Derivita Privacy Policy

Last Updated: February 16, 2024


Derivita has prepared this Privacy Policy to describe our practices regarding the personal information that may be collected from users of any of our websites or apps which post this Privacy Policy, and other related services and which are offered to organizations and users outside the United States (“Services”). The use of personal information collected through our services shall be limited to the purposes described in this Privacy Policy.

IMPORTANT NOTICE FOR USERS:

This Privacy Policy does not govern the collection, use, or disclosure of personal information through the Service by the educational institution which has given you (or your child) access to the service, or which is providing a course you are taking via the Services. Please contact this organization to better understand its privacy practices. Derivita will retain personal information we process on behalf of organizations or as long as needed to provide services and as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

 

Data You Provide to Us.

We collect information from you, such as first and last name, gender, e-mail and mailing addresses, professional title, company name, and password when you create an account to log in to our network. If you order Services on our website or apps, you provide us or our third party payment processor with information necessary to complete the transaction, which may include your name, credit card information, billing information, and shipping information. We also may retain information on your behalf, such as files and messages that you store using your account. If you provide us feedback or contact us via e-mail, we will collect your name and e-mail address, as well as any other content included in the e-mail. When you participate in one of our surveys, we may collect additional profile information. We also collect other types of personal information and demographic information that you provide to us voluntarily.

 

Data Collected via Technology.

To make our Services more useful to you, our servers (which may be hosted by a third party service provider) collect information from you, including browser type, operating system, Internet Protocol (IP) address (a number that is automatically assigned to your computer when you use the Internet, which may vary from session to session), domain name, unique device identifiers, information about how you use our Services and/or a date/time stamp for your visit. We also use cookies and web beacons (as described below) and navigational data like Uniform Resource Locators (URL) to gather information regarding the date and time of your visit and the solutions and information for which you searched and which you viewed. Like most Internet services, we automatically gather this data and store it in log files each time you use our Services.

 

In accepting this Privacy Policy, you consent to our placement and continued use of cookies on your device. To learn more about cookies, including how to delete cookies, please visit http://www.allaboutcookies.org/.

 

“Cookies” are small pieces of information that a website sends to your computer’s hard drive while you are viewing a website. We may use both session cookies (which expire once you close your web browser) and persistent cookies (which stay on your computer until you delete them) to provide you with a more personal and interactive experience on our websites. 

 

“Web beacons” are digital images we use to log information on our websites and in our emails. We use web beacons to manage cookies, count visits, and to learn what marketing works and what does not. We also use web beacons to tell if you open or act on our emails.

 

"Flash Cookies" are used to store your preferences such as volume control or to display content based upon what you view on our websites to personalize your visit. Third party partners who provide certain features on our websites, such as videos, may place Flash cookies on your device. They may use Flash cookies to track your web browsing activity and to display personalized advertising. Flash cookies are different from other cookies because of the amount of, type of, and way in which data is stored. Cookie management tools provided by your browser usually will not remove Flash cookies. To learn more about Flash cookies, who has placed Flash cookies on your device, and how to manage privacy and storage settings for Flash cookies click here: http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager.html#117118. We do not control the privacy practices of the third parties who place or track Flash cookies and this privacy policy does not cover their practices. You should visit the privacy policies of companies who place Flash cookies to understand their practices.

 

"Analytics" use cookies, script tags and scripts to collect and store information such as how users interact with our apps, browser and site performance metrics, errors users encounter when using our apps, device identifiers, how often users visit the websites, what pages they visit, and what other sites they used prior to coming to the websites. We use the information we get from Google Analytics only to improve our websites, our apps, and our Services. Please see the following links for more information about Google Analytics: http://www.google.com/privacy_ads.html, http://www.google.com/privacy.html, and http://www.google.com/analytics/tos.html. We do not tie the information gathered using third party analytics to your personal information.

 

"Targeting and Advertising Cookies" are cookies used to deliver adverts more relevant to you and your interests. They are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaigns. They are usually placed by advertising networks with the website operator's permission. They remember that you have visited a website and this information is shared with other organizations such as advertisers.

 

Your cookie choice.

