Privacy Policy

PaperScorer (the "Site", the "App", the "Company", "we", "us", "our") takes your privacy seriously. The Site understands that privacy concerns are extremely important to our customers. We would like to assure you that we are committed to protecting your personal privacy and for that reason the Site has created this privacy policy. Please read the following to learn more about our privacy policy.

What This Privacy Policy Covers

This policy covers how this Site treats personal information that the Site collects and receives from you, including information related to your use of the Site's products and services. Personal information is information you provide about yourself that is personally identifiable like your name, address, email address, phone number, and social security number. This policy does not apply to the practices of companies or the content of websites of companies that the Site links to, does not own or control, or to people that the Site does not employ or manage. In those cases, you will become subject to the security and privacy policies of those companies or individuals and the policies that are posted on the associated website. If you wish to restrict the disclosure of your personal information by those companies or individuals, you will have to direct any opt-out or other non-disclosure request to those companies or individuals in accordance with their respective policies.

Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process personal data under the following legal bases:

• Contract: Processing necessary for the performance of our contract with you (providing the Service)
• Legitimate Interests: Processing necessary for our legitimate interests, such as improving our services, preventing fraud, and ensuring security
• Consent: Where you have given explicit consent for specific processing activities
• Legal Obligation: Processing necessary to comply with applicable laws and regulations

Information We Collect on the Site

In order to ensure that consumers get the very best service, the Site collects demographic information, web pages visited and other consumer-volunteered information from sources such as request forms, survey information and/or site registrations. The Site's request forms may require users to give us information, which may include but not be limited to your name, e-mail address, grade level and subject. This information allows the Site to serve you. Collected information is used to improve the content of our website, customize the content and/or layout of our website for individual users. We do not use information for any targeted advertising to our user base. Our entire site is ad free and will never be transitioned into an advertising platform.

The Site automatically receives and records information on our server logs, including but not limited to your IP address, the Site cookie information, previous page visited, and the page you request. The Site uses information for the following general purposes: to customize content you see, fulfill your requests for services, maintain or improve our services, contact you and conduct research. All information the site automatically receives is completely anonymous information and doesn't contain any user identifiable information.

If you or your school or district registers through or otherwise grants access to a third-party integrated service, such as Google, MS365, Clever, or ClassLink we may collect personal information that is already associated with your integrated service account. If you create or upload assessments or other academic or educational resources or materials, we collect the content of these materials and metadata you provide about them, such as tags, DOK levels and alignment to learning standards.

Information on individual usage of the system, including but not limited to individual IP addresses, may be analyzed on a case-specific basis to resolve a technical difficulty or to assist in resolving or investigating any misuse of the service; also, such individual usage information may be furnished to your school if your school requests such information to assist in the investigation of fraudulent, abusive, or criminal activity or any other use of PaperScorer that violates your school's rules or policies.

All information we collect is for improving the educational experience of our application. Information we collect is NOT sold in any way shape or form to a 3rd party application.

We value the privacy of all of our users and want to maintain the highest level of standard for our data privacy. The information listed below is ONLY collected to improve the user experience of our product. The information collected below is also required to give the best possible educational experience of our product. At no time is any data collected for non-educational purposes.

Information we collect from teachers, site admins and district admins:

• First Name
• Last Name
• Email Address
• Avatar (personal image)

Information we collect from students:

• First Name
• Last Name
• Email Address (optional; but used for matching import data)
• Identifier (SIS ID, State ID or other unique ID)

Biometric Data

PaperScorer does not collect, store, or process biometric data. Our scanning technology processes images of paper assessments to recognize marked answers and handwritten responses, but does not capture or analyze any biometric identifiers such as fingerprints, facial geometry, voiceprints, or other unique biological characteristics. The scanned images are used solely for the purpose of grading assessments and are not used for identification purposes.

Automated Decision-Making and AI

PaperScorer uses optical character recognition (OCR) and image processing technology to automatically score multiple choice, true/false, and other objective question types. These automated processes compare student responses against answer keys to calculate scores. Written responses and essay questions require manual grading by instructors. Users have the ability to review and override any automated scoring decisions. We do not use AI or automated systems to make decisions that significantly affect students' educational opportunities without human oversight.

Payment Information

(only for teacher users) If you make a purchase through our services, we will collect information needed to complete the transaction. However, all transactions are processed through Stripe. We do not collect, process, record or maintain any information related to your credit card or bank account.

