HS2C.Org Privacy Policy

Introduction

At HS2C.Org (“HS2C,” “we,” “us,” or “our”), we are committed to protecting the privacy and security of our users’ information, especially that of students and educators. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you interact with our platform and the HS2C Portal (the “Platform,” “Portal,” or “Service”). By using HS2C, you agree to the terms of this Privacy Policy. Our Service is designed for educators and educational institutions. We adhere to applicable student privacy laws, including the Family Educational Rights and Privacy Act (FERPA) and, where applicable, the Children’s Online Privacy Protection Act (COPPA).

Information We Collect

To provide our Service, we collect information in the following categories:

Account Information

When an account is created, we collect name, email address, and password. For educators, counselors, administrators, or sponsors, we may also collect role, institution/organization, and authorized permissions.

Student Data (FERPA-Protected)

We collect information about students provided by the educational institution, educators, parents/guardians, or students themselves under school or district authorization. This may include student names, grade level, academic progress, coursework, and graduation tