Click here for full version of the PowerSchool Privacy Statement.

Global Privacy Statement

Last Updated: July 1, 2024

I. Introduction

This Global Privacy Statement (“Statement’) provides information to you on how PowerSchool Holdings, Inc., and its various operating subsidiaries (“PowerSchool”) respects the privacy of the student educational records and personal information (referred to collectively as “Customer Data”) provided to us by our K-12 or higher education institutional customers (educational institutions) to process on their behalf when they, their staff, parents/guardians, and students access and use our products, including mobile services.  This Statement also provides information how PowerSchool may collect personal information (“Collected Data”) when you visit and consent to use our publicly accessible products or websites, including https://www.powerschool.com/, (our “Websites”), (collectively, the “PowerSchool Products”). How we process the information provided or collected may differ based on our relationship with you and our contractual obligations to our customers and users.  Below, we’ve detailed the different relationships we may have with you. References to “us,” “we,” “our,” or “PowerSchool” in this Privacy Statement, are referring to PowerSchool. 

• A. Data Categories

  PowerSchool categorizes data into 3 categories: Customer Data, Collected Data and Transaction Data... 

  
  PowerSchool categorizes the data into 3 categories: Customer Data, Collected Data and Transaction Data.

  Customer data which is the data received by PowerSchool from its customers and customer users and is processed by PowerSchool on behalf of the customer in our capacity as “data processor”. Collected data which means the personal information collected by PowerSchool directly from the users of our Publicly Accessible Products. Transaction data, also known as metadata, this data generated by PowerSchool software using PowerSchool Products and services and is proprietary to PowerSchool.

• B. Customer Data

  PowerSchool customers are mainly K through 12 schools and districts, and higher education institutions. The makeup of Customer Data processed... 
  PowerSchool customers are mainly K through 12 schools and districts, and higher education institutions.  The makeup of Customer Data processed by PowerSchool can vary by PowerSchool service and a customer’s product configuration.  PowerSchool provides a full spectrum of education-related services for customers to choose from.  These include K-12 education technology products, higher education products, and administration products.  Customers may have one or more of these PowerSchool products and services.  Depending on the product or service, Customers may provide student data, employee data, or applicant data for PowerSchool processing.  The mix of data provided by each customer may also vary based on how the customer configures the PowerSchool product or service for Customer Data collection (potential variations are discussed in more detail below). For this reason, it is impossible for PowerSchool to fully document the data that it will process for each customer until after the customer has fully implemented and configured the PowerSchool product and service.  The configuration may also be dynamic in that the school or district may change its data collection configuration over time.  If you have questions about which data is being collected by a customer connected to you, you should direct those questions directly to the PowerSchool customer that controls your data.  The customer’s privacy policy may be another good source of information.   

  Many school districts are also obligated to parents to post information about the data that these institutions may collect. It bears mentioning again that PowerSchool processes the Customer Data under strict contractual obligations and privacy agreements signed with the customer. PowerSchool does not use or disclose Customer Data except as authorized and required by our customers and as provided for in our agreements with our customers. Because PowerSchool does not own or control Customer Data, any request for access, review, correction, or deletion of Customer Data must come directly from our customers. With our customer’s consent, PowerSchool may receive information from affiliates in our PowerSchool Group of companies, or third parties and combine that information with Customer Data.

• C. Collected Data

  Although most PowerSchool on-line services and products are used by customers for Customer Data collection, PowerSchool websites and some... 
  Although most PowerSchool on-line services and products are used by customers for Customer Data collection, PowerSchool websites and some PowerSchool products and services collect data directly from users of our website or those products and services.  In these situations, PowerSchool is a “data controller” because PowerSchool determines the purposes for which and the way personal information is processed.  Because PowerSchool is the collector and controls the configuration of these products and services, PowerSchool can provide more detail on the data collection.  These websites, products and services are further detailed below. 

  We also collect device and usage information when you access and use PowerSchool Products, including information that your browser or the mobile app sends when you are using our products. This data may include your unique device identifier, IP address, your browser type and configuration, the date and time of your use of the product or service and cookie data. Learn more about our use of cookies in our  Cookie Statement. 

• D. Transaction Data

  Transaction Data is not Customer Data, nor is it Collected Data. It is a different PowerSchool category of data. Transaction Data may contain copied... 
  Transaction Data is not Customer Data, nor is it Collected Data. It is a different PowerSchool category of data. Transaction Data may contain copied elements from Customer Data or Collected Data.  For example, the logging of a user session may contain a unique id that identifies the user.  The unique id is necessary for monitoring the health and security of PowerSchool applications. 
  The monitoring of PowerSchool systems and applications is a part of our standard business operations to protect Customer Data and Collected Data; comply with laws; be able to provide customer support, and monitor events related to Customer Data or Collected Data. The monitoring of events is essential in preventing data-related incidents and determining if a data-related incident has occurred or is occurring that requires immediate attention by PowerSchool’s Incident Response Team.  System and application events are monitored by the creation of artifacts or metadata about our systems, applications and their use. We call this “Transaction Data”.  Transaction Data is vital to our ability to improve our products; trouble shoot customer support questions; analyze the health and performance of our products; and maintain security of Customer Data and Collected data, and privacy investigations.  Transaction Data may either contain personal information along with application data that does not directly or indirectly relate to a person; or application data without any personal information at all.   
  The storage and maintenance of Transaction Data is separate from the storage and maintenance of Customer Data and Collected Data with clear boundaries between the three types of data. In fact, Transaction Data is temporary. This means Transaction Data is permanently deleted on a regular rolling basis over time. This occurs regardless of whether Transaction Data contains any personal information or not. This is an implementation of the data minimization principle.  Transaction Data which contains no personal information or Transaction Data containing even one element of personal information are all treated the same.  Except for Service Providers acting as data subprocessors supporting our applications who are granted secure access to Transaction Data, PowerSchool does not share, disclose, sell or transfer such Transaction Data.  Additionally, PowerSchool treats all Transaction Data as PowerSchool Restricted Information – meaning confidential and secured – and at the same level as Customer Data and Collected Data.  
  PowerSchool does work with various data subprocessors to support the operability of our products.  For these vendors to service us as captured in our agreements with them, they do create metadata within their systems.  In these cases, PowerSchool binds these vendors to privacy requirements to ensure any metadata is properly deleted as required by law.  
  PowerSchool respects our customers’ privacy and data security requirements. Transaction Data is one way we fulfill that promise to our customers – educational institutions and individuals. Transaction Data provides us with the ability to service our customers properly.  