How We Use Information We Collect

The information you provide to the Site is required for, but not limited to, the following reasons:

• Internal record keeping
• Access to the Site's website, associated websites and sub-domains
• Account management
• Confirmation of email address (non-student accounts)
• Sending notices of product upgrades and other relevant communications (non-student accounts)

Please note, all information we collect is for improving the educational experience of our application. Information we collect is NOT sold in any way shape or form to a 3rd party application.

Cookies

Cookies are pieces of information that a web server may transfer to your computer through your web browser. When this information is stored on your computer, our system is able to recognize your browser and in turn customize web page content for you. By using cookies, the Site is able to offer you the advantage of personalization. Such personalization provides you with a more convenient online experience. We will not use any cookies to retrieve other data from your hard drive or obtain sensitive information about you. When a cookie is set, your browser will check it for length, an expiration date, and where it originated. Only the Site can access the cookies that we set. You can decide if and how your computer will accept a cookie by configuring your preferences or options in your browser. However, if you choose to reject cookies, you may not be able to use certain of our online services or website features.

Cookie Consent and Management

We use the following types of cookies:

• Essential Cookies: Required for the operation of the Site and cannot be disabled
• Functional Cookies: Enable enhanced functionality and personalization
• Analytics Cookies: Help us understand how visitors interact with the Site

Where required by law, we will obtain your consent before placing non-essential cookies on your device. You can manage your cookie preferences through your browser settings or through our cookie consent tool where available.

Do Not Track Signals

Some web browsers have a "Do Not Track" (DNT) feature that sends a signal to websites you visit indicating that you do not want to be tracked. Because there is no common understanding of how to interpret the DNT signal, our Site does not currently respond to browser DNT signals. Instead, you can use the range of other tools we provide to control data collection and use, including the ability to opt out of receiving marketing communications as described above.

Third Party Service Providers

The Site works with a number of third party service providers to help improve the quality of our service. These companies may employ cookies and action tags (also known as tracking pixels or web beacons) to measure service effectiveness. No personal information is provided to these third parties by the Site. These third party providers do not sell or share your information with other third party providers.

Third parties will never get any data that is personally identifiable (personal information) to any of our users. The data we send to third parties is anonymous and provides a general health status of our application as a whole. The only reason we even share non-personally identifiable information is to improve the overall user experience of our application. By default we do NOT share any information with a 3rd party site, unless it is listed below. Any 3rd party site that we share information with will ALWAYS be non-personally identifiable information. Again, we will NEVER share your username, real name, email address with ANY 3rd party site.

The Site uses the following third party services on our main app to help us improve the overall experience of our application:

• Google Analytics – Google Analytics is used to track overall interaction with the Site. We analyze this data to help make improvements to functionality and figure out the best method of communicating with our users. Google Analytics does not share any information with third parties. You can review the Google Analytics product here: https://www.google.com/analytics
• Help Scout – Help Scout is used to provide inline support within the Site. Users can access all of our support documentation, and the Site is able to provide contextual help based on the location of a user. Help Scout does not share any information with third parties. You can review the Help Scout product here: https://www.helpscout.com
• Sentry IO – Sentry IO is used to track any issues that might happen within the front-end web code. Since there are so many variations of web browsers, this application will help us identify issues that appear on the Site. Sentry IO does not share any information with third parties. You can review the Sentry IO product here: https://www.sentry.io
• Amazon Web Services (AWS) – AWS provides our cloud infrastructure and data storage. Data is stored in the United States.
• Stripe – Stripe processes payment transactions for paid subscriptions. We do not store payment card information on our servers.

Sub-Processors

The following sub-processors may process student data on our behalf:

• Amazon Web Services (AWS) – Cloud hosting and data storage (United States)
• Stripe – Payment processing (United States) – Teacher accounts only
• Help Scout – Customer support (United States)
• Sentry IO – Error tracking (United States)

We maintain contracts with all sub-processors that include data protection obligations. Schools and districts may request a copy of our sub-processor agreements by contacting us at hi@paperscorer.com.

Third Party Service Provider Privacy Policies

Except as otherwise expressly included in this Privacy Policy, this document only addresses the use and disclosure of information we collect from you. If you disclose your information to third parties that you are placed in contact with through our site or other sites throughout the Internet, different privacy policies may apply to their use or disclosure of the information you disclose to them. Since the Site does not control the privacy policies of third parties, you are subject to the privacy policies of those third parties, and we encourage you to read their privacy policies or ask questions before you disclose your personal information to others.

We do not link to any third party sites through our main application. Our corporate site has links to third party sites for information purposes only.

International Data Transfers

PaperScorer is based in the United States and processes data in the United States. If you are located outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States where our servers are located and our central database is operated.

