Privacy Policy

Our role

IS3 is a K-12 student-support platform operated by Innovated Solutions (“Innovated Solutions,” “we,” “us,” or “our”) and provided to schools and districts (“Schools”). We provide IS3 under the direction of the School and act as a “school official” with a legitimate educational interest under FERPA, and as a service provider under California’s Student Online Personal Information Protection Act (SOPIPA) and AB 1584 (Education Code § 49073.1).

The School controls its data; we process it only to provide the service. Where a signed agreement (such as a Data Privacy Agreement) exists between Innovated Solutions and a School, that agreement governs and controls over this Policy with respect to student data.

1. Who this Policy covers

This Policy applies to authorized staff and administrators, to parents and guardians granted portal access, and to students whose records are managed by their School. IS3 is not directed to or used directly by children, and we do not knowingly collect personal information directly from children.

2. Information we collect

We collect the following categories of information:

• Account information for authorized staff and parents (name, email, role, and login credentials).
• Student education records provided by the School or its student information system: identifiers, demographics, enrollment, attendance, grades, special-education records (IEP and Section 504), MTSS/intervention records, expanded-learning (ELOP) participation, and related documents.
• Parent and guardian contact information provided by the School.
• Technical and usage data needed to operate the service securely, such as log data, IP address, device/browser information, and an audit trail of actions taken in the platform.
• IS3 contains no third-party advertising or analytics SDKs, and we do not use cross-site tracking technologies.

3. How we use information

We use personal information solely to provide, maintain, secure, support, and improve IS3 for the School’s educational purposes. This includes delivering the modules a School uses (for example MTSS/SST, IEP, Section 504, interventions, ELOP, and student-information-system integration), authenticating users and enforcing access controls, sending communications the School configures (such as consent and notification emails or SMS), maintaining security and audit logs, and complying with law and the School’s instructions.

4. What we do not do

Consistent with SOPIPA and AB 1584, we do not:

• sell student personal information;
• use or disclose student information for targeted advertising;
• build a profile of a student except in furtherance of the School’s educational purposes; or
• use student information for any commercial purpose unrelated to providing IS3.

5. How we share information

We share personal information only:

• with the School or District that controls the data, and as the School directs;
• with service providers that perform functions on our behalf — in the categories of cloud hosting and storage, email and SMS delivery, video meetings and recording, transcription, and student-information-system / state-reporting integration. These providers are bound by contract to protect the information, to use it only to provide services to us, and not to sell it or use it for their own purposes. A current list of service providers is available to Schools on request at privacy@innovatedsolutions.ai;
• to comply with law or legal process, or to protect the rights, property, or safety of students, Schools, or others; and
• in connection with a corporate transaction such as a merger or acquisition, subject to the commitments in this Policy.

6. FERPA and parent/guardian rights

Education records belong to the School and the families it serves. Parents and eligible students may inspect, request copies of, and request amendment of education records, and may control the disclosure of directory information, through their School. IS3 supports Schools in fulfilling these rights and routes such requests through the School. Please direct rights requests to your School; we will assist the School as needed.

7. Children’s privacy (COPPA)

IS3 is a tool for Schools and authorized adults. We do not provide direct-to-student accounts or knowingly collect personal information directly from children under 13. Any student information is provided by the School in the educational context, consistent with COPPA’s school-consent framework.

8. Data security

We protect personal information with administrative, technical, and physical safeguards. These include encryption of data in transit; encryption at rest for stored documents and sensitive credentials; role-based access controls and least-privilege access; tenant isolation so one School’s data is not accessible to another; and audit logging of access to records. No method of transmission or storage is perfectly secure, but we work continuously to strengthen these protections.

9. Data retention and deletion

We retain personal information for as long as needed to provide IS3 to the School and as required by applicable record-retention laws, including California Education Code timelines. We delete or return personal information at the School’s direction or upon termination of the School’s agreement, except where retention is required by law.

10. Data breach

We maintain procedures to detect, respond to, and remediate security incidents. In the event of a breach involving personal information, we will notify the affected School without undue delay so the School can meet its obligations under FERPA and California law (including California Civil Code § 1798.29), and we will cooperate with the School’s response.

11. Changes to this Policy

We may update this Policy. For material changes affecting student information, we will provide notice to Schools. The “Last updated” date above reflects the latest revision.

12. Contact us

Innovated Solutions — privacy@innovatedsolutions.ai — innovatedsolutions.ai. Parents and students: please contact your School for record requests; we will support your School in responding.