• E. Commitment to Protecting Your Data

  Whether PowerSchool is a collector or processor or your data, PowerSchool is committed to protecting your personal information. PowerSchool uses... 
  Whether PowerSchool is a collector or processor or your data, PowerSchool is committed to protecting your personal information.  PowerSchool uses commercially reasonable physical, administrative, and technical safeguards to preserve the confidentiality, integrity, and availability of your personal information. Our systems are regularly certified by third parties against industry security standards from AIPCA and ISO.  As customers provide PowerSchool with Customer Data to process, PowerSchool makes commercially reasonable efforts to ensure the security of our systems.  Please note that this is not a guarantee that such information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, administrative, and technical safeguards.   
  Regardless of whether the data is Customer Data or Collected Data, both are covered under PowerSchool’s privacy program.  PowerSchool supports privacy rights and has developed and implemented policies, processes, procedures, and technologies for the collection, processing, use, and protection of your data whether it is collected by a customer or us.  We are also a signatory of the 2020 Student Privacy Pledge. 
  How is your personal information protected? PowerSchool employs a variety of physical, administrative, and technological safeguards designed to protect your data against loss, misuse, and unauthorized access or disclosure. We strive to continuously maintain reasonable physical, administrative, and technical security measures. Our security measures consider the type and sensitivity of the data being collected, used, and stored, and the current state of technology and threats to data. PowerSchool independently verifies its security management system to the internationally recognized standard for security management and holds ISO 27001 and SOC2 certifications. PowerSchool also endeavors to align its privacy and security operations to best practices and relevant international regulations. 

• F. Children's Privacy

  Under the Family Educational Rights and Privacy Act (FERPA), PowerSchool acts as a “school official” with “legitimate educational interests” and... 
  Under the Family Educational Rights and Privacy Act (FERPA), PowerSchool acts as a “school official” with “legitimate educational interests” and contractually relies on educational institutions to obtain parental consent, if required. 
  More generally, PowerSchool has processes and procedures in place to protect the personal information of children under 13, as detailed below.  We do not use such information for any purpose other than to provide our services and for the specific uses set forth below, in accordance with contractual agreements with our customers and our Terms of Service.  
  Consent to Collect, Use, or Disclose Personally Identifiable Information from Children Under 13.  Children under 13 may only use PowerSchool’s Products with the prior consent of a parent or educational institution acting on behalf of the child’s parent.  We will not collect, use, or disclose any personally identifiable information from children under 13 without such consent.  Educational institutions may consent to the collection, use, or disclosure of personally identifiable information from children under 13 by agreeing to purchase our products.  
  Personal Information from Children Under 13 Provided to PowerSchool. PowerSchool products may collect the following categories of personal information from children under 13, with the appropriate consent: 

  • Information provided via customers or through use of PowerSchool’s Products, assessment data, conduct or behavior data, demographic data, enrollment data, contact information, course schedule data, online communications, student identifiers (e.g., school ID number), academic or extracurricular program membership, student-generated content, transcript data, college interests, college application list, college scholarships, career interests, and post-secondary planning data; and 

  • Usage, browser and device information.  PowerSchool does not allow personal information from or about children under 13 to be made publicly available via its Products.  PowerSchool does not share personal information from children under 13 with third parties unless consented to under our customer agreements or necessary under the law.  

  • Service providers, partners, and product integrations.  Our service providers help us with things like data security, cloud hosting, information technology, customer support, usage and analytics, email delivery, application performance monitoring, and user identity and authentication.  In addition, some of our Products may support partnerships and integrations that offer certain features to users, like CommonApp**, Gallup**, and McGraw-Hill Education**, at the election of educational institutions (see further detail in Section VII). 

  • Administrative and legal reasons.  When reasonably necessary to meet and comply with any applicable law, regulation, legal process or enforceable governmental request; enforce applicable Terms of Service, including investigation of potential violations; detect, prevent, or otherwise address fraud, security or technical issues; or protect against harm to the rights, property or safety of PowerSchool, our users or the public as required or permitted by law. 

  • Business transitions.   In the event PowerSchool goes through a business transition such as a merger, acquisition by another company, sale of all or a portion of its assets, bankruptcy, or other corporate change (including during the course of any due diligence process), this personal information may be shared or transferred based on consent of our customers. 

  Our customers, educational institutions, may share personal information of students with educators as needed for educational purposes.  PowerSchool does not control and is not responsible for this type of sharing.  If you are a parent and have questions about this, please contact your child’s educational institution.   
  PowerSchool does not share personally identifiable information from children under 13 for advertising or marketing purposes. (See section V.2) 
  Parental Rights. For PowerSchool Products provided to educational institutions, the collection, maintenance, and use of personal information from children under 13 is controlled by the educational institution that contracts with PowerSchool for use of its Products.  If you are a parent and have questions regarding personally identifiable information collected from your child as part of their educational institution’s use of PowerSchool’s Products, including your rights to review, delete, and refuse further collection of such information from your child, please contact your child’s educational institution.  PowerSchool cannot delete such information unless authorized by your child’s educational institution.  

• G. Data Subject Rights

  In response to proper requests from Data Subjects (a natural person about whom a data controller holds personal information and who can be... 
  In response to proper requests from Data Subjects (a natural person about whom a data controller holds personal information and who can be identified, directly or indirectly, by reference to that personal information) regarding Customer Data received by PowerSchool, we will direct the Data Subject to contact the data controller with their request. A proper request must include the specific PowerSchool application at issue, name of the data controller, the requester’s relationship to the Data Subject, and the specific right to be exercised on that Customer Data or Collected Data.  If the controller is not responsive, and the Data Subject notifies PowerSchool that the data controller was not responsive and properly identify the data controller, PowerSchool will then notify the data controller of the Data Subject’s request and await guidance from the data controller.  PowerSchool will follow applicable law with respect to Data Requests.  We will also reasonably cooperate and assist our customers in connection with access requests, inquiries, and complaints from Data Subjects to whom the Customer Data relates or from data protection authorities.  We will not directly respond to a Data Subject request for Customer Data except on documented instructions of our customers.  PowerSchool acknowledges that applicable law regarding Data Subject Rights may be further promulgated, modified, or interpreted by supervisory authorities, and enforced by stakeholders such as state attorney generals.  PowerSchool will reasonably cooperate and assist customers in adapting PowerSchool’s support of customers regarding responding to Data Subject requests. 

• H. Data Retention

  We keep information collected on behalf of our Customers for as long as necessary to fulfill the purpose for which it was collected, pursuant to...
  We keep information collected on behalf of our Customers for as long as necessary to fulfill the purpose for which it was collected, pursuant to contractual terms or as otherwise required by applicable law. We dispose of information that is not held pursuant to contractual terms within a commercially reasonable period or at the request of a customer using reasonable measures to protect against unauthorized access to or use of information.