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we rely on the following legal mechanisms for international data transfers:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data Processing Agreements with all sub-processors
• Supplementary measures as required to ensure adequate protection

Security

The Site understands the importance of security for our consumers. We use the latest SSL (Secure Socket Layer) encryption technology to protect sensitive personal during transmission. SSL encrypts information transmitted across the internet to and from the Site. You will know that SSL is working when you see the presence of an image of a closed lock or solid key in the bottom bar of your browser window. This allows your personal information to be submitted in a secure environment while reaching the intended parties. An SSL-capable web browser such as the current versions of the Chrome, Firefox, Safari, Internet Explorer, Mobile Chrome, Mobile Firefox or Mobile Safari is needed to support this encryption technology.

All data we collect is stored within our Amazon Web Services (AWS) environment. We have strict access policy for our employees on who is allowed to access that environment. Not only do we limit the number of access points to our stored data, but we require two-factor authentication for all employees who have access to our stored data.

We also keep track of unauthorized access attempts. If enough access attempts are triggered in a short period of time, we block the source of those access attempts and notify our security team with the appropriate information about the unauthorized access attempts.

Data Breach Notification

In the event of a data breach that affects your personal information, we will:

• Notify affected users within 72 hours of becoming aware of the breach, where feasible
• Notify schools and districts immediately if student data is affected
• Provide information about the nature of the breach, the types of data involved, and steps we are taking to address it
• Report the breach to relevant supervisory authorities as required by law (including state attorneys general for U.S. users and data protection authorities for EU users)
• Offer guidance on steps users can take to protect themselves

Data Retention

We retain different types of data for different periods:

• Active Account Data: Retained while your account is active
• Assessment Data: Retained for the duration of the school year plus 3 years, unless deleted earlier by the user or school
• Student Data: Retained until the end of the school year plus 1 year, or until deleted by the school/teacher
• Inactive Account Data: Personally identifiable information is deleted 5 years after an account becomes inactive
• Backup Data: May be retained for up to 90 days after deletion from production systems
• Anonymized/Aggregated Data: May be retained indefinitely for analytics and service improvement

Child Usage & Details

Child Online Privacy Protection Act Compliance ("COPPA") - Protecting the privacy of young children is especially important to us, so we have added protections and restrictions designed to help protect Personal Information relating to children who are less than 13 years of age. We only collect personal information through external services from a child under 13 where a teacher or administrator from that student's school or district has agreed to obtain parental consent for that child to use external services and to disclose personal information to us, for the use and benefit of the learning environment and learning experience. If you are a student under 13, please do not send any personal information about yourself to us if your school, district, and/or teacher has not obtained this prior consent from your parent or guardian, and please do not send any personal information other than what we request from you in connection with external services. If we learn we have collected personal information from a student under 13 without parental consent being obtained by his or her school, district, and/or teacher, or if we learn a student under 13 has provided us personal information beyond what we request from him or her, we will delete that information as quickly as possible. If you believe that a student under 13 may have provided us personal information in violation of this paragraph, please contact us at hi@paperscorer.com.

If you are a school, district, or teacher, you represent and warrant that you are solely responsible for complying with COPPA, meaning that you must obtain advance written consent from all parents or guardians whose children under 13 will be accessing external services. You are responsible for understanding how any publisher software that you install on behalf of yourself or other users may collect and use information of users of the Site's external services. When obtaining consent, you must provide parents and guardians with this privacy policy. You must keep all consents on file and provide them to us if we request them. If you are a teacher, you represent and warrant that you have permission and authorization from your school and/or district to use external services as part of your curriculum, and for purposes of COPPA compliance, you represent and warrant that you are entering into these terms on behalf of your school and/or district.

As a parent, you have the ability to control information about your child user. To review, update, or delete information collected from your child user contact us at hi@paperscorer.com.

State Student Privacy Laws

In addition to COPPA and FERPA, we comply with applicable state student privacy laws, including but not limited to:

• California SOPIPA: Student Online Personal Information Protection Act
• New York Education Law 2-d: Student data privacy requirements for New York schools
• Colorado Student Data Transparency and Security Act
• Other state-specific student privacy requirements as applicable

We are a signatory to the Student Data Privacy Consortium (SDPC) National Data Privacy Agreement and maintain state-specific Data Privacy Agreements where required. Schools and districts may request copies of applicable agreements by contacting us at hi@paperscorer.com.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, our purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You can request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to Correct: You can request that we correct inaccurate personal information we maintain about you.
• Right to Opt-Out of Sale/Sharing: We do not sell personal information or share it for cross-context behavioral advertising. Therefore, there is no need to opt out.
• Right to Limit Use of Sensitive Personal Information: We only use sensitive personal information for purposes permitted under the CPRA.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

To exercise these rights, please contact us at hi@paperscorer.com. We will verify your identity before processing your request.

