transfers\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Sharing<\/b>\u00a0<\/td>\n\u2022 No external sharing beyond school workflow
                                                                                                \n\u2022 Access\u00a0strictly limited\u00a0to authorised school users\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Storage & Protection<\/b>\u00a0<\/td>\n\u2022 Files stored only if teacher opts into AI marking
                                                                                                \n\u2022 Stored securely in Azure with encryption and RBAC\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Retention & Deletion<\/b>\u00a0<\/td>\n\u2022 Same as Google Drive:\u00a0retained\u00a0for contract term
                                                                                                \n\u2022\u00a0Deleted\u00a0within 90 days of termination or earlier on request\u00a0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                                                                                                \u00a0<\/p>\n

                                                                                                Kinde (Authentication Provider)<\/b>\u00a0<\/p>\n\n\n\n\n\n\n\n\n
                                                                                                Category<\/b>\u00a0<\/td>\nDetails<\/b>\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Accessed<\/b>\u00a0<\/td>\n\u2022 User login details, school\/teacher identity attributes, authentication tokens
                                                                                                \n\u2022 No student work or assignment content\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Usage<\/b>\u00a0<\/td>\n\u2022 Used solely to authenticate and authorize users
                                                                                                \n\u2022 No profiling or marketing usage\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Sharing<\/b>\u00a0<\/td>\n\u2022 No data shared outside\u00a0Sendient\u00a0and Kinde authentication flow
                                                                                                \n\u2022 Tokens encrypted and access-scoped\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Storage & Protection<\/b>\u00a0<\/td>\n\u2022 Encrypted credentials and tokens stored securely
                                                                                                \n\u2022 Zero-trust and MFA security model enforced\u00a0<\/td>\n<\/tr>\n
                                                                                                Data Retention & Deletion<\/b>\u00a0<\/td>\n\u2022 Authentication data\u00a0retained\u00a0only while account is active
                                                                                                \n\u2022\u00a0Deleted\u00a0upon account termination or school request\u00a0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                                                                                                \u00a0<\/p>\n

                                                                                                  \n
                                                                                                1. 11. Security<\/b><\/li>\n<\/ol>\n

                                                                                                  We use encryption, access controls, secure hosting (Azure US\/region-locked), audit logging, and\u00a0monitoring\u00a0to protect personal data.\u00a0<\/p>\n

                                                                                                    \n
                                                                                                  1. 12. International Transfers<\/b><\/li>\n<\/ol>\n

                                                                                                    If US data is accessed or transferred to the UK\/EU, we use standard contractual clauses or equivalent safeguards to ensure protection.\u00a0<\/p>\n

                                                                                                      \n
                                                                                                    1. 13. Changes to This Policy<\/b><\/li>\n<\/ol>\n

                                                                                                      We may update this notice to reflect changes in law or practice. Updated versions will be published on our website.\u00a0<\/p>\n

                                                                                                        \n
                                                                                                      1. 14. Contact Us<\/b><\/li>\n<\/ol>\n
                                                                                                          \n
                                                                                                        • Email: datacontroller@sendient.ai\u00a0<\/li>\n<\/ul>\n
                                                                                                            \n
                                                                                                          • Post:\u00a0Sendient,\u00a0Stoneythorpe\u00a0Hall, Southam, Warwickshire, CV47 2DL, UK\u00a0<\/li>\n<\/ul>\n
                                                                                                              \n
                                                                                                            • US users may also raise concerns with their state Attorney General or Department of Education, depending on applicable law.\u00a0<\/li>\n<\/ul>\n

                                                                                                              \u00a0<\/p>\n

                                                                                                              \u00a0<\/p>\n

                                                                                                              Appendix: Your State Privacy Rights<\/b>\u00a0<\/p>\n

                                                                                                              If you live in one of the following states, you may have\u00a0additional\u00a0privacy rights under state law. These rights apply alongside the rights already explained in our main Privacy Notice.\u00a0<\/p>\n

