Privacy policy and user agreement

The easyCBM Privacy Policy and User Agreement can be found on the homepage of easycbm.com.by clicking on the Privacy link.

Use Agreement and Privacy Policy

easyCBM Lite and Teacher Deluxe Editions ("the Service") are web-based benchmark and progress monitoring reporting services that permit easyCBM assessment data and administrative data (collectively "Data") to be collected and used to generate automated reports for up to 200 students. These tools are designed to give educators insight into which of their students may need additional instructional supports as well as to provide a means by which they can measure the effectiveness of their teaching.

The easyCBM system was developed by Behavioral Research and Teaching ("BRT"), a research unit in the College of Education at the University of Oregon ("UO"), in collaboration with school district partners across the United States.

The person to whom an account is registered (the "Account Holder") acknowledges and agrees that the Service may only be used for students the Account Holder, or the educator for whom they have created the account, is directly responsible for supporting. Accounts within the Service may not be used for building or district use across multiple educators. The Account Holder understands that information from the Service must be supplemented with other information and professional judgment in making educational decisions.

Ownership of Data

All Data entered into the Service remain the sole property of the educational agency to which it belongs, if any, or otherwise of the Account Holder. The Account Holder retains exclusive control over Data, including determining who may access Data and how it may be used for legitimate authorized purposes. UO maintains the Data on secure servers. Access to Data is password protected, and it is the Account Holder's responsibility to maintain security for the account's username and password. UO does not release the Data without the Account Holder's written permission, except as required by law, regulation, subpoena, or administrative process. UO does not sell, share, rent, or trade Data with any third parties other than as disclosed within this privacy policy.

The Account Holder grants UO the right to use Data solely for the purposes of providing customer support and administering, improving, and maintaining the Service.

Term, Termination, and Renewal

The Account Holder may, at any time, choose to delete their account and all Data linked to the account. Upon making and confirming that request, the account's username will be purged from the Service immediately and all Data linked to the account will be deleted within 30 days. Unless Data are requested to be deleted, Data will remain available until the account has been inactive for at least 18 months and no more than 24 months, at which point they will be deleted within 30 days. Deleted Data cannot be recovered.

Privacy

The protection of student and staff personal information is critical to BRT's work. As such, BRT has endorsed the Student Privacy Pledge 2020, a strong set of commitments drafted with the involvement of educational non-profit groups, the Software & Information Industry Association, and public sector educational leaders. As part of a public research university, BRT is ineligible to be a signatory to the pledge but has committed to following each aspect of the pledge completely. This privacy statement outlines BRT’s commitments, and the steps BRT takes to ensure that personally identifiable information ("PII"), including PII related to students ("Student PII"), remains private.

As per the Student Privacy Pledge 2020, BRT commits to the following policies for Data entered into the Service:

We will not collect, maintain, use or share Student PII beyond that needed for authorized educational/school purposes, or as authorized by the parent/student.
We will not sell Student PII.
We will not use or disclose student information collected through an educational/school service (whether personal information or otherwise) for behavioral targeting of advertisements to students.
We will not build a personal profile of a student other than for supporting authorized educational/school purposes or as authorized by the parent/student.
We will not make material changes to School Service Provider education privacy policies without first providing prominent notice to the users and/or account holder(s) (i.e., the institution/agency, or the parent/student when the information is collected directly from the student with student/parent consent) and allowing them choices before data is used in any manner inconsistent with terms they were initially provided; and not make material changes to other policies or practices governing the use of Student PII that are inconsistent with contractual requirements. Note: For easyCBM Lite/Deluxe, the phrase 'School Service Provider education privacy policies' refers to this Use Agreement and Privacy Policy.
We will not knowingly retain Student PII beyond the time period required to support the authorized educational/school purposes, or as authorized by the parent/student. Note: Data including Student PII will be deleted following the policy described in the Term, Termination, and Renewal section of the easyCBM Use Agreement and Privacy Policy.
We will collect, use, share, and retain Student PII only for purposes for which we were authorized by the educational institution/agency, teacher or the parent/student.
We will disclose clearly in contracts or privacy policies, including in a manner easy for institutions and parents to find and understand, what types of Student PII we collect, if any, and the purposes for which the information we maintain is used or shared with third parties.
We will support access to and correction of Student PII by the student or their authorized parent, either by assisting the educational institution in meeting its requirements or directly when the information is collected directly from the student with student/parent consent. Note: Parents, guardians, or students may review and request changes to such data by communicating with the appropriate Account Holder (i.e., the student's teacher, school, or other educational institution).
We will maintain a comprehensive security program that is reasonably designed to protect the security, confidentiality, and integrity of Student PII against risks—such as unauthorized access or use, or unintended or inappropriate disclosure—through the use of administrative, technological, and physical safeguards appropriate to the sensitivity of the information.
We will provide resources to support educational institutions/agencies, teachers, or parents/students to protect the security and privacy of Student PII while using the educational service.
We will require that our vendors with whom Student PII is shared in order to deliver the educational service, if any, are obligated to follow these same commitments for the given Student PII.
We will allow a successor entity to maintain the Student PII, in the case of our merger or acquisition by another entity, provided the successor entity is subject to these same commitments for the previously collected Student PII.
We will incorporate privacy and security when developing or improving our educational products, tools, and services and comply with applicable laws.