• I. Data Subprocessors

  To comply with PowerSchool’s obligations under applicable data protection laws and to our customers, we provide a list of significant... 
  To comply with PowerSchool’s obligations under applicable data protection laws and to our customers, we provide a list of significant third-party suppliers that enable us to provide our products and services and operate our business. These third-party suppliers perform the functions described below and are considered subprocessors under applicable data protection laws (“Subprocessors”). We require our Subprocessors to implement proper security measures to safeguard and to respect the privacy rights attendant to Customer Data and Collected Data. 
  Data Subprocessors Processing Activity Location 
  AWS - Data Storage - United States 
  Microsoft Azure - Data Storage - United States 
  Oracle - Database - Various 
  Snowflake - Data Storage - United States 
  Twilio - Cloud Communications - United States 
  Salesforce - Data storage of customer data for sales and marketing activities - United States 
  Qlik - Tool to support data migration to data storage - United States 

• J. Legitimate Interest

  PowerSchool ‘s legitimate interest to process personal data, whether Collected Data or Customer Data is addressed in our Legitimate Interest Statement.

• K. Bases of Processing

  PowerSchool’s base for processing student education records and personal data of data subjects is the contract we enter into with our customers. We may also base our processing on the consent from data subjects, or legal obligation.

II. MyPowerHub

PowerSchool’s “MyPowerHub” acts as a single user interface to access multiple platforms based on the role of the user. It allows families, schools and teachers to share one source of information, including grades, attendance, assignments, calendar events, newsfeed posts, completed and in-progress forms, behavior, and fees, in a seamless experience. The data entered by the Customers in other PowerSchool products is reflected in MyPowerHub, based on the PowerSchool products the customer wants to integrate into MyPowerHub product. MyPowerHub may also process data for features offered directly within the MyPowerHub product itself. Moreover, it may be used to process roster and personal data imported from 3rd party platforms.

To exercise your privacy rights under state, federal, provincial or country privacy legislation related to this application and the Customer Data it processes on behalf of your educational institution, please contact your educational institution. As a data processor for our customers, PowerSchool will take direction from our customers on exercising those privacy rights. Direction from our customers can be submitted through the PowerSchool support system. To help protect the security of your Personal Information, PowerSchool will always work with your educational institution to verify your identity.

III. PowerSchool Cloud Offerings

Below is a brief privacy-related description of each of PowerSchool’s cloud offerings, platform capabilities and publicly accessible products.  Customers may purchase a license to access one or more PowerSchool products within the listed “clouds” and “platforms”.  

• A. Student Information Cloud

  This suite of solutions includes the hosted PowerSchool SIS, Document Management, Special Programs, Ecollect Forms, Enrollment, Enrollment Express... 

This suite of solutions includes the hosted PowerSchool SIS, Document Management, Special Programs, Ecollect Forms, Enrollment, Enrollment Express, PowerSchool Neverskip ERP (School Essential) and SchoolMessenger Permission Click. To exercise your privacy rights under state, federal, provincial, or country privacy legislation related to this application and the Customer Data it processes on behalf of your educational institution, please contact your educational institution. As a data processor for our customers, PowerSchool will take direction from our customers on exercising those privacy rights. Direction from our customers can be submitted through the PowerSchool support system. To help protect the security of your Personal Information, PowerSchool will always work with your educational institution to verify your identity.

1. Student Information Systems. 

This hosted application enables a school or district to manage educational student records within this flexible student information system. Personal Information on each individual student is stored and processed within this application based on the instructions of the educational institution. The application includes multiple features and can be accessed via a mobile application by teachers, parents and to a more limited extent, students.  Separately, your educational institution may elect to allow third parties to connect with PowerSchool’s Student Information Systems application to take advantage of a functionality offered by the third party.  Please ask your institution to identify if any third-party products are connected to review those third party privacy statements for more detail. 

a) PowerSchool SIS  

Our PowerSchool SIS application includes a feature (PowerSchool Payments) that facilitates the ability for school related expenses to be paid through our selected vendor, Payrix Merchants (Payrix). As with all our vendors, we have carried out extensive due diligence on Payrix’ business processes.  We have also ascertained that Payrix is PCI-DSS Level I compliant. Additionally, as with all our vendors, we also have a Data Processing Agreement (DPA) with Payrix that regulates the way the vendor processes and protects your personal information. The personal information Payrix collects is used solely to process your requested payment transaction. For credit and debit cards, for example, such personal information processed may include card holder first and last name, card number, expiration date, card verification value (CVV), and zip code, as required. For eCheck payments, personal information processed may include account holder’s first and last name, routing number, bank account number, and zip code, as required. PowerSchool does not receive or store any of this personal information. PowerSchool only retains the binary information in its products that the transaction occurred and was completed. 

b) eSchoolPlus 

Our eSchoolPlus is a student information system used by schools and districts to facilitate management of the daily activities of an educational institution. This application enables administrators to configure and manage their district and school data; teachers to collect data related to their classes, and parents and students to have visibility of the applicable student data.  The application collects personal data such as name, class schedule, course of study, classwork, standardized test scores, grades, address, medical-related information, attendance, and staff member social security numbers, for which access is restricted. The application acts as a system of record of student information and supports administrative and to make class management more efficient for educators.

2. Document Management. 

This functionality enables the school or school districts to efficiently manage all school-to-home document distribution, long-term document storage, and electronic document signatures. This application can be integrated, meaning Customer Data can be shared, amongst other PowerSchool products if your educational institution elects to take advantage of this functionality.   

3. Special Programs.  

This application processes inputs from schools and district officials managing state special education regulatory documents, section 504 programs, English learner and gifted and talented plans for students.  This application can be integrated, meaning Customer Data can be shared, amongst other PowerSchool products if your educational institution elects to take advantage of this functionality.   

4. Ecollect Forms. 

This application supports a school or school district to create and deploy forms unrelated to student enrollment as part of forms-based workflows. With this product, educational institutions are enabled to offer online forms for parents/guardians, students, and teachers to provide personal information about themselves or a student for import into the school or school district student information system. This Customer Data collected, such as name, date of birth, address, contact information, demographic information, etc., are populated into the student information system and used for business process-driven workflow purposes determined by the Customers. 

5. Enrollment. 

This application supports the digitization of the student enrollment process for a school or school district.  With this product, educational institutions are enabled to offer online forms for parents/guardians to provide personal information on their student for import into the school or school district student information system.  This Customer Data collected, such as name, date of birth, address, contact information, demographic information, medical information (such as allergies, primary doctor, immunization), etc., are populated into the student information system and used for enrollment and registration purposes.   

6. Enrollment Express. 

This application supports the digitization of the student registration process for a school or school district.  With this product, educational institutions are enabled to offer online forms for parents/guardians to provide personal information on their student for import into the school or school district student information system.  This Customer Data collected, such as name, date of birth, address, contact information, demographic information, medical information (such as allergies, primary doctor, immunization), etc., are populated into the student information system and used for enrollment and registration purposes. 