                                                                                                              California (CCPA\/CPRA)<\/b>\u00a0<\/p>\n

                                                                                                                \n
                                                                                                              • Right to know what personal information we collect, use, and\u00a0disclose.\u00a0<\/li>\n<\/ul>\n
                                                                                                                  \n
                                                                                                                • Right to access and request a copy of your personal information.\u00a0<\/li>\n<\/ul>\n
                                                                                                                    \n
                                                                                                                  • Right to correct inaccurate personal information.\u00a0<\/li>\n<\/ul>\n
                                                                                                                      \n
                                                                                                                    • Right to request deletion of personal information, subject to exceptions.\u00a0<\/li>\n<\/ul>\n
                                                                                                                        \n
                                                                                                                      • Right to opt out of the sale or sharing of personal information (we do not sell your data).\u00a0<\/li>\n<\/ul>\n
                                                                                                                          \n
                                                                                                                        • Right to limit use of sensitive personal information.\u00a0<\/li>\n<\/ul>\n
                                                                                                                            \n
                                                                                                                          • Right not to be discriminated against for exercising your rights.\u00a0<\/li>\n<\/ul>\n

                                                                                                                            Virginia (VCDPA)<\/b>\u00a0<\/p>\n

                                                                                                                              \n
                                                                                                                            • Rights to access, correction, deletion, and portability.\u00a0<\/li>\n<\/ul>\n
                                                                                                                                \n
                                                                                                                              • Right to opt out of targeted advertising, sale of data, or profiling in certain contexts.\u00a0<\/li>\n<\/ul>\n
                                                                                                                                  \n
                                                                                                                                • Right to appeal if a request is denied.\u00a0<\/li>\n<\/ul>\n

                                                                                                                                  Colorado (CPA)<\/b>\u00a0<\/p>\n

                                                                                                                                    \n
                                                                                                                                  • Rights to access, correction, deletion, portability, and opt-out (targeted ads, sale, profiling).\u00a0<\/li>\n<\/ul>\n
                                                                                                                                      \n
                                                                                                                                    • Right to appeal decisions.\u00a0<\/li>\n<\/ul>\n
                                                                                                                                        \n
                                                                                                                                      • We conduct data protection assessments as\u00a0required\u00a0for high-risk uses.\u00a0<\/li>\n<\/ul>\n

                                                                                                                                        Connecticut (CTDPA)<\/b>\u00a0<\/p>\n

                                                                                                                                          \n
                                                                                                                                        • Rights to access, correction, deletion, portability, and opt-out.\u00a0<\/li>\n<\/ul>\n
                                                                                                                                            \n
                                                                                                                                          • Consent required for processing sensitive personal data.\u00a0<\/li>\n<\/ul>\n

                                                                                                                                            Utah (UTDPA)<\/b>\u00a0<\/p>\n

                                                                                                                                              \n
                                                                                                                                            • Rights to access, copy,\u00a0delete\u00a0(user-provided data), portability, and opt-out (sale, targeted ads).\u00a0<\/li>\n<\/ul>\n
                                                                                                                                                \n
                                                                                                                                              • Does not provide correction or appeal rights.\u00a0<\/li>\n<\/ul>\n

                                                                                                                                                New York (Education Law \u00a72-d)<\/b>\u00a0<\/p>\n

                                                                                                                                                For K-12 student data:\u00a0<\/p>\n

                                                                                                                                                  \n
                                                                                                                                                • Right to transparency about how data is collected, used, and shared.\u00a0<\/li>\n<\/ul>\n
                                                                                                                                                    \n
                                                                                                                                                  • Right to data security safeguards aligned with state standards.\u00a0<\/li>\n<\/ul>\n
                                                                                                                                                      \n
                                                                                                                                                    • Right to be notified of breaches.\u00a0<\/li>\n<\/ul>\n
                                                                                                                                                        \n
                                                                                                                                                      • Parents may inspect and request correction of their child’s education records.\u00a0<\/li>\n<\/ul>\n
                                                                                                                                                          \n
                                                                                                                                                        • Vendors (including\u00a0Sendient) must sign state-compliant contracts with districts.\u00a0<\/li>\n<\/ul>\n

