Privacy Policy for http://www.my10yearplan.com [updated 11/23/16]

This online privacy policy applies to www.my10yearplan.com, which is operated by:
Academic Innovations, LLC
640 E 700 S, Suite 203
St. George, UT 84770
(800) 967-8016.

1. Pupil Records are the Property of the School or District

All pupil records are, and will continue to be, the property of, and under the control of, the local education agency (LEA Account) under which the pupil account is established. All rights, including all intellectual property rights in and to pupil records shall remain the exclusive property of the LEA Account. As the owner and operator of My10yearPlan.com®, Academic Innovations has a limited, nonexclusive license to such pupil records. Academic Innovations does not have any rights, implied or otherwise, to pupil records, LEA Account content, or intellectual property, except as expressly stated in this Policy.

The term "pupil records" means the following:

  1. Any information directly related to a pupil that is maintained by the LEA Account administrator.
  2. Any information acquired directly from the pupil through the use of an online program assigned to the pupil by an instructor or other local educational agency employee, such as My10yearPlan.com®.

The term "pupil records" does not mean any of the following:

  1. De-identified information (that is, information that cannot be used to identify an individual pupil), including aggregated de-identified information used to improve educational products for adaptive learning purposes and for customizing pupil learning.
  2. De-identified information, including aggregated de-identified information, used to demonstrate the effectiveness of the My10yearPlan.com® system in the marketing of those products.
  3. De-identified information, including aggregated de-identified information, used for the development and improvement of educational sites, services, or applications.
The term "LEA Account" refers to the school or district that initiates creation of a school- or district-level My10yearPlan.com® account, administers those account(s), and initiates the creation of associated student-level accounts.

2. Pupil_Generated Content

"Pupil-generated content" means materials created by a pupil, including, but not limited to, essays, research reports, portfolios, creative writing, and account information that enables ongoing ownership of pupil content. Pupil-generated content does not include pupil responses to any standardized assessment, if applicable, where pupil possession and control would jeopardize the validity and reliability of that assessment.

Notwithstanding the provisions of Section 1, pupils may retain ownership, possession, and control of their own pupil_generated content. Academic Innovations makes all pupil_generated content available to the pupil who created it through their My10yearPlan.com® account. Pupils may transfer their pupil_generated 10-year Plan content to a personal account by:

  1. printing the pupil-generated 10-Year plan content to a local printer;
  2. exporting the pupil-generated 10-year Plan content to a Microsoft Word file; or
  3. exporting the pupil-generated 10-year Plan content to a PDF.

3. Use of Information in Pupil Records

Academic Innovations will not use any pupil record or information in a pupil record for any purpose other than those required for secure administration of district-, school-, faculty-, or student-level My10yearPlan.com® accounts.

4. Personally-identifiable Information

My10yearPlan.com® stores personally-identifiable information related to the creation of student accounts. Such information may include name, date of birth, e-mail address, etc.

Any other personally-identifiable information the pupil chooses to include as part of their pupil-generated content in their 10-year Plan is done at the discretion of the pupil. Academic Innovations never requires the pupil to provide any other personally-identifiable information. Academic Innovations never provides personally-identifiable information to unaffiliated third parties in its normal course of business.

Academic Innovations provides a process by which a pupil's_ parent, legal guardian, or the eligible pupil can review the personally-identifiable information in the pupil's records and correct erroneous information.

The pupil can always review any personally-identifiable information associated with their account and correct or remove information by any of the following means:

  1. Signing in to www.my10yearplan.com with the pupil's credentials_ and/or
  2. Reviewing account details and student's 10-year Plan activity information.

A pupil's parent or legal guardian can review the personally-identifiable information in the pupil's records by making a request in writing to their school district (owner) for access to his/her subject pupil's My10yearPlan.com® account. Subject to district verification of identity, approval of disclosure, and redaction of any personally-identifiable information of a pupil other than the pupil of the parent or adult pupil who is making the request, the district will direct Academic Innovations to provide access to any/all requested pupil records within ten (10) business days or as otherwise required by law, by issuing the parent or legal guardian a temporary username and password to log on to My10yearPlan.com® to review the requested pupil records. This time frame may be extended by written consent of the parent or legal guardian.

A parent or legal guardian may correct any erroneous information identified upon review of pupil records in My10yearPlan.com® by making a written request to the LEA Account administrator of the student account. Subject to district's verification of identity and approval of such a request to correct erroneous information, the school district will notify Academic Innovations of the approved request. Academic Innovations will correct the erroneous information as directed by the district.

5. Confidentiality of Pupil Records

Academic Innovations abides by the following processes regarding the access, storage, and use of pupil records in accordance with commercial best practices. These practices include:

  1. Designating and training appropriate administrative personnel to ensure the security and confidentiality of pupil records. These designated persons have all the training and information necessary to meet Academic Innovations' duties to securely protect and maintain pupil records. All access is further limited through unique user IDs and role-based access to sensitive data.
  2. The same protocols and training regarding the security and confidentiality of pupil records are extended to and required of any subcontractors involved in the development and maintenance of My10yearPlan.com®.
  3. Academic Innovations uses a secure server environment with industry standard, up-to-date security tools and technologies such as anti_virus, anti-spyware, and anti-malware protections, firewalls, and advanced intrusion-detection methods in an effort to prevent interference, denial of service, or unauthorized access from the outside. Security alerts from the intrusion detection system (IDS) are continuously monitored and the latest IDS signatures are installed regularly.
  4. Academic Innovations stores all information in a secure server environment in data centers located in the United States. All remote access to systems is secured by virtual private network (VPN) or equivalent. Before any equipment is sold or discarded, all sensitive data is permanently removed.
  5. Academic Innovations does not store any sensitive information on any of the following media:
    1. Laptop hard drives
    2. Mobile devices
    3. Flash drives or portable storage devices
    4. Back-up tapes
    5. Internet connected web servers
    6. Databases, audit logs, files on servers
    7. Email
    8. Unique account identifiers are in place, including usernames and passwords that must be entered each time a user signs on.
    9. For all sessions during which information is entered and transmitted, Academic Innovations uses industry standard, secure socket layer (SSL) encryption.