Student Personally Identifiable Information (Student PII)

easyCBM collects Student PII solely for the authorized educational purposes described in this agreement, and never discloses that information to third parties without the Account Holder's written permission, except as required by law, regulation, subpoena, or administrative process. Student PII includes direct identifiers, which can be used to identify a specific student, and indirect identifiers, which can be combined with other information to identify a specific student. The following Student PII is collected:

Direct Identifiers

Student Name - Link the student with their results to track their progress.
Student ID - Link the student with their results to track their progress.

Indirect Identifiers

Birthdate - Help link the student with their results to track their progress.
Gender - Help organize and analyze results by different subgroups.
Special Education Status - Help organize and analyze results by different subgroups.
Ethnicity - Help organize and analyze results by different subgroups.
Race - Help organize and analyze results by different subgroups.
English Language Learner Status - Help organize and analyze results by different subgroups.

Account Holder Information

UO collects the Account Holder's information, including identifiable information such as name and email address, for the purpose of administering and maintaining the account. Email addresses may also be used to inform Account Holders of other BRT products and services. Email addresses will never be given or sold to a third party or used for any purpose other than as described in this Use Agreement and Privacy Policy.

UO collects additional information for easyCBM Deluxe accounts for billing purposes. Billing information is maintained under a separate UO e-Commerce Privacy Statement and other record retention policies and is excluded from the terms of this easyCBM Use Agreement and Privacy Policy.

Security

UO follows strong security procedures for the protection of student data, and the Service is built to comply with the Family Educational Rights and Privacy Act (FERPA) to preserve the confidentiality, integrity, and availability of Student PII. easyCBM provides educational institutions and agencies with tools to manage, enforce, and comply with the provisions of FERPA.

Data are stored on secure servers and are encrypted both at rest and in transit. UO provides access to Data for authorized easyCBM personnel solely for the purposes described in this Use Agreement and Privacy Policy. All easyCBM personnel with access to Student PII must first receive training on data security and privacy.

Data Breach Policy

In the event of a confirmed data breach, UO will take immediate steps to determine the scope of the breach. If UO determines that the breach impacts Student PII or other Account Holder information, UO will notify affected Account Holders within 3 business days of making that determination.

Risk and Disclaimers

The Account Holder acknowledges that the Service is solely an education information resource and is made available 'AS IS,' without obligation by UO to provide accompanying services or support. Account Holder acknowledges and agrees that the information obtained from the Service is intended as a supplement to, and not a substitute for, professional judgment in making decisions to adjust and enhance the opportunity to learn.

The easyCBM measures were developed using Standards for Educational and Psychological Testing (2014) and through a research program on student risk indicators and instructional decision-making using progress monitoring. However, UO makes no representations or warranty on the accuracy, validity, completeness, or availability of information or results obtained from the Service. UO reserves the right to conduct further research on easyCBM to inform and make modifications or improvements at any time without notice.

Use of the Service does not permit the use of UO names, identifiers, or marks in advertising with other products.

UO AND BRT EXPRESSLY DISCLAIM ANY AND ALL WARRANTIES REGARDING THE SERVICE, WHETHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES PERTAINING TO MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. UO AND BRT WILL NOT BE LIABLE DIRECTLY OR INDIRECTLY FOR ANY PROPERTY DAMAGE, PERSONAL INJURY, LOSS OF USE, INTERRUPTION OF BUSINESS, LOSS OF PROFITS, OR OTHER SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES, HOWEVER CAUSED, WHETHER FOR BREACH OF WARRANTY, CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY OR OTHERWISE. (Some jurisdictions do not allow the exclusion or limitation of incidental or consequential damages, so this exclusion and limitation may not apply to you).