                                                                                                                                                          Illinois (SOPPA – 105 ILCS 85)<\/b>\u00a0<\/p>\n

                                                                                                                                                          For K-12 student data:\u00a0<\/p>\n

                                                                                                                                                            \n
                                                                                                                                                          • Right to transparency about what data is collected and shared.\u00a0<\/li>\n<\/ul>\n
                                                                                                                                                              \n
                                                                                                                                                            • Parents may request to review and correct their child’s information.\u00a0<\/li>\n<\/ul>\n
                                                                                                                                                                \n
                                                                                                                                                              • Schools and vendors must\u00a0maintain\u00a0reasonable security practices.\u00a0<\/li>\n<\/ul>\n
                                                                                                                                                                  \n
                                                                                                                                                                • Vendors must publicly post data agreements with districts.\u00a0<\/li>\n<\/ul>\n
                                                                                                                                                                    \n
                                                                                                                                                                  • Breach notification is\u00a0required\u00a0within 30 days.\u00a0<\/li>\n<\/ul>\n

                                                                                                                                                                    Florida (Student Online Personal Information Protection Act – F.S. \u00a71006.1494)<\/b>\u00a0<\/p>\n

                                                                                                                                                                    For K-12 student data:\u00a0<\/p>\n

                                                                                                                                                                      \n
                                                                                                                                                                    • Restrictions on targeted advertising, profiling, or selling student data.\u00a0<\/li>\n<\/ul>\n
                                                                                                                                                                        \n
                                                                                                                                                                      • Operators must use security measures to protect student information.\u00a0<\/li>\n<\/ul>\n
                                                                                                                                                                          \n
                                                                                                                                                                        • Parents may request deletion of student personal data when no longer needed.\u00a0<\/li>\n<\/ul>\n

                                                                                                                                                                          Texas (Education Code \u00a732.151 et seq.)<\/b>\u00a0<\/p>\n

                                                                                                                                                                          For K-12 student data:\u00a0<\/p>\n

                                                                                                                                                                            \n
                                                                                                                                                                          • Operators may not sell or misuse student information.\u00a0<\/li>\n<\/ul>\n
                                                                                                                                                                              \n
                                                                                                                                                                            • Restrictions on targeted advertising and profiling.\u00a0<\/li>\n<\/ul>\n
                                                                                                                                                                                \n
                                                                                                                                                                              • Parents and schools can request deletion of student data when contracts end.\u00a0<\/li>\n<\/ul>\n
                                                                                                                                                                                  \n
                                                                                                                                                                                • Operators must implement security safeguards and\u00a0comply with\u00a0district contracts.\u00a0<\/li>\n<\/ul>\n

                                                                                                                                                                                  How to Exercise Your Rights<\/b>\u00a0<\/p>\n

                                                                                                                                                                                    \n
                                                                                                                                                                                  • Contact us at\u00a0datacontroller@sendient.ai<\/b>.\u00a0<\/li>\n<\/ul>\n
                                                                                                                                                                                      \n
                                                                                                                                                                                    • We will verify your identity before fulfilling your request.\u00a0<\/li>\n<\/ul>\n
                                                                                                                                                                                        \n
                                                                                                                                                                                      • Parents may exercise these rights on behalf of their children.\u00a0<\/li>\n<\/ul>\n
                                                                                                                                                                                          \n
                                                                                                                                                                                        • If we deny your request, you may have the right to appeal (depending on your state law).\u00a0<\/li>\n<\/ul>\n