  • Most web browsers are set to accept cookies by default. If you prefer, you can typically remove and reject cookies from our site via your browser settings. If you remove or reject our cookies, it will affect how our Services work.
  • You may also render some web beacons unusable by rejecting their associated cookies. If you choose to decline cookies, certain features of the Services that placed the cookie may not function properly or at all as a result.
  • If you do not wish us to track emails we send you, some email services allow you to adjust your display to turn off HTML or disable download of images which should effectively disable our email tracking, or you may unsubscribe from our marketing emails as described above.
  • You may opt out of tracking of certain information collected by Google Analytics, one of our analytics providers as discussed above, on the websites by clicking here. While we and others give you the choices described in this Privacy Policy, there are many ways web browser signals and other similar mechanisms can indicate your choice to disable tracking, and we may not be aware of or honor every mechanism. 

 

Blogs/Forums.

Our Services may offer a publicly accessible blog and community forums. You should be aware that any information you provide in these areas may be read, collected, and used by others who access them. Anytime you post on our blog please be aware that you may be posting using a third party application and we have no access or control over this information. Our privacy policy does not cover the practices of these third parties. Your interaction with these third party applications is governed by the privacy policy of the company providing it.

 

Testimonials.

We display personal testimonials of satisfied customers on our websites in addition to other endorsements. With your consent we may post your testimonial along with your name. If you wish to update or delete your testimonial, you can contact us at privacy@Derivita.com.

 

Use of Your Data.

Personal information you submit to us is used either to respond to requests that you make, or to aid us in serving you better. Derivita uses your personal information in the following ways: to create and maintain your account; to identify you as a user in our system; to notate and assign support tickets that you may initiate; to operate, maintain, and improve our Services; to personalize and improve your experience; to send you administrative e-mail; to respond to your comments or inquiries; to send you surveys, promotional communications about our products and services with your permission; to protect, investigate, and deter against fraudulent, unauthorized, or illegal activity; and to make telephone calls to you, from time to time, as a part of secondary fraud protection or to solicit your feedback with your permission. We may use data, which has been de-identified and aggregated, for additional purposes.

 

Disclosure of Your Personal Information.

We will share your personal information with third parties only in the ways that are described as follows or with your express consent.

 

Third Party Service Providers.

We may share your personal information with third party service providers for the sole purpose of providing you with the Services that we offer you through our websites. For example, we may share data with service providers who host our websites or provide email services on our behalf.


Educational institution or other Course Provider.

We will share your information with the educational institution or organization which is linked to your use of the Services. For example, this would apply:

  • If your educational institution uses our Services as a learning management platform and has given you access to the Services; or
  • If you are taking a course via the Services, where we will share your registration data and coursework data with the course provider.

 

Other Disclosures.

Derivita may disclose information about you if it believes such disclosure is necessary to (a) comply with laws or to respond to lawful requests and legal process; or (b) protect or defend the rights, safety, or property of Derivita, users of the Services, or any person including to enforce our agreements, policies, and terms of use, or (c) in an emergency to protect the personal safety of any person. We may also share de-identified and aggregated data with others for their own uses.

 

Social Networking Platforms.

We may allow you to connect and share information with certain social networking platforms (“Social Networking Platforms”) (e.g., a Facebook application). By choosing to use these Social Networking Platforms, you allow Derivita to share information with the Social Networking Platform. For example, you might use an application to publish Derivita related notices on your Facebook wall. If you do not want us to continue to provide your information to the Social Networking Platform, you may change your privacy settings in the Social Networking Platform. You can also access certain features of our websites using Social Networking Platforms. These services will authenticate your identity and provide you the option to share certain personal information with us such as your name, email address, and other personal information to pre-populate an application. We do not control the privacy practices of the Social Networking Platforms and sign-in services you choose to use and this privacy policy does not cover their practices, you should visit the privacy policies of any Social Networking Platform or sign-in service you choose to use to understand their practices.

 

Your Rights Regarding Your Personal Information:

 

Marketing Choices.

By accepting this Privacy Policy when submitting your personal information, you consent to us contacting you with newsletter and promotions by email. When you receive newsletters or promotional communications from us, you may “opt-out” by following the unsubscribe instructions provided in e-mails you receive from us or by contacting us directly at the contact information below. You do not have to provide us with any personal information, however if you do not do so we may not be able to provide the Services to you.

