Privacy Policy

Scope

This Privacy Policy applies to personal information processed by Eddi Inc. ("Eddi," "we," "us," or "our"), including through our websites, platform, and all related services (collectively, the "Services"). This policy is intended to comply with applicable federal and state privacy laws, including but not limited to FERPA, COPPA, Connecticut General Statutes Sections 10-234aa through 10-234dd, California's Student Online Personal Information Protection Act (SOPIPA), and similar laws in other states where we operate.

Changes to our Privacy Notice

We may update this Privacy Policy from time to time. If we make material changes, we will notify you as required by applicable law. Continued use of our Services after any update constitutes your acceptance of the revised policy.

Personal Information We Collect

a) Information You Provide

‍We may collect the following categories of information when you interact with our Services:Account and contact information, including name, email address, phone number, and employer detailsCommunications you send to us, including support requests and inquiriesInformation submitted through forms, surveys, or event registrationsJob application materials

‍b) Information Collected Automatically

‍When you use our Services, we may automatically collect:Device and browser identifiers, IP address, and operating system informationUsage data, including pages visited, features used, and time spent on the platformCookies and similar technologies for session management and platform functionalityWe do not use cookies or tracking technologies for advertising or cross-site behavioral tracking.

‍c) Student and District Data

‍District personnel may upload educational records and related financial data to the platform. This may include information about students and school programs. Eddi processes this data solely to provide the contracted Services to the district. We do not collect student data directly from students.

‍d) Information from Third Parties

‍We may receive information from school districts or other authorized partners in connection with providing our Services.

How We Use Your Information

We use the information we collect for the following purposes:

To provide, maintain, and improve the Services under our agreement with your organizationTo respond to support requests and communications

To authenticate users and maintain account securityTo detect and prevent fraud, abuse, or unauthorized accessTo comply with legal obligations

To send administrative communications related to the ServicesWe do not use student data or district data to market or advertise to students.

We do not build advertising profiles.

We do not use any data processed through the platform to train or improve our AI models without explicit written consent from the applicable district.

We do not use student data for any purpose beyond providing the contracted Services to the district.

How We Disclose Your Information

a) Service Providers and Subprocessors

‍We share data with third-party vendors only as necessary to provide the Services. All subprocessors are contractually required to handle data in accordance with applicable law and our data protection obligations. All current subprocessors maintain SOC 2 Type 2 certification. Our current subprocessors include:

Google Cloud Platform (GCP) - cloud infrastructure and hosting Neon - database services Vercel - application deployment and hosting OpenAI - AI model processing Google (Gemini) - AI model processing Anthropic (Claude) - AI model processing Meta (Llama) - AI model processing Google Analytics - platform usage analytics
We will update this subprocessor list when changes occur and notify affected districts as required by our agreements.

‍b) Legal Requirements
‍
‍We may disclose information when required by law, court order, or government request, or when we believe disclosure is necessary to protect the rights, property, or safety of Eddi, our customers, or others.
‍
‍c) Business Transfers
‍
‍In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before any such transfer and ensure the receiving party is bound by obligations at least as protective as those in this policy.
‍
‍d) What We Will Never Do

‍Sell student data or personal information to third partiesUse student data for targeted advertisingDisclose student data for purposes unrelated to the contracted educational servicesUse student data to build profiles for non-educational purposes

Data Retention and Deletion

We retain district and student data for a period of one year following the termination or expiration of the applicable service agreement, unless a shorter period is required by law or requested in writing by the district.
Districts may request deletion of their data at any time by contacting us at info@eddifi.ai.

Upon receiving a verified written deletion request, we will delete or de-identify the applicable data within 30 days, except where retention is required by law. De-identified or aggregated data from which individual identity cannot reasonably be reconstructed may be retained beyond this period for internal analytics and product improvement.

We retain district and student data for a period of one year following the termination or expiration of the applicable service agreement, unless a shorter period is required by law or requested in writing by the district.
Districts may request deletion of their data at any time by contacting us at info@eddifi.ai.

Upon receiving a verified written deletion request, we will delete or de-identify the applicable data within 30 days, except where retention is required by law. De-identified or aggregated data from which individual identity cannot reasonably be reconstructed may be retained beyond this period for internal analytics and product improvement.

Your Privacy Choices and Rights

Depending on your location and role, you may have the right to:
-Access the personal information we hold about you
-Request correction of inaccurate information
-Request deletion of your information
-Opt out of non-essential communications

To exercise any of these rights, contact us at info@eddifi.ai.

Districts may also exercise rights on behalf of their staff and students as permitted by applicable law.

Email opt-out: You may unsubscribe from marketing emails at any time using the unsubscribe link in the email. Transactional and administrative communications related to your account or our agreement with your organization are not subject to opt-out.

Security of Your Information

We implement administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, or destruction. Our infrastructure is hosted on SOC 2 Type 2 certified platforms. Eddi is currently completing its own SOC 2 Type 2 certification process. No system is completely secure. In the event of a data breach that affects your information, we will notify affected parties as required by applicable law, including applicable state breach notification requirements.

Supplemental Notice for Nevada Residents

If you are a resident of Nevada, you have the right to opt-out of the sale of certain personal information to third parties who intend to license or sell that personal information. Please note that we do not currently sell your personal information as sales are defined in Nevada Revised Statutes Chapter 603A.

Supplemental Notice for Connecticut Residents

For districts located in Connecticut, we comply with the Connecticut Student Data Privacy Act.
Specifically:
-We do not sell student data
-We do not use student data for targeted advertising
-We do not use student data to build profiles for non-educational purposes
-We use student data only to provide the educational services contracted by the district
-We maintain reasonable security procedures appropriate to the sensitivity of the data
-We support district rights to request deletion of student data

Supplemental Notice for California Residents

COPPA Privacy Statement

The Children's Online Privacy Protection Act of 1998 and its rules (collectively, “COPPA”) inform our practices for using, and disclosing personal information from children under the age of 13 (collectively, “children” or individually, each a “child”). We do not allow access to our platform by minors but expect users to upload information that may contain sensitive information. In this case, we expect the user to have prior consent from parents to access this data. 



Students do not directly access or create accounts on the Eddi platform. Eddi does not knowingly collect personal information directly from children under the age of 13. Any student data processed by Eddi is provided by authorized district personnel under a valid service agreement. Districts are responsible for obtaining any required parental consents under COPPA prior to sharing student information with Eddi.

Third-party Websites/Applications

The Services may contain links to other websites/applications and other websites/applications may reference or link to our Services. These third-party services are not controlled by us. We encourage our users to read the privacy policies of each website and application with which they interact. We do not endorse, screen or approve, and are not responsible for, the privacy practices or content of such other websites or applications. Providing personal information to third-party websites or applications is at your own risk.

Supervisory Authority

If you are located in the European Economic Area, Switzerland, or the United Kingdom you have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal information violates applicable law.

FERPA Statement

Eddi operates as a school official or authorized service provider under the Family Educational Rights and Privacy Act (FERPA). We access educational records only as directed by, and on behalf of, the contracting school district. We do not use educational records for any purpose other than providing the contracted Services. Districts retain ownership and control of all educational records they share with us.

If you have any other questions, please contact the’s school directly, or reach out to us at info@eddifi.ai.

Contact Us

Eddi is the controller of your personal information. If you have any questions about our privacy practices or this Privacy Notice, or to exercise your rights as detailed in this Privacy Notice, please contact us at: 



Address: Eddi Inc. PO Box 83, Woodstock, VT 05091

Email: info@Eddifi.ai