                                                                                                                                                                                          \u00a0<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n
                                                                                                                                                                                          State<\/b>\u00a0<\/td>\nScope<\/b>\u00a0<\/td>\nKey Rights for Individuals (Students\/Consumers\/Parents)<\/b>\u00a0<\/td>\nVendor \/ Operator Obligations<\/b>\u00a0<\/td>\nNotes<\/b>\u00a0<\/td>\n<\/tr>\n
                                                                                                                                                                                          California (CCPA\/CPRA)\u00a0<\/td>\nConsumers (incl. minors)\u00a0<\/td>\nAccess, copy, correction, deletion, portability, opt-out of sale\/sharing, limit sensitive data use, no discrimination\u00a0<\/td>\nPrivacy notice, respond to rights requests,\u00a0honor\u00a0opt-out, protect sensitive data\u00a0<\/td>\nApplies broadly, including edtech when dealing direct-to-consumer\u00a0<\/td>\n<\/tr>\n
                                                                                                                                                                                          Virginia (VCDPA)\u00a0<\/td>\nConsumers\u00a0<\/td>\nAccess, correction, deletion, portability, opt-out (ads\/sale\/profiling), appeal rights\u00a0<\/td>\nData protection assessments for high-risk uses\u00a0<\/td>\nSimilar to\u00a0Colorado\/Connecticut\u00a0<\/td>\n<\/tr>\n
                                                                                                                                                                                          Colorado (CPA)\u00a0<\/td>\nConsumers\u00a0<\/td>\nAccess, correction, deletion, portability, opt-out (ads\/sale\/profiling), appeal rights\u00a0<\/td>\nConduct DPIAs, security safeguards\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
                                                                                                                                                                                          Connecticut (CTDPA)\u00a0<\/td>\nConsumers\u00a0<\/td>\nAccess, correction, deletion, portability, opt-out; consent for sensitive data\u00a0<\/td>\nData minimisation, security safeguards\u00a0<\/td>\nVery similar\u00a0to VA\/CO\u00a0<\/td>\n<\/tr>\n
                                                                                                                                                                                          Utah (UTDPA)\u00a0<\/td>\nConsumers\u00a0<\/td>\nAccess, copy,\u00a0delete\u00a0(user-provided data), portability, opt-out (sale\/ads)\u00a0<\/td>\nBasic security safeguards\u00a0<\/td>\nNarrower than others (no correction\/appeal)\u00a0<\/td>\n<\/tr>\n
                                                                                                                                                                                          New York (Ed Law 2-d)\u00a0<\/td>\nK-12 student data\u00a0<\/td>\nParents: access, correction, transparency, breach notification\u00a0<\/td>\nVendors must sign compliant contracts, ensure security\u00a0<\/td>\nApplies only to education records\u00a0<\/td>\n<\/tr>\n
                                                                                                                                                                                          Illinois (SOPPA)\u00a0<\/td>\nK-12 student data\u00a0<\/td>\nParents: access, correction; transparency; breach notice (30 days)\u00a0<\/td>\nVendors must post contracts, safeguard data\u00a0<\/td>\nSchools\/districts drive compliance\u00a0<\/td>\n<\/tr>\n
                                                                                                                                                                                          Florida (F.S. 1006.1494)\u00a0<\/td>\nK-12 student data\u00a0<\/td>\nParents: deletion requests; protections from profiling\/ads\u00a0<\/td>\nOperators: no targeted ads, no selling, safeguard data\u00a0<\/td>\nStudent-focused protections\u00a0<\/td>\n<\/tr>\n
                                                                                                                                                                                          Texas (Ed Code 32.151 et seq.)\u00a0<\/td>\nK-12 student data\u00a0<\/td>\nParents\/schools: deletion requests\u00a0<\/td>\nOperators: no sale, no profiling, safeguard data\u00a0<\/td>\nVendor contracts\u00a0required\u00a0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

                                                                                                                                                                                          \u00a0<\/p>\n\n","protected":false},"excerpt":{"rendered":"

                                                                                                                                                                                          Sendient\u00a0Privacy Notice (US)\u00a0 Effective:\u00a04 November\u00a02025\u00a0 Scope This Privacy Notice explains how Sendient.ai (“Sendient”,\u00a0“we”,\u00a0“our”) collects, uses, and protects personal information in […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"disabled","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"class_list":["post-6236","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.smarteducator.ai\/en-us\/wp-json\/wp\/v2\/pages\/6236","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.smarteducator.ai\/en-us\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.smarteducator.ai\/en-us\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.smarteducator.ai\/en-us\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.smarteducator.ai\/en-us\/wp-json\/wp\/v2\/comments?post=6236"}],"version-history":[{"count":2,"href":"https:\/\/www.smarteducator.ai\/en-us\/wp-json\/wp\/v2\/pages\/6236\/revisions"}],"predecessor-version":[{"id":6313,"href":"https:\/\/www.smarteducator.ai\/en-us\/wp-json\/wp\/v2\/pages\/6236\/revisions\/6313"}],"wp:attachment":[{"href":"https:\/\/www.smarteducator.ai\/en-us\/wp-json\/wp\/v2\/media?parent=6236"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}