7. PowerSchool Neverskip ERP 

This platform product offers a suite of six modules.   These include student records, fee collection, admission, report card, transport, communication, and a learning management system. The platform maintains physical, electronic, and procedural safeguards that comply with industry standards to protect Customer Data or Collected Data processed on the platform.  

IV. Platform Capabilities

• A. Analytics and Insights

  This is a student data analytics platform for state departments of education (DOE), districts and schools that can generate graphical representations of various... 
  This is a student data analytics platform for state department of education (DOE), districts and schools that can generate graphical representations of various forms of Customer Data for use by these educational institutions. The capabilities here include Student Analytics, Student Readiness Analytics, Risk Analysis, Predictive Enrollment Analytics, Community Engagement and Talent Analytics, Educator Analytics, and Continuous Improvement Planning.
  To exercise your privacy rights under state, federal, provincial, or country privacy legislation related to this application and the Customer Data it processes on behalf of your educational institution, please contact your educational institution. As a data processor for our customers, PowerSchool will take direction from our customers on exercising those privacy rights. Direction from our customers can be submitted through the PowerSchool support system. To help protect the security of your Personal Information, PowerSchool will always work with your educational institution to verify your identity.

• B. Communications

  This communications suite includes the newly acquired SchoolMessenger Communications products. PowerSchool SchoolMessenger... 
  This communications suite includes the newly acquired SchoolMessenger Communications products. PowerSchool SchoolMessenger Communicate, PowerSchool SchoolMessenger Presence, PowerSchool SchoolMessenger SafeArrival, PowerSchool SchoolMessenger Permission Click.
  To exercise your privacy rights provided under the applicable state, federal, provincial, or country privacy legislation related to this application and the Customer Data it processes on behalf of your educational institution, please contact your educational institution. As a data processor for our customers, PowerSchool will take direction from our customers on exercising those privacy rights. Direction from our customers can be submitted through the PowerSchool support system. To help protect the security of your Personal Information, PowerSchool will always work with your educational institution to verify your identity.
  1. PowerSchool SchoolMessenger Communicate.

  Communicate is a mass notification platform that allows customers to quickly communicate with their district stakeholders, including parents/guardians, students, staff, and their community. This application leverages Customer demographic and contact data to ensure relevant communications are sent to the proper recipients.
  2. PowerSchool SchoolMessenger Presence.

  This application provides customers with the ability to create and maintain a school and/or district website.  Data required for creators/users include name, email address and password. Personal data from public website visitors are not required.
  3. PowerSchool SchoolMessenger SafeArrival.

  SafeArrival leverages Customer attendance data to notify parents and guardians of relevant absences and collect verified absence reasons. Information relating to attendance that is entered by parents and guardians are fed back to the customer’s Student Information System.
  4. School Messenger Permission Click

  This platform supports the creation of online forms that capture parent permissions and other data which can integrate into a student information system. Payments are facilitated through the application as well as archiving of digitally signed permissions slips.  Data privacy considerations are addressed via secure connections within the application to student information systems to store data transactions.

• C. PowerSchool AI

  PowerSchool uses artificial intelligence (AI) to promote efficiency in its technology development for its engineering teams. All PowerSchool AI... 
  PowerSchool uses artificial intelligence (AI) to promote efficiency in its technology development for its engineering teams. All PowerSchool AI development is governed by the PowerSchool’s Responsible AI Guiding Principles. Moreover, we are engaging AI to innovate our products to provide even more valuable benefits to our customers. As a function of our commitment to privacy by default, PowerSchool evaluates any AI solution to ensure customer PII data is not included as part of any training data sets for AI models. PowerSchool will apply customer data in production to optimize and personalize the AI recommendations for those customers who explicitly purchase PowerSchool's AI-powered solutions. Moreover, our AI solutions do not enable any automated decision-making. Our solutions leveraging AI or ML provide customers with valuable recommendations that then must be actioned via a human decision.
  PowerSchool’s suite of AI products.
  1. PowerBuddy™ for Assessment.

  This generative AI solution is incorporated within the Performance Matters solution to support the drafting of learning assessment questions and answers tailored to specific criteria provided by the school/district staff or teacher’s prompt. The features do not utilize personal information. Neither was personal information used to train the model. The feature output is tailored based on the selection of appropriate grade level, industry academic standard, and academic area.
  2. PowerBuddy™ for College and Career.

  This AI assistant chatbot is an add on to our Naviance CCLR product. It helps students identify suitable careers and suggests colleges that offer programs aligned with their career interests, academic history, and personal preferences.
  3. PowerBuddy™ for Custom AI.

  This solution enables users to pose questions in natural language to a chatbot, which are then answered by an AI assistant. The AI assistant produces responses based on a database of text from district-generated materials and support documentation. district created materials and support documentation.
  4. PowerBuddy™ for Data Analysis.

  This AI assistant chatbot is an add on to our PowerSchool Connected Intelligence product. By using natural language prompts, the feature retrieves the data, analyzes the results and delivers data related insights to district data analysts.
  5. PowerBuddy™ for Learning.

  This AI assistant chatbot feature is an add-on to our Schoology Learning product. By adaptively responding to prompts from students concerning their assigned course material, the feature supports their personal learning process. The feature does not utilize personal information.

• D. Data

  Connected Intelligence K12. This is a Data-as-a-Service (DaaS) offering for schools and districts. The purpose is to support the educational purposes of... 
  Connected Intelligence K12.  This is a Data-as-a-Service (DaaS) offering for schools and districts.  The purpose is to support the educational purposes of the educational institution. Schools and districts can use this functionality to have access to all Customer Data in one location, whether educational records or non-student data. 
  To exercise your privacy rights provided under the applicable state, federal, provincial or country privacy legislation related to this application and the Customer Data it processes on behalf of your educational institution, please contact your educational institution.  As a data processor for our customers, PowerSchool will take direction from our customers on exercising those privacy rights.  Direction from our customers can be submitted through the PowerSchool support system.  To help protect the security of your Personal Information, PowerSchool will always work with your educational institution to verify your identity.

• E. Publicly Accessible Products

  PowerSchool makes a limited number of services available to the public free of charge. Because an educational institution is not licensing... 
  PowerSchool makes a limited number of services available to the public free of charge. Because an educational institution is not licensing the product from PowerSchool in this unique circumstance, PowerSchool is the controller of any data captured in such products and this Collected Data is used for an educational purpose. Customers and users of these limited products are not necessarily educational institutions, and the users are not necessarily students or staff of an educational institution. For these publicly available applications, the individuals interacting with these products are required to provide informed and explicit consent before providing any of their Personal Information. In these limited situations, PowerSchool acts as a data collector and data processor of Personal Information.
  For the specific PowerSchool Products listed in this section of the privacy statement, parents have the right to review, have deleted, or refuse to permit further collection or use of personally identifiable information from their child under 13.  To do so, please contact us via our Data Subject Access Form. 
  1. Headed2.

