Privacy Policy
Overview
ByTheVeranda is a platform for communications between parents and school. ByTheVeranda is designed for parent to parent, PTA and school collaboration at preK-12 districts and schools. Parents can discover other parents who need and want same things as they do, trade information and resources, school calendar and directory information.
Commitment to Your Privacy
ByTheVeranda understands that privacy is extremely important to users of our services and website, the district, school or organization that registers for our services (“School”), and the students, their parents and other users whose information we may access on behalf of a School.
Our goal is to be transparent in our practices regarding collection and data usage. This privacy policy covers all products and services delivered by ByTheVeranda, Inc. A translated version of ByTheVeranda’s privacy policy is available upon request.
Please see the following information about the information we collect while providing services, how we use it and other details.
Data Covered and Written Agreements
All data that ByTheVeranda collects is covered under this privacy policy. This includes personal information provided to ByTheVeranda as a service provider by School pursuant a written agreement with School (in either case, the “Agreement”), or collected by ByTheVeranda as a service provider. This policy along with Agreement and applicable laws govern its handling of personal information gathered in its capacity as a service provider.
If this privacy policy expressly contradicts Agreement with ByTheVeranda as to the data privacy and security practices, Agreement will govern to the extent of the contradiction.
Information We Collect
We collect two types of information: personal information your School knowingly or you as a parent choose to disclose that is collected on an individual basis, and website-user information collected on an aggregate basis as you and others browse our website.
Basic Information Your School Provides to Us
Admin Role: We use name, ID, title, phone number, email address, address, group memberships, school memberships and district memberships from school-provided data.
Staff Role: We use name, ID, title, phone number, email address, address, group memberships, school memberships and district memberships from school-provided data.
Teacher Role: We use name, ID, title, phone number, email address, address, classes, section, group memberships, school memberships and district memberships from school-provided data.
Student Role: We use name, ID, gender, grade level, enrolled courses, other enrolled groups, extracurricular activities and family relationships from school-provided data.
Parent/Guardian/Contact Role: We use name, relationship to student, phone number, email address, address, communication language, group memberships, school memberships and district memberships from school-provided data. from school-provided data.
Additional Contact Information Your School May Provide to Us About Students
Pursuant to Children’s Online Privacy and Protection Act (“COPPA”), ByTheVeranda relies on the parent’s consent to allow those under 13 years of age to use our services. If we learn that we have collected personal information from a child under age 13 other than pursuant to the above, or if we learn that a child under 13 has provided us personal information beyond what we request from them, we will delete that information as quickly as possible after we have been notified internally or by impacted customers.
If you have questions about modifying or deleting personal information of a student, please contact us directly.
Information You Provide to Us
In addition to the information about you provided by the School, you may choose to provide additional information about yourself in your user profile, such as your profession, interests, your children’s interests and needs. All information you provide voluntarily may be made accessible to users in your School. This information is not shared with users outside of your School.
Information We Collect when You Interact With ByTheVeranda
In addition to the personal information you and your School provide to us, we also collect usage information as you interact with ByTheVeranda. Collecting this information allows us for more accurate reporting and helps us to improve our services.
The following describes how we use this information:
a. Site Activity Information. We monitor some of the actions you perform on ByTheVeranda. For example, if you make a comment on a post, we both log the fact that you added a comment as well as store the actual comment itself.
b. Notification Activity Information. We monitor email delivery, text delivery, app downloads, and engagement through clicks in order to understand your interaction with our services and improve your experience with ByTheVeranda.
c. Access Device and Browser Information. When you access ByTheVeranda from a computer, mobile phone, or other device, we collect information from that device such as your browser type, operating system, unique device identifier, IP address, the date and time of visits, and the time spent at our website.
d. Cookie Information. We may send one or more cookies to be stored on your computer in order to personalize your experience with ByTheVeranda and make our services easier to use. A cookie is a small text file containing a string of alphanumeric characters that allows us to uniquely identify your browser and allows you to log in automatically whenever you return to ByTheVeranda. We also use cookies to identify and maintain your logged status as well as enhance your navigation through the website. You can remove or block cookies using the technical settings of your browser though you may not be able to do so on certain browsers or mobile devices. Note that disabling cookies may impact your ability to use our services fully, so we recommend that you leave them enabled for the quality of your experience.
Information We Do Not Collect when You Interact With ByTheVeranda
ByTheVeranda only collects data related to providing services for Schools. We do not explicitly collect criminal records, medical records, social security numbers, biometric information, disabilities, political affiliations, religious affiliations, discipline records or behavioral assessments.
How We Use Information
Your privacy and your child’s privacy is extremely important to us. The student data we collect is used for communication and educational purposes at the discretion of your School only. We use the information we collect to provide a safe, efficient, and customized experience for our users.
