Privacy
Privacy policy
What we do with your information, in plain words. The full policy is one click away and nothing here contradicts it.
We never sell student information.
Not to anyone, not to advertising networks, not for targeted advertising, and not inside a bundle of "anonymised" data. There is no version of this product where a student record is a commodity, because there is no advertising business here to sell it to. If PlannedQuest is ever sold, whoever buys it is bound by this same promise.
Read the clause this comes fromNo advertising pixels, no session replay, no marketing trackers.
The platform loads no Meta Pixel, no Google Analytics, no TikTok tracking, no Hotjar, no PostHog, no Mixpanel, and no session recorder. One privacy-preserving tool counts page views in aggregate, and that is the whole list. This is not only a policy: the site instructs your browser to refuse any script we did not send, so a tracker could not be added quietly, even by mistake.
Read the clause this comes fromNothing you do here is sent to an AI model.
Not to train one, and not to answer you with one. Your saved careers, plans, portfolio and written reflections never leave our systems for a model provider, for any reason. Where the site shows you career or college matches, that is arithmetic on rules we can show you, not a model forming an opinion about you.
Read the clause this comes fromYour school owns the student record. We hold it for them.
For a school-provided account we act as a school official under FERPA, on your district’s instructions. The district decides who may see a record, the district can ask us to delete it, and the district can take it back at any time. Requests to see or correct a school record go through your school, because the record is theirs and they can confirm who you are.
Read the clause this comes fromWho can see a student’s work is decided by role, not by chance.
A teacher sees their classes. A counsellor sees their caseload. A parent sees their own child, once the school has linked and verified them. Every request is re-checked on our servers against your live role, not against anything your browser claims, so nobody reaches a student record by guessing a web address.
Read the clause this comes fromWe never ask about immigration status, and the product cannot be configured to.
Immigration status and English-learner status are blocked in the software itself, on the server, on the way in and on the way out. There is no school setting that turns them on, and no administrator who can. We would rather not hold something a student could be harmed by.
Read the clause this comes fromThere is no cookie banner because there is nothing to consent to.
A banner exists to ask permission for optional tracking. We set none, so there is nothing to ask you about. We use first-party cookies only for signing you in, keeping you signed in across tabs, and remembering your settings. If that ever changes we will update this page and ask before turning anything on.
Read the clause this comes fromEverything we publish
Nothing below is a link unless the document exists. 3 are in progress and say so.
- The full privacy policy
- Students, families and schools, in full
- Cookies and browser storage
- Who processes data for us
- How to make a privacy request
- Change history
- HECVAT 4.1.6 vendor self-assessment for institutional review (not a certification) Available on request
- Data processing addendum (DPA) Available on request
- California Student Data Privacy Agreement Available on request
- Security packet for district review Available on request
- Published retention schedule In progress
- SOC 2 report In progress
- Independent privacy certification In progress