  This free application offers services related to career literacy for individuals via self-assessment activities, data on industry sectors, and local opportunities network. The product provides for various personas – such as job seeker, students, educators – the opportunity to provide their Personal Information for log in and the ability to match them with provided opportunities in the local or regional area of their choosing. Headed2 Supplement
  2. SchoolSpring Job Board - Applicant View.

  This application allows users to search for educational job postings at no charge.  Personal Information collected include first and last name, email, zip/postal code, teaching certification information.  Additionally, individual or institutional employers interested in posting a job on the job board can pay a subscription fee for a limited license to post a single or multiple job openings. SchoolSpring Supplement
  3. Chalk and Chalk Gold.

  These applications allow users, only teachers, to create a digital lesson plan to support students. These applications are offered directly to the public either for free, Chalk, or for an upcharge change to another version of the application called Chalk Gold. Personal Information collected include first and last name, and email. Chalk Supplement

V. PowerSchool Websites, Webinars, Demos

For users of our publicly accessible Websites, we offer details on how PowerSchool collects and uses information from or about you.  In this relationship, PowerSchool acts as a data collector (controller). This is because we collect aggregated information about your browser until and if you consent to provide us personal information about you when you wish to engage with PowerSchool directly to receive information about our webinars, white papers and product information.

Information You Provide: You may voluntarily provide us with information when you complete a form or survey on our Websites or subscribe to our blogs or newsletters. This may include some or all the following categories of information: name and role; job title; signature; profession; social media account name; username; telephone number; and email address. You may also provide information when you register for an account through a Website to log in to a PowerSchool Product, or submit a resume or other information through the Careers link.From the moment you first interact with one of our Websites, we may collect personal information. Sometimes we collect personal information automatically when you interact with our Websites and sometimes we collect the personal information directly from you. At times, we may collect personal information about you from other sources and third parties, even before our first direct interaction.

Note that if you use a PowerSchool application website to access a service or product, you may need to log in to make use of the functionality of the product.

Our Websites may offer publicly accessible community forums. You should be aware that any information you provide in these areas is public and may be read, collected, and used by others who access them and may remain on the public forum indefinitely. To request removal of your personal information from our community forums, please contact us via our Data Subject Access Form.  In some cases, we may not be able to remove your personal information, in which case we will let you know if we are unable to do so and why. We encourage all users to exercise caution when providing personal information in community forums. If you provide information when you communicate through our PowerSchool community forums, we may link this information with your personal information.

Information We Collect Automatically.  We collect information about the pages your device’s browser visits and how your browser accesses and uses the Websites using cookies, tracking technologies and other third-party analytics tools. Specifically, we and our service providers use cookies and similar technologies such as local storage (HTML5), web beacons, JavaScript, and eTags on our Websites. This includes information about the devices you use to access the Websites including, but not limited to, unique device identifiers, IP address, operating system, browser, and cookies. Depending on your device settings, we may also collect information about your approximate geographical location.  You can learn about our use of cookies, and set your preferences, in our Cookie Statement.

Information We Receive From Third Parties. PowerSchool works with third-party ad publishers to re-publish PowerSchool content on paid media platforms. We may receive personal information about users from these publishers, which we may use to provide user-requested information or to contact users regarding PowerSchool Products. We may also supplement the information we collect from you with information from PowerSchool Group affiliates and other third parties that we use to promote PowerSchool Products. For example, we may receive information from a third party about how well an online marketing or email campaign performed, or from conference and trade show organizers.

How We Use Your Information

In addition to the uses described above, we may collect and use your personal information for the following purposes:

1. Product Improvements, Analytics and Requested Communications. We may use your information collected to provide and improve our Websites and PowerSchool Products by using third-party analytics tools to help us understand how our Websites are used, analyze usage information for sales and marketing purposes, and to communicate with you in any manner that you have requested. We also use the information collected to communicate with you in any manner that you have requested.

2. Marketing. We conduct marketing to promote PowerSchool Products, but do not use or disclose student information (whether personal information or otherwise) provided by customers into our platforms for targeting of advertisements to students. When we conduct (or sponsor) events, conferences, and webinars, we will collect information about attendees, such as the session they attend and their contact information to provide them information about PowerSchool Products and other PowerSchool information. Marketing Preferences and Opt-Out Our marketing emails include an “unsubscribe” link so that you can change your preferences and opt-out of receiving marketing emails or communications from PowerSchool. You can also send us email at marketingops@powerschool.com to unsubscribe. Please note that even if you opt-out of marketing emails, we may still need to contact you with important information about your PowerSchool account.

3. Interest-based Advertising.
   We use third party advertising tools to collect information about your device browser’s visits to the Websites to provide targeted advertisements to you based on your browsing history on other websites or on other devices you may use. If you would prefer to not receive personalized ads based on your browser or device usage, you may generally express your opt-out preference to no longer receive tailored advertisements. Please note that you will continue to receive advertisements, but they will no longer be tailored to your interests.

To learn more or opt-out of interest-based advertising by participating companies in the following consumer choice mechanisms, please visit:

• Digital Advertising Alliance (DAA)’s self-regulatory opt-out page (https://optout.aboutads.info/) and mobile application-based “AppChoices” download page (https://youradchoices.com/appchoices).

• European Interactive Digital Advertising Alliance (EDAA)’s consumer opt-out page (https://youronlinechoices.eu), if you’re located in the EU

• Network Advertising Initiative (NAI)’s self-regulatory opt-out page (https://optout.networkadvertising.org/).

Please note that we do not use student data for targeted advertising purposes, for example, by inhibiting these third-party advertising networks from collecting information for targeted advertising purposes when a student logs into the service through their student account. We do not provide any student data to any third parties for marketing purposes not related to legitimate educational interests.

VI. Product Performance Monitoring.

When you interact or use any PowerSchool licensed products, we use an information-gathering tool for collecting data that may contain Personal Information (in one of the use cases discussed further below) as you navigate our products or web properties. PowerSchool uses product experience software to monitor and improve the customer experience accessing   our products. With product experience software monitoring the usage of our products, PowerSchool can track customers’ usage patterns on our products, measure product performance, analyze customer churn rates for greater understanding of customers’/users’ needs and preferences, procure feedback from users/customers, carry out marketing activities, etc.