Here are some of ways we use this information:
To Manage the Service
We use the information we collect to provide personalized services and features to you and provide you with customer support. In addition we use the information we collect to analyze how you use the services and features so that we can measure and improve those services and features.
To Contact You
We may contact you with service-related announcements from time to time. This includes contacting you for any school related activities. We may include content you see on ByTheVeranda in the emails we send to you. We may also contact you in order to notify you about important changes to our services.
To Provide Relevant Information To Your School
We use the information we collect to report usage levels to your School. This allows your School to monitor how successful their communications are so that they can improve their use of ByTheVeranda.
What Can Other Users in ByTheVeranda See
Access to the School’s ByTheVeranda services and website is restricted to parents and staff at your School, and other users that the School may deem appropriate, e.g., Board Members. Users can only view posts addressed to the entire School and to any groups or classes they or their child belongs to. Parents do not see posts for classes and private groups they do not belong to. All users are responsible for maintaining the security of their password. Notwithstanding the foregoing, your School may choose to share some ByTheVeranda posts and associated pictures on social websites, such as Twitter and Facebook. Sharing posts and pictures on social websites will make the posts and pictures viewable by users outside of ByTheVeranda, and ByTheVeranda’s privacy policy will no longer apply to those posts and pictures. All such posts will be clearly marked so ByTheVeranda users can know that those posts are shared via social networks. Your contact information, i.e., your email, phone and address may be made available to other registered parents at your School as part of an online School Directory. This information is not shared outside of the School or with any third parties. You have the option to adjust your settings to keep all your contact information (email, phone and address) hidden from other parents at your School.
Sharing and Disclosure of Information
ByTheVeranda uses the data received from the School for the sole purpose of delivering products and services to the School. We do not rent, trade, or sell or otherwise distribute your information to any third parties and will only disclose information when allowed by FERPA and required a) by applicable laws or government orders or b) to maintain and operate our service or c) when authorized by the School d) When authorized by Parents.
ByTheVeranda may acquire information (including Personally Identifiable Information or “PII”) from the school SIS/SMS or other school systems such as payroll systems, nutrition systems, fee systems, etc through a School-requested integration.
ByTheVeranda provides links to external websites for purposes which are intended solely to support the school’s day-to-day operations. The School or its users may post links within ByTheVeranda to external websites for which we have no control.
How do we work with Third Party Service Providers?
We work with a number of third party service providers and contractors to maintain and operate our service.
We use third party service providers:
For secure credit card transaction processing for supporting payments in ByTheVeranda.
To provide customer support communication to our users.
To analyze use of our website and app.
For our blog and to facilitate social sharing on our blog.
To send emails, texts and phone calls.
For hosting our services and databases.
To log into our service using Veracross, Google, Clever, SIS or a district-managed SSO integration.
Before ByTheVeranda engages with a third party where we may share PII, we ensure that their privacy policy is at least as strict as ours.
ByTheVeranda shall not provide any PII to any person, party or organization ineligible to receive student records and/or student record data and information protected by FERPA, federal regulation, state law or regulation or so prohibited from receiving school data.
Corporate Restructuring
In the case of a corporate event such as a sale of assets, a future sale, or a merger of ByTheVeranda with another organization, we may transfer your personal information. However, we will provide you with notice and an opportunity to opt-out of the transfer of personally identifiable student data if the new organization does not have a privacy policy at least as stringent as our own.
Security
We take great measures in keeping your data safe and secure. ByTheVeranda uses secure infrastructure to ensure that student data is encrypted during transfer and at rest. Access to ByTheVeranda is authenticated through username/password. ByTheVeranda stores and protects your account information on a secured server behind a firewall. We utilize encryption/security software to safeguard the confidentiality of personal information we collect.
Data Breach Policy
If ByTheVeranda becomes aware of a security breach of its users’ personally identifiable information, ByTheVeranda will notify the School as well as the affected users if asked to do so by the School or as required by applicable laws.
Definition A breach is any unauthorized acquisition of computerized data that compromises the security, confidentiality, or integrity of personal information that we maintain.
Personal Information Personal information is defined as any unencrypted information containing individuals’ names or initials, contact information such as email address or phone number, state or district identification numbers and other personal identifiers. This also includes direct messages inadvertently sent to the wrong recipient.
Timeframe In the event of a data breach, the goal is to provide notice to affected Schools within 2 business days after we’ve been made aware of the breach.
Recipients of the Notice We will notify the School(s) to which those users belong via the administrative contact information on record. We will assist in notifying impacted users if requested to do so by the School.
Information in the Notice The security breach report shall be written in plain language, shall be titled “Notice of Data Breach” or “Data Exposure Report,” and shall present the information described herein under the following headings:
What happened: A general description of the breach incident and why the breach happened. The notification shall also include the date of the breach and the notice.