Changes to Personal Information.

You may change some of your personal information in your account by editing your profile within the Service. You can choose to delete your account (and so cancel the Service) through the Services. You may also request changes or deletions by e-mailing us at the e-mail address set forth below. We will respond to your request, when permitted by law, within 30 days. We will take all reasonable steps to correct your personal information. We will retain your information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

 

Security of Your Personal Information.

Derivita takes reasonable steps to help protect your personal information in an effort to prevent unauthorized access, use, or disclosure. Despite these measures, you should know that Derivita cannot fully eliminate security risks associated with personal information. No method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security. Any content you post while using the Services is at your own risk. If you have any questions about security on our websites or apps, you can contact us at the contact information set forth below.

 

Contact Information.

Derivita welcomes your comments or questions regarding this Privacy Policy.


Please e-mail us at privacy@Derivita.com or contact us at the following address: DERIVITA 50 W Broadway Suite 333, Salt Lake City, Utah 84101-2027

 

Changes to This Privacy Policy.

Derivita may change this Privacy Policy from time to time. If we make any changes to this Policy, we will change the "Last Updated" date above. If such changes are material, a notice of the changes will be posted along with the revised Privacy Policy. We encourage you to visit this page from time to time for the latest on our privacy practices.

Rev. 2.16.24

Derivita Privacy Policy

Last Updated: July 11, 2025


Key Takeaways

  • We're committed to protecting the privacy of all our users, especially students.
  • We comply with COPPA, FERPA, PPRA, and other relevant laws.
  • We collect and use student data for educational purposes only.
  • We don't share student data with third parties for marketing or advertising.
  • We take strong measures to protect student data.
  • Parents and schools have rights to access and correct student data.


1. Introduction


Derivita, Inc. (“Derivita’) is committed to protecting the privacy of its users, including the privacy of student data. This Privacy Policy describes how Derivita collects, uses, and shares personal information for two types of users: 1. Users of our public websites, 2. Users of our Derivita Platform and related services (“Platform Services”). In some cases, where an educational institution has integrated our Platform Services, they may require their students to purchase access to course materials directly from Derivita; this method of purchasing access does not change how this policy applies..


Derivita provides Platform Services to schools and educational institutions. In doing so, we may collect and process student data. We understand the importance of protecting student privacy and comply with the Children's Online Privacy Protection Act (COPPA), the Family Educational Rights and Privacy Act (FERPA), the Protection of Pupil Rights Amendment (PPRA), and other applicable laws.


 

2. Information We Collect


a) Public Website Visitors:

When you visit our public website, we may collect information about your visit, such as your IP address, browser type, operating system, and the pages you viewed. We may use cookies and similar technologies to collect this information. This information is used to improve our website and marketing efforts.


b) Customer and Student Data of Platform Services users:

When students, schools or educational institutions use our Platform Services, we may collect and process student data. The types of student data we may collect include:

  • Directory Information: This may include student names, which are typically considered directory information under FERPA.
  • Demographic Information: We process the demographic data that schools choose to provide, which may include information used for grouping and filtering reports.
  • Enrollment information: Courses, teacher names, school name.
  • Academic performance data: This includes data on homework, quizzes, and exams delivered using the Platform Services.
  • Usage data: How students use our products and services.
  • Student email addresses: We may use student email addresses (if provided by the school) for identification, data correlation, and facilitating communication between students and teachers.
  • Payment Data: In some cases, students purchase a subscription to the Platform Services directly from us. In that case, we use Stripe, a third-party payment processor, to process payments. When a user makes a payment, we share transaction information and necessary billing details with Stripe to complete the transaction. Derivita may retain records of transactions but does not store full credit card numbers. Stripe's security and privacy practices can be found here: https://stripe.com/privacy. We take steps to comply with applicable PCI DSS requirements to protect payment information.


We collect student data solely for legitimate educational purposes, such as improving our products and services, providing personalized learning experiences, and supporting student academic progress.


c) Product Usage Data:

When you visit our public websites or use our Platform Services, we may collect information about your usage, such as the features you use, the actions you take, and the content you create. This information is used to improve our products and services.