PowerSchool does not track or monitor an individual’s activity outside of the individual’s use of PowerSchool products or website properties. This means we do not store tracking cookies on a user’s browser to build a profile of what you may do on the internet or to identify you when they visit our web properties or use our products. PowerSchool does implement activity monitoring tools to help detect and mitigate insider threats, whether unintentional or with malicious intent. Generally, the range of monitoring and methods utilized depends on each specific objective described in the use cases below.

A. Aggregated Monitoring

In this use case, PowerSchool monitors, at an aggregate anonymized level, how users from a customer, school or district, interact with our products to improve our product and the user experience.  These actions are not leveraged for any other reason than as stated in this Global Privacy Statement.

PowerSchool uses its product experience software to gather metrics on PowerSchool product usage, and products’ most-used feature(s). Importantly, as mentioned above, the generated data are at the aggregate level, and are not traceable to an individual.  This holds true for pseudonymized data disclosed to our data subprocessor vendors leveraged to enable our services. These vendors do not have access to the data that could identify the user.

PowerSchool monitors certain data associated with identified users within the product’s unique infrastructure solely to monitor the technical performance of its platforms and to improve the design of our products. Any logs or records of such tracking are deleted, and not shared or disclosed outside of PowerSchool in any non-aggregated, individually identifiable way other than to the specific licensed customer, who is the data controller of the data.

Please be aware that schools or districts may elect to monitor their user engagement on a platform, such as Naviance CCLR, for district and statewide reporting and monitoring of CCLR progress.  No product experience software is used to process Customer Data.

B. Product Feedback Requests

In addition to the above use case on aggregated monitoring of product performance, PowerSchool uses its product experience software to support efforts to obtain voluntarily provided feedback from customers of our products or visitors to our web properties. Those instances are detailed below:

1. We present customers and users of our platforms with a request to opt in to participate in future research activities related to our product development. Upon receipt of an opt-in, we collect the individual’s contact email to send further information surrounding the upcoming research activity. The personal information we collect here includes the user’s name, and email address, although, we also collect the name of the product the user is using or intends to provide feedback on. We use a consent management tool to facilitate the communication of research questionnaires only to users who have opted-in to receive such research-related communication. Every such communication has an unsubscribe link, allowing for the revocation of a previously provided opt-in. Additionally, when we send research-related communications to opted-in individuals and do not receive a response within a limited period, PowerSchool refrains from sending any further communications to such user/customer.

2. We also present anonymous surveys to users and licensees of our products. Responses to the survey questionnaire are anonymous and cannot be traced to any individual. For these surveys we do not collect any personal information.  The focus is only on feedback related to product usages and suggestions/reactions to product features.

3. Additionally, we may present prescribed survey questions with defined answer options. In this way, responses are void of any personal information being collected and processed by PowerSchool.  As an example, we may ask if a user likes a (newly added) feature or page.  If a user chooses “No” for their answer, for example, we then present restricted answers such as “I don’t like this page because it is too long”, “I don’t like this page because it has too many options”, etc.

In all the use cases discussed above (Aggregated Monitoring, and Feedback Requests), PowerSchool uses tools that have undergone security and privacy review. Moreover, the service provider is also subjected to the rigorous PowerSchool third-party risk management program before their services are engaged.

VII. PowerSchool Service Providers, Partners, and Other Third-Party Disclosures

PowerSchool works with service providers and partners to fulfill our obligations to our Customers. Customers may also contract directly with a third party and ask PowerSchool to share access to Customer Data with that third party. Some disclosures may also be required by law.

1. Service Providers. We engage directly with certain service providers to help us provide PowerSchool Products. Our service providers are required to abide by our privacy and security requirements and are contractually restricted from using any Customer Data or Collected Data accessed or received through us for any purposes other than as needed to perform such services. We may use service providers to help us conduct marketing campaigns or events and disclose customer contact information collected on our website as necessary for those activities.

2. Partners. Educational institutions may work with PowerSchool Partners to provide additional content and functionality, which may require access to Customer Data maintained within PowerSchool Products. Only with your educational institution’s permission, PowerSchool will share (provide access) to Customer Data. With your educational institution’s permission, and subject to an agreement between your educational institution and the Partner, PowerSchool will share (i.e., provide access) to your data.

3. Application Programming Interface (APIs): Third-party APIs software such as those of Google**, Microsoft**, etc. (“API Providers”) are used as an intermediary to allow applicable PowerSchool products and third-party API provider applications to communicate. For example, while using a PowerSchool product (e.g. PowerBuddy™, Schoology®), users may use Google API to communicate with the user’s Google Drive account to upload documents to the PowerSchool product that has this functionality or feature to upload documents or files. For more on PowerSchool Disclosure on how APIs are being leveraged in our product, see this link.

4. Other Types of Disclosures. We may also need to share certain portions of Customer Data or Collected Data under the following circumstances:

   1. We may need to disclose Customer Data or Collected Data to comply with legal or regulatory requirements and to respond to lawful requests, such as court orders and subpoenas within a legal proceeding. Where such disclosures relate to personal information we hold as a data processor on behalf of our customers, we will refer such requests to our customers where permissible.

   2. We may need to disclose Customer Data or Collected Data to protect and defend the rights, property, or safety of our customers or users, including enforcing contracts or policies, or in connection with investigating and preventing fraud or other misuse of our systems.

   3. Where permitted by applicable law, we may utilize aggregated or de-identified, or anonymized information that is no longer associated with a person for internal purposes, such as to enhance and promote PowerSchool Products. PowerSchool does not rent, sell, or otherwise provide access to student personal information to third parties for marketing or advertising purposes.

VIII. United States Student Privacy Laws

PowerSchool complies with privacy laws of the United States with respect to personal information and especially student educational records. We do not use Student Data for any purpose other than to provide the services, in accordance with our contractual agreements with our Customers, our Terms of Service, and this Privacy Policy. PowerSchool does not own or control Student Data, which belongs to the student and/or the Customer (schools, school districts, and higher education institutions) that contracts with PowerSchool to provide access to PowerSchool Products.

IX. California Privacy Rights

California law requires us to disclose the following information with respect to our privacy practices. If you are a California resident, this section applies to you in addition to the rest of the Privacy Statement.