These safeguards help to prevent unauthorized access, maintain data accuracy, and assure the appropriate use of data. Academic Innovations implements physical and additional technical safeguards to secure all data from unauthorized access, disclosure, alteration, and use.

6. In the Event of an Unauthorized Disclosure

The procedures for notifying the affected parent, legal guardian, or eligible pupil in the event of an unauthorized disclosure of the pupil's records are as follows:

  1. Immediately upon becoming aware of an unauthorized disclosure of pupil records, or of circumstances that could have resulted in unauthorized access to or disclosure or use of pupil records, Academic Innovations will notify LEA Account administrator; and
  2. Fully investigate the incident, cooperating fully with the LEA Account administrator's investigation of and response to the incident.
  3. Except as otherwise required by law, Academic Innovations will not provide notice of the incident directly to parents, legal guardians, or pupils whose personally identifiable information was involved, to regulatory agencies, or to other entities, without prior written permission from the LEA Account administrator. The LEA Account administrator may, by written request, direct Academic Innovations to provide notice of the incident directly to regulatory agencies or other entities.

7. Retention of Pupil Records

Pupil records will be maintained on the My10yearPlan.com® servers until the student graduates from the high school or post-high school educational program as a whole. This ensures continuity in this program as the student progresses from grade to grade.

Academic Innovations may maintain pupil_generated content if the eligible pupil chooses to retain their My10yearPlan.com® account by transferring pupil-generated content to a personal account.

LEA Account data will be marked for permanent destruction at the end of any written agreement between Academic Innovations and the school/district or when no longer needed to conduct any approved and agreed upon studies.

In the absence of any written agreement with Academic Innovations, LEA Accounts will be marked for permanent destruction when the annual data maintenance fee due on the account has lapsed and is at least 90 days past due. In the event that an account lapses, student access may still be deemed active until the graduation date of the last group of students entered into the system so that students can maintain their 10-year Plan.

The LEA Account administrator of a lapsed account may request the destruction of data prior to the timeline described above. All such requests for the destruction of data related to lapsed accounts must be made in writing. Academic Innovations will post a notification within the My10yearPlan.com® system for all student-level accounts associated with the requesting LEA Account that account data, including pupil-generated content, is marked for deletion. Pupils will have a 90-day grace period during which they can retrieve their plan or choose to retain their account by transferring pupil-generated content to a personal account. After the 90-day grace period, all student-level account records that remain associated with the requesting LEA Account will be permanently removed from the system and all copies will be deleted from the servers.

8. Federal Educational Rights and Privacy Act Compliance

Academic Innovations agrees to assist school districts in_ maintaining the privacy of pupil records as may be required by State and Federal law, including but not limited to the Protection of Pupil Rights Amendment (PPRA), the Children's Online Privacy Protection Act (COPPA), and the federal Family Educational Rights and Privacy Act (FERPA) (20 U.S.C. Sec.1232g). Academic Innovations provides access to pupil records, including identifiable information, only to its employees and any sub-contractors who need to access the data only after those employees and/or sub-contractors have read, understood, and received appropriate instruction as to how to comply with the data protection policies and best practices.

Academic Innovations agrees to abide by the FERPA limitations and requirements imposed on school officials. Academic Innovations will use any education records stored within My10yearPlan.com® only for the purpose of fulfilling its duties in administering the system and only for the pupil's benefit. Further, Academic Innovations will not share such data with or disclose it to any third party except as required by law or authorized in writing by the LEA Account administrator.

9. No Targeted Advertising

Academic Innovations will not use any personally-identifiable information in pupil records to engage in targeted advertising.

10. Cookies and Non-Personal Information

"Cookies" are small pieces of information that are stored by your browser on your computer's hard drive. This site uses third party cookies, however personally-identifiable information is not collected through the use of cookies. Cookies are used to determine whether a visitor is unique or has previously viewed the site. Cookies are optional and do not affect the operability of the site. Your browser manufacturer has information on changing the cookie-related settings for your specific browser.

My10yearPlan.com® also collects non-personal information. For example, as users browse this web site, Academic Innovations may collect information about your visit, but not about the user personally. Via web server logs, for example, Academic Innovations may monitor statistics such as: the number of people that visit the site, which page(s) on the site are visited, from which domain visitors come, and which browsers people use to visit the site.

11. Information Use and Consumer Choice

The information collected by this web site is used only for responding to inquiries from users and otherwise corresponding with account holders, maintaining user accounts, and for the administration, review, and/or improvement of the web site content.

Academic Innovations may contact LEA Account administrators in response to comments or inquiries, as part of the maintenance of an LEA account and its related user accounts, or in order to complete a requested transaction.

12. Policy Changes

Academic Innovations may revise this online privacy policy from time to time. In the event that material changes are made, a notification will be posted prominently on the administrator dashboards in My10yearplan.com® for all LEA Account administrators. In addition, an e-mail notification will be sent to all administrator-level users and other users who have opted to receive communications from Academic Innovations.

CONTACT INFORMATION

If you have questions or concerns regarding this privacy statement, please contact us at:
Academic Innovations
Office of Privacy Compliance
640 E 700 S, Suite 203
St. George, UT 84770
Telephone: 800-967-8016
Fax: 800-967-4027
E-mail: support@academicinnovations.com