California Children's Privacy Rights

If you are under the age of 18, or the parent of a user under the age of 18, residing in California, you are entitled to request removal of content or information you have posted on the Site. If you would like to request removal of your or your child's content or information, please email us at hi@paperscorer.com for assistance. Please note that removal of your content or information does not ensure complete or comprehensive removal, as there may be de-identified or recoverable elements of your content or information on our servers in some form. Additionally, we will not remove content or information that we may be required to retain under applicable federal and state laws.

Rights for Users in Other U.S. States

Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws may have similar rights to those described for California residents, including:

• Right to access and obtain a copy of your personal data
• Right to delete your personal data
• Right to correct inaccuracies in your personal data
• Right to data portability
• Right to opt out of targeted advertising (we do not engage in targeted advertising)
• Right to appeal our decision regarding your privacy request

Rights for Users in the EEA, UK, and Switzerland (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have the following additional rights:

• Right of Access: You can request a copy of your personal data.
• Right to Rectification: You can request that we correct inaccurate data.
• Right to Erasure: You can request that we delete your data (subject to legal retention requirements).
• Right to Restriction: You can request that we restrict processing of your data.
• Right to Data Portability: You can request your data in a structured, machine-readable format.
• Right to Object: You can object to processing based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.
• Right to Lodge a Complaint: You can lodge a complaint with your local data protection authority.

To exercise these rights, contact us at hi@paperscorer.com. We will respond to your request within 30 days.

Review and Deletion of Your Child's Information

Parents have the right to refuse the site further contact with their child and to have access to their child's information and to have it deleted by contacting the school administrator. Parents have the right to consent to the site's use of the child's personal information without having to consent to its disclosure of that information to third parties by contacting the school administrator.

If you are the parent and guardian of a student using the Site, and cease to agree with the Site's terms of use and/or privacy policy at some point in the future, you may opt-out by contacting (a) your Subscriber (typically your school) administrator if you are a district account user, or (b) the Site at hi@paperscorer.com if you are a basic account user on the free app. If yours or your child's personally identifiable information changes, or if you no longer desire our service, you may correct, update, or delete it by making the change on our member information page or by contacting customer support via hi@paperscorer.com. We will respond to your access request within 30 days.

We will retain your information for as long as your account is active or as needed to provide you services. If you wish to cancel your account or request that we no longer use your information to provide you services, contact us via hi@paperscorer.com. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Once an account is considered "inactive", we will remove all personally identifiable information 5 years from that date.

Changes to this Privacy Policy

We may occasionally update the Site's Privacy Policy as necessary to protect our users and to comply with a changing environment. We recommend that you check the Site's Privacy Policy when you visit to be sure you are aware of and understand our current policy. If we make material changes to this policy or in how we will use or collect your personally identifiable information, we will prominently post such changes prior to implementing the change. We will not make material changes in how we handle previously collected personal information that have retroactive effect unless legally required to do so, and we will e-mail registered users information on material changes to this policy. Your continued use of the Site means you accept those changes for all information you have provided to us.

Disclosures

We may disclose your or your child's personally identifiable information in connection with business transfers and purchases. As we continue to develop our business we may buy or sell business divisions or companies, we may merge or combine with another company, or our company itself and/or all or a significant part of its assets may be acquired by another company. We may provide any information we have to a potential counter-party in any such potential transaction. If such a transaction is completed, your or your child's personally identifiable information may be one of the transferred and shared business assets. In the event that information is shared in this manner, notice will be posted on our Site.

In this event this privacy policy will continue to apply unless we contact you and ask you to opt in to any changes before they are implemented. We may also share de-identified and/or aggregated data with others for their own uses. We reserve the right to disclose your or your child's personally identifiable information as required by law and when we believe that disclosure is necessary to protect our rights and/or to comply with a judicial proceeding, court order, or legal process served on our Web site.

Data Protection Officer

For privacy-related inquiries, including requests to exercise your data protection rights, please contact our Data Protection Officer at privacy@paperscorer.com.

Questions and Suggestions

If you have questions or suggestions, or want the opportunity to review or change any of the information collected from or about you, please complete a feedback form, email us at hi@paperscorer.com.