Categories of Personal Information PowerSchool Collects and Purposes for Collection and Use

The types of personal information we collect depends on which PowerSchool Product(s) and/or Websites you utilize but can include:

• Basic identifying information (e.g., name, address, email, phone number)

• Demographic data (e.g., age, date of birth, gender)

• Device information and other unique identifiers (e.g., device ID, IP address, cookies)

• Network activity

• User-generated content, including student-generated content

Depending on the PowerSchool Product(s) and/or Websites you utilize, we may collect personal information through the following means:

•  Directly from you (e.g., upon creating an account)

• Automated data collection technologies (e.g., cookies, pixels)

• Other sources (e.g., data analytics providers)

PowerSchool collects and uses personal information for various purposes, including the following:

• Administration of PowerSchool Products

• Improvement of PowerSchool Products

• Communications with you

• Legal obligations

• Security, fraud prevention, and troubleshooting

PowerSchool does not share personal information with third parties unless necessary for the above-listed purposes. PowerSchool may disclose personal information to the following categories of third parties:

• Service providers and partners. Our service providers help us provide services to our customers via our PowerSchool Products.  These service providers support activities such as data security, cloud hosting, information technology, customer support, usage and analytics, email delivery, application performance monitoring, error and crash reporting, and user identity and authentication. In addition, we engage in product partnerships and integrations that offer certain features to users as requested by our customers. Under data privacy agreements, these third parties may require access to your personal information.

• Administrative and legal reasons.  We may share personal information with third parties based on a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to meet any applicable law, regulation, legal process or enforceable governmental request; enforce applicable Terms of Service, including investigation of potential violations; detect, prevent, or otherwise address fraud, security or technical issues; or protect against harm to the rights, property or safety of PowerSchool, our users or the public as required or permitted by law.

Exercising California Privacy Rights

Subject to certain limitations, including that PowerSchool cannot delete Customer Data where it is acting as a data processor under legal agreements with the data controller (our customers), California residents have the right to request access to the categories and specific pieces of personal information we collect, use, and disclose; the right to request deletion of their personal information; and the right to opt out of any sales of personal information that may be occurring. These rights may be exercised via our PowerSchool Products or by contacting your respective educational institutions who are licensed to the applicable PowerSchool Product(s).

Access to Data and Deletion Requests

For Collected Data where PowerSchool is not acting as a data processor, but collects personal information directly from a user, you may submit a request for a copy of the information collected about you in the last 12-months, or request deletion of information, by contacting us via our Data Subject Access Form.

X. International Privacy Laws, Data Transfers and Access

Your data may be transferred to and stored by us in the United States and by our affiliates and third parties even if our customers are based elsewhere other than in the United States.  Customer Data is hosted for all but a few PowerSchool Products, such as the Canadian-hosted Atrieve product, within the United States.  Therefore, Customer Data may be transferred and processed in the United States from Customers residing outside of the United States.  Your Data may be processed outside your jurisdiction, and in countries that may not provide for the same level of data protection as your jurisdiction, such as the European Economic Area (EEA) or the United Kingdom (UK). PowerSchool utilizes the Data Privacy Framework to support our transferring of personal data out of the European Economic Area (EEA) or the UK.

PowerSchool complies with the EU-US Data Privacy Framework (EU-US DPF), and the Swiss-US Data Privacy Framework (Swiss-US DPF) as set forth by the US Department of Commerce. PowerSchool has certified to the US Department of Commerce that it adheres to the EU-US Data Privacy Framework Principles (EU-US DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-US DPF. PowerSchool has certified to the US Department of Commerce that it adheres to the Swiss-US Data Privacy Framework Principles (Swiss-US DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-US DPF.

If there is any conflict between the terms in this notice and the Data Privacy Framework Principles, the Data Privacy Framework Principles shall govern. To learn more about the Data Privacy Framework program, and to view our certification, please visit https://www.dataprivacyframework.gov/s/PowerSchool is responsible for the processing of personal data it receives, under the EU-US DPF, the UK Extension to the EU-US DPF, and Swiss-US DPF and subsequently transfers to a third party acting as an agent on its behalf.  PowerSchool complies with the EU-US DPF Principles and the Swiss-US DPF Principles for all onward transfers of personal data from the EU, UK, and Switzerland, including the onward transfer liability provisions.

The Federal Trade Commission has jurisdiction over PowerSchool’s compliance with the EU-US DPF, the UK Extension to the EU-US DPF, and the Swiss-US DPF. In certain situations, PowerSchool may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

In compliance with the EU-US DPF, the UK Extension to the EU-US DPF, and the Swiss-US DPF, PowerSchool commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-US DPF, the UK Extension to the EU-US DPF, and the Swiss-US DPF to TRUSTe, an alternative dispute resolution provider based in the United States.  If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://feedback-form.truste.com/watchdog/request for more information or to file a complaint.  These dispute resolution services are provided at no cost to you.

For complaints regarding EU-US DPF, the UK Extension to the EU-US DPF, and Swiss-US DPF compliance not resolved by any of the other DPF mechanisms, you have the possibility, under certain conditions, to invoke binding arbitration. Further information can be found on the official DPF website: https://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf?tabset-35584=2.

PowerSchool’s privacy practices, described in this Privacy Statement, comply with the APEC Privacy Recognition for Processors (PRP) system. The APEC PRP system provides a framework for organizations to ensure protection of personal information transferred among participating APEC economies. More information about the APEC PRP framework can be found here.

The company’s global presence requires us to be aware of and comply with global privacy laws as an important aspect of our Global Privacy program.  Below are regions of the world in which we operate and a brief statement on the laws governing our privacy obligations concerning Customer and Collected Data in those regions.

• a. Africa

  Like the GDPR is the data privacy law for the EU countries, the African Union Convention on Cyber Security and Personal Data Protection, 2014 is applicable to the countries... 
  Like the GDPR is the data privacy law for the EU countries, the African Union Convention on Cyber Security and Personal Data Protection, 2014 is applicable to the countries in the African Union. 16 out of 54 African countries have signed to the conventions, whereas 36 countries have their own data privacy laws. With the expansion of PowerSchool’s business into the African continent, PowerSchool is actively identifying and analyzing the list of country-specific data privacy laws along with the territorial framework from the African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention) which came into force in 2023. As PowerSchool continues to monitor the developments in this region of the world, we will adjust our processes and procedures appropriately.

• b. Australia

  The Privacy Act, 1988 (as amended) provides for individuals' rights to know the purpose of their personal data being collected, how it will be used and who it will be disclosed to... 
  The Privacy Act, 1988 (as amended) provides for individuals' rights to know the purpose of their personal data being collected, how it will be used and who it will be disclosed to. It allows the individuals to ask for access to their personal data, the option of not identifying themselves, or of using a pseudonym. The Australian Privacy Act is based on the principle of open and transparent management of personal information. PowerSchool’s global privacy statement provides this information. Furthermore, we support an individual’s ability to exercise their privacy rights over the personal data we process on behalf of our customers.

• c. Canada

  The Personal Information Protection and Electronic Documents Act (PIEDA) address private sector activities whereas the Privacy Act governs an individuals’ right... 
  The Personal Information Protection and Electronic Documents Act (PIEDA) address private sector activities whereas the Privacy Act governs an individuals’ right to access personal information collected by an agency of the Government of Canada. Additionally, there are provincial laws impacting how student educational records and personal data generally are managed. PowerSchool works to understand and comply with these laws as they impact our customers’ use of our services.