 

3. How We Use Your Information


a) Public Website Visitors:

We may use the information we collect from public website visitors to:

  • Improve our website and marketing efforts.
  • Respond to your inquiries.
  • Provide you with information about our products and services.


 b) Customer and Student Data of Platform Services users:

We use customer and student data to:

  • Provide and improve our Platform Services.
  • Personalize learning experiences.
  • Support student academic progress.
  • Provide reports and analysis to educators.
  • Conduct research and development.
  • Comply with legal obligations.


c) Product Usage Data:

We use product usage data to:

  • Improve our products and services.
  • Develop new features.
  • Troubleshoot issues.


4. How We Share Your Information


a) Public Website Visitors:

We may share information about public website visitors with third-party service providers who assist us with our marketing efforts.


b) Customer and Student Data of Platform Services users:

We may share customer and student data with:

  • Schools and Educational Institutions: We share student data with the schools and educational institutions that use our Platform Services.
  • Subprocessors: We may use subprocessors (sometimes referred to as subcontractors) to provide certain services, such as data hosting, storage, and processing. We take steps to ensure that any subprocessors maintain the same level of privacy and security standards as Derivita. Our primary subprocessor for hosting, storage, and processing customer data is Google Cloud Platform, a leading provider of cloud computing services with robust security and privacy practices. You can learn more about Google Cloud's privacy policy here: https://cloud.google.com/terms/cloud-privacy-notice.
  • Other Third Parties: We may share customer and student data with other third parties when required by law or legal process.


We will not share student data with any third parties for marketing or advertising purposes.


 5. Data De-identification


Derivita may use de-identified data for product development, research, and other purposes. De-identification involves removing all direct and indirect personal identifiers, including but not limited to, name, ID numbers, date of birth, demographic information, location information, and school ID. Derivita will not attempt to re-identify de-identified data and will not transfer such data to any party unless that party agrees not to attempt re-identification.


6. Data Security


Derivita stores and processes data in accordance with industry best practices. This includes appropriate administrative, physical, and technical safeguards to secure data from unauthorized access, disclosure, and use. We maintain a written incident response plan, which includes prompt notification of the affected school district(s) in the event of a security or privacy incident.


7. Data Retention and Deletion


Derivita will retain customer and student data of the Platform Services for as long as necessary to provide the services and as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Upon valid request by a school or educational institution, or a student who purchased the Platform Services directly from us, Derivita will delete student data when it is no longer needed for the purposes for which it was collected.


8. Your Rights


a) Public Website Visitors:

You may opt out of receiving marketing communications from us by following the unsubscribe instructions provided in the emails you receive from us.


b) Educational Institutions and Parents of Platform Services users:

Educational institutions using our Platform Services have the right to access, review, and correct inaccuracies in student data. Parents or guardians should direct any requests regarding student data to the applicable educational institution, as Derivita works with and validates requests through the institution. Individual students who directly purchase access to course materials through Derivita also have the right to access, review, and correct their own data.


9. Data Protection Agreements (DPAs)


Derivita typically enters into Data Protection Agreements (DPAs) with educational institutions that purchase the Platform Services. Such DPA will provide further details about the specific types of student data collected and processed, as well as how that data is handled, and the DPA may supersede some of the terms of this Privacy Policy.


10. Cookies and Similar Technologies


Derivita may use cookies and similar technologies to collect information about how you use our public websites and/or Platform Services, for authentication purposes, and to improve our products and services.


11. Data Location and International Users


a) Data Location:

All data collected by Derivita is processed and stored in the United States.


b) EU Marketing:

Derivita does not currently market its services to individuals or organizations in the European Union.


12. Contact Us


If you have any questions about this Privacy Policy, please contact us at:


Email: privacy@derivita.com


Mail:

Derivita

50 W Broadway Suite 333

Salt Lake City, Utah 84101-2027


13. Changes to this Privacy Policy


Derivita may update this Privacy Policy from time to time. If we make any material changes, we will notify you by email or by posting a notice on our website.


Revision History


Date of Revision: July 11, 2025


Summary of Changes:

Revised Privacy Policy to enhance clarity and transparency. No changes to actual privacy practices. Clarifications include:

  • Detailed explanations of student data handling
  • Emphasis on COPPA, FERPA, and PPRA compliance
  • Information on data security and incident response
  • Clearer explanation of parental and school rights