​1. Overview

G10 Innovations, LLC (“G10 Innovations,” “we,” “our,” or “us”) provides educator‑designed, district‑governed software tools that support assessment, analytics, and workflow automation for K‑12 schools. We are committed to protecting the privacy of students, educators, administrators, and families. This Privacy Policy explains what data we collect, how we use it, how we protect it, and the rights of districts and users.

​

G10 Innovations complies with FERPA, supports COPPA requirements for district‑managed accounts, and follows industry‑standard security practices.

​

2. Data We Collect

We collect only the data required to operate our services.

​

2.1 Student Data (provided by districts)

• Student name, ID, grade level, school

• Assessment scores, performance history, skill profiles

• Teacher‑entered notes or rubric evaluations

• Rosters and class schedules

• District‑provided identifiers (SIS ID, SSO ID)

​

2.2 Educator & Administrator Data

• Name, email, role

• Login credentials (SSO tokens only; we do not store passwords)

• Usage logs (e.g., last login, feature usage)

​​

2.3 System & Technical Data

• Browser type, device type

• IP address

• Session logs

• Error logs for debugging

​​

2.4 Optional Data

• Feedback submitted through forms

• Support requests

• Uploaded files (e.g., CSV imports)

​​

3. How We Use Data

We use data solely to provide and improve district‑approved services:

• Displaying dashboards, assessments, and analytics

• Generating student skill profiles

• Supporting district workflows

• Improving system performance

• Providing customer support

• Ensuring security and preventing misuse

We do not sell data, share data for advertising, or use student data for marketing.

​

4. Data Ownership

• Districts own all student data.

• G10 Innovations acts as a school official under FERPA.

• We process data only according to district instructions.

​​

5. Data Sharing

We share data only with:

• District‑authorized users (teachers, admins)

• Approved subprocessors required to operate the service (e.g., hosting, email delivery)

• Law enforcement only when legally required and with district notification when permitted

We maintain a current list of subprocessors upon request.

​

6. Data Storage & Security

We use industry‑standard security practices, including:

• Encryption in transit (TLS 1.2+)

• Encryption at rest (AES‑256)

• Role‑based access controls

• Audit logging

• Secure hosting with redundancy and backups

• Annual security reviews

​​

7. Data Retention & Deletion

• Data is retained only as long as the district contract remains active.

• Upon district request, we delete or export student data within 30 days.

• Backups purge automatically on a rolling schedule.

​​

8. COPPA Compliance

G10 Innovations does not create direct student accounts.
All student data is provided and controlled by the district, consistent with COPPA’s “school consent” model.

​

9. Cookies & Tracking

We use minimal cookies for:

• Authentication

• Session management

• Security

We do not use advertising cookies.

​

10. Your Rights

Districts may:

• Request data export

• Request data deletion

• Review or audit our security practices

• Request a list of subprocessors

Parents may request access through their district.

​

11. Contact

G10 Innovations, LLC
Hartford, WI
Email: privacy@g10innovations.com

​

G10 Innovations — Data Protection Addendum (FERPA‑Aligned)

Last Updated: May 2026

​

This Data Protection Addendum (“DPA”) forms part of the agreement between G10 Innovations, LLC (“Processor”) and the contracting school district (“District”).

​

1. Definitions

• “Student Data”: Any information relating to an identifiable student provided by the District.

• “FERPA”: Family Educational Rights and Privacy Act.

• “School Official”: G10 Innovations acts as a school official with legitimate educational interest.

​​

2. Data Ownership

• The District retains full ownership and control of Student Data.

• G10 Innovations receives Student Data solely to provide contracted services.

​​

3. Permitted Use

G10 Innovations may use Student Data only to:

• Provide, maintain, and improve the platform

• Support district‑authorized users

• Ensure system security

• Comply with legal obligations

No other use is permitted.

​

4. Prohibited Use

G10 Innovations will not:

• Sell Student Data

• Use Student Data for targeted advertising

• Build personal profiles unrelated to educational purposes

• Share Student Data with unauthorized parties

​​

5. Subprocessors

• G10 Innovations may use subprocessors for hosting, email delivery, and analytics.

• All subprocessors must meet or exceed our security standards.

• The District may request a current list at any time.

​​

6. Security Controls

G10 Innovations maintains:

• Encryption at rest and in transit

• Role‑based access controls

• Multi‑factor authentication for admin access

• Audit logging

• Regular penetration testing

• Secure development practices

​​

7. Breach Notification

In the event of unauthorized access to Student Data:

• G10 Innovations will notify the District within 72 hours of confirmation.

• Notification will include scope, impact, and remediation steps.

• G10 Innovations will cooperate fully with district investigations.

​​

8. Data Retention & Deletion

• Student Data is retained only for the duration of the contract.

• Upon termination or district request, G10 Innovations will delete or return all Student Data within 30 days.

• Backups purge automatically on a rolling schedule.

​​

9. Data Access

• Only district‑authorized users may access Student Data.

• G10 Innovations employees may access data only when necessary for support or maintenance and only under strict controls.

​​

10. Compliance

G10 Innovations agrees to:

• Act as a FERPA school official

• Support COPPA compliance

• Follow applicable state student data privacy laws

• Participate in district audits upon reasonable notice

​​

11. Governing Law

This DPA is governed by the laws applicable to the District.

​

12. Signatures

Executed by authorized representatives of both parties.

​