• d. Europe

  Data privacy in the European Union Countries (“EU”) is governed under the General Data Protection Regulation (GRDP), 2018. The GDPR provides the right to the citizen to control... 
  Data privacy in the European Union Countries (“EU”) is governed under the General Data Protection Regulation (GRDP), 2018. The GDPR provides the right to the citizen to control their personal data. It also recognizes the right to access, rectification, erasure, data portability, etc. At present PowerSchool does not cater to EU customers; nevertheless, PowerSchool is mindful of GDPR requirements, self-certifying as an active member of the EU-US and Swiss-US Data Privacy Framework Program, as an appropriate aspect of PowerSchool global privacy compliance strategy concerning international transfer of personal data.

• e. India

  The Digital Personal Data Protection Act, 2023, (DPDP Act) recognizes the right of individual to protect their personal data collected digitally or collected physically and later on... 
  The Digital Personal Data Protection Act, 2023, (DPDP Act) recognizes the right of individual to protect their personal data collected digitally or collected physically and later on converted to digital, and casts duty on the Data Processor/ Fiduciary to send notices containing details of f what data will be collected, how it will be processed and the end data upon processing by PowerSchool where would be used to the Data Principles to obtain their free consent. The DPDP act puts additional consent requirement from the parents/ lawful guardians for processing data of children or person with disabilities. The DPDP act is enforceable but is yet to be put into implementation via establishing the Data Protection Board of India.

• f. Latin America

  Unlike the GDPR in EU, the Latin American countries do not have any standard law for the data privacy. While some of the countries have enacted their data privacy laws... 
  Unlike the GDPR in EU, the Latin American countries do not have any standard law for the data privacy. While some of the countries have enacted their data privacy laws, like Brazil has LGPD Law, Ecuador’s the Organic Law on Personal Data Protection, 2021; Peru’s Personal Data Protection Law 2011, etc., the other Latin American countries are either developing their own data protection Laws or adopting the GDPR. PowerSchool is actively engaged to further understand these laws and their implementation as it impacts our services to our customers (schools/districts) and data subjects whose personal data is processed by our services.

• g. Middle East

  The privacy laws in Middle East countries vary; however, they follow the Islamic principles and recognize the right of personal privacy. Privacy laws in the Middle East place... 
  The privacy laws in Middle East countries vary; however, they follow the Islamic principles and recognize the right of personal privacy. Privacy laws in the Middle East place restrictions on the collection and use of personal data, and provide individuals with the right to access, rectification, erasure, and data portability. Personal Data Protection Law, Federal Decree Law No. 45 of 2021 of UAE ensures confidentiality of information and protection of the privacy of citizens of UAE and prohibits the processing of Personal Data without obtaining the consent of the Data Subject. PowerSchool works diligently to both understand the implications of these new laws and comply to the extent they impact our customers’ use of our services.

• h. Southeast Asia

  The Privacy laws in Southeast Asia are clear and cast the obligation on organizations collecting/ processing data to obtain consent of the data subject, secure... 
  The Privacy laws in Southeast Asia are clear and cast the obligation on organizations collecting/ processing data to obtain consent of the data subject, secure the data and provide access to personal data to the data subject. The Personal Data Protection Act 2012 (PDPA), Singapore, applies to any organization which has customer or users in Singapore. Personal Data Protection Act 2012 (PDPA) of Malaysia are similar to the PDPA of Singapore and applies to any data processed in Malaysia. PowerSchool is not subject to GDPR, yet PowerSchool is identifying and analyzing the feasibility of complying with the privacy laws in Southeast Asia as a good governance measure.

• i. United Kingdom

  Post-Brexit, the GDPR, 2018 is not applicable to UK. Instead, the data privacy law in UK, the Data Protection Act, 2018 – which was a domestication and implementation...
  Post-Brexit, the GDPR, 2018 is not applicable to UK. Instead, the data privacy law in UK, the Data Protection Act, 2018 – which was a domestication and implementation of the GDPR when the UK was still part of the EU, controls how businesses process personal data. It imposes the duty on every person using personal data to comply with the seven ‘data protection principles’. The Act provides the UK citizens numerous rights over their data as used by government, businesses, and private organizations. Through our agreements with our customers and our internal processes, PowerSchool complies with this Act as a data processor to our customers who engage directly with data subjects. or are impacted by our customers’ use of our services.

• j. United States

  The existence of United States federal laws such as Family Educational Rights and Privacy Act (FERPA) drive the data privacy rights and protection requirements... 
  The existence of United States federal laws such as Family Educational Rights and Privacy Act (FERPA) drive the data privacy rights and protection requirements for student education records. Recently, the United States has experienced an explosion in the number of state-level data privacy laws protecting personal data of individuals. PowerSchool works to understand and to comply with each of these laws as we act as a data processor for student educational records.

XI. Links to Other Sites.

Our Websites may provide links to third party websites or resources. The information practices of those websites are not covered by this Privacy Statement or any othuer policies or terms applicable to PowerSchool Products or Websites. We recommend that you review any terms of use and privacy policies of any linked third-party website before providing any personal information.

XII. In the Event of Corporate Transition.

In the event that PowerSchool is acquired by or merged with a third-party entity, we reserve the right, in any of these circumstances, to transfer or assign the personal information our Customers have provided to us from our Users as part of such merger, acquisition, sale, or other change of control to the new data processor. In the unlikely event of our bankruptcy, insolvency, reorganization, receivership, or assignment for the benefit of creditors, or the application of laws or equitable principles affecting creditors’ rights generally, we may not be able to control how your personal information is treated, transferred, or used. Nevertheless, in such a circumstance, PowerSchool would request that all applicable data privacy standards no less stringent than our own shield the personal information already in our possession. In the event that information is shared in any manner, notice will be posted on our site.

XIII. Changes to the Statement

We may update this Privacy Statement and its last updated date to reflect changes to our data governance practices. If we propose to make any material changes, we will notify you by means of a notice on our public facing webpage page prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices.

XIV. Contact Us.

If you have any questions or concerns about your privacy or this Privacy Statement, please contact us via our Data Subject Access Form.

You may also write to us at:

PowerSchool Holdings, Inc.
150 Parkshore Dr. Folsom, CA 95630
USA
ATTN: Privacy
Chief Privacy Officer
Phone Number: 1 (916) 790-1509

If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third-party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.

* Note:  © PowerSchool. PowerSchool and other PowerSchool marks are trademarks of PowerSchool Holdings, Inc. or its subsidiaries.

** Other names and brands may be claimed as the property of others.