FERPA Data Handling Notice

About This Notice

The Family Educational Rights and Privacy Act (FERPA) is a federal law that protects the privacy of student education records. This notice explains how EduAI handles student education records and the rights of parents and eligible students.

What Are Education Records?

Education records include any records directly related to a student that are maintained by an educational agency or institution, or by a party acting for the agency. In EduAI, education records include: student names and contact information, grades and test scores, attendance records, learning style assessments, and teacher notes and observations.

EduAI’s Role Under FERPA

EduAI operates as a “school official” with a “legitimate educational interest” in student records. This means we provide institutional services or functions that the school would otherwise provide itself. We are under the direct control of the school regarding the use and maintenance of education records. We use education records only for the purposes for which access was granted. We are subject to FERPA requirements governing the use and re-disclosure of personally identifiable information.

Rights of Parents and Eligible Students

Under FERPA, parents and eligible students (18 or older) have the right to:

Inspect and Review: You may request to inspect and review your child’s (or your own) education records stored in EduAI. We will respond to requests within 45 days.

Request Amendment: You may request that education records be amended if you believe they are inaccurate, misleading, or in violation of your privacy rights. We will respond to amendment requests within 30 days.

Consent to Disclosure: Generally, schools must have written permission from a parent or eligible student to release any information from a student’s education record. FERPA allows schools to disclose records, without consent, to school officials with legitimate educational interest, which includes authorized use of EduAI.

Request Deletion: You may request the deletion of your child’s education records. Deletion requests will be processed within 30 days, subject to any legal retention requirements.

How We Protect Student Data

EduAI implements the following safeguards to protect student education records: data encryption in transit and at rest; role-based access control ensuring only authorized educators can view their students’ records; comprehensive audit logging of all access to student records; automatic session timeouts after periods of inactivity; regular security assessments and monitoring; data minimization practices (collecting only what is necessary); and defined data retention and deletion policies.

For Educators Using EduAI

As an educator using EduAI, you agree to: only enter student data for which you have legitimate educational authorization; protect your account credentials and not share access; report any suspected data breaches immediately; comply with your institution’s FERPA policies; and cooperate with parent/guardian data access requests.

Data Breach Notification

In the event of a data breach involving student education records, we will notify affected educational institutions within 72 hours of discovery. We will cooperate with institutions in notifying affected parents and students as required by applicable law.

How to Exercise Your Rights

To inspect, review, amend, or request deletion of education records, contact your child’s teacher or school directly. They can process your request through EduAI’s data management tools. You may also contact us directly at: ferpa@eduai.app

Filing a Complaint

If you believe your FERPA rights have been violated, you may file a complaint with the U.S. Department of Education at: Family Policy Compliance Office, U.S. Department of Education, 400 Maryland Avenue SW, Washington, D.C. 20202-8520.