What was done to resolve the issue: Details regarding the resolution and any additional actions taken to prevent a similar breach in the future.
What user data was affected: The estimated number of staff and student families affected by the breach, if any. A list of the types of personal information that were or are reasonably believed to have been the subject of a breach.
What are the next steps for you: If there are actions required on the part of the School related to the breach, we will provide detailed instructions and assist in remediation.
ByTheVeranda may provide additional information as a supplement to the notice.
Information Hosted in the United States
ByTheVeranda and all of our data is hosted within the United States. Please note that if you use our service from a country or region with laws differing from the United States’ laws governing the collection and production of data, you may be transferring your personal information outside of the jurisdiction of your region and to the United States. By using our service, you consent to the transfer, use and storage of your personal information in accordance with our Privacy Policy and Terms of Use.
Data Retention and Destruction
For more information on the ByTheVeranda data retention and destruction policy, please contact contact@bytheveranda.com.
Choices About Your Information
Managing Your Account
You may review, update, and correct the information in your account by logging into ByTheVeranda, or in many cases, from your Student Information/Management System (SIS/SMS) portal. Your School may not allow you to update your account information directly in ByTheVeranda. In such an event, an alternate School contact or instructions will be provided for you to update your ByTheVeranda contact information or you may be able to update in the SIS/SMS portal. You are able to adjust your notification settings within ByTheVeranda so that you receive instant or digest notifications for app notifications, emails and texts, or you may opt out of ByTheVeranda communications and receive no notifications at all. If you choose not to receive notifications from ByTheVeranda this will not stop you from receiving emergency notifications, for example those regarding school closure, threats, etc.
Deleting Your Account
If you or your child graduates from the School or leaves the School and you are no longer associated with the School, the School will delete your account, i.e., you will no longer be able to access your information on ByTheVeranda and no other ByTheVeranda user will be able to access your personal information either, including your School unless for legal reasons. We will retain and use your information as necessary in order to comply with our legal obligations, resolve disputes, prevent abuse, and enforce our agreements. In case of accidental deletion, we will be able to restore the account on request if a request is made within thirty (30) days.
If you cease to agree with ByTheVeranda’s terms of use and privacy policy at some point in the future or if you no longer desire our service, please contact the School directly to delete your account. You may also contact us at privacy@ByTheVeranda.com. We will get in touch with your School to honor your request and respond within a reasonable time not exceeding thirty (30) days. We will retain your information for as long as your account is active or as needed to provide services to you and your School.
European Union Residents
Our computer systems are currently based in the United States, so your personal data entered at our Site or related to your use of our services (i) will not be processed in the European Economic Area (EEA) and (ii) will be processed by our service providers or us in the United States and other non-EEA countries. By using ByTheVeranda, you (a) agree to and accept the terms stated in this Privacy Policy and (b) expressly consent to the processing of your personal data on equipment and by service providers outside the European Economic Area. If you reside in the European Union and we do not seek your explicit consent to process your personal data, we are relying on the legitimate commercial interest of our company in providing the services to you and other customers and the need to process your personal data as previously described in order to accomplish that legitimate interest. You also have the right to withdraw consent and request that we halt processing of your personal data at any time. This withdrawal of consent does not invalidate the consent-based processing that occurred prior to withdrawal. As an EU resident, you also have the following rights under the General Data Protection Regulation:
Right of access to personal data
Right to rectification of personal data held where it is incorrect or incomplete
Right of erasure of personal data (“right to be forgotten”) if certain grounds are met
Right to restrict/suspend processing of personal data
Right to complain to a supervisory authority
Right to object to processing (if processing is based on legitimate interests)
Right to object to processing of personal data for direct marketing purposes
Right to receive your personal data in a standard electronic format (data portability)
You may withdraw this consent or exercise any of the foregoing rights applicable to you by contacting the Privacy Officer at the address below or notifying us at contact@bytheveranda.com.
California Residents
ByTheVeranda complies with, or works with the School to jointly ensure compliance with, all applicable state and federal laws and regulations pertaining to data privacy and security, including FERPA, COPPA, PPRA, SOPIPA, AB 1584 and all other California privacy statutes.
Changes to Our Privacy Policy
We reserve the right to change, modify, add, or remove portions of this Privacy Notice. ByTheVeranda will notify School administrators “in writing” or via email of material changes to this privacy policy, including practices around new or additional data collection, or practices that may lessen the previously noted protections around student data privacy. We will also post a changelog here, please refer to this for additional updates.
If you have any questions or would like further clarification about ByTheVeranda or this Privacy Notice, please e-mail us at contact@bytheveranda.com.
How to Contact Us
If you have questions or concerns pertaining to your information, your registration, your account, or unsubscribing please contact your School directly. Otherwise if you have questions about this privacy policy or ByTheVeranda, you may contact us at contact@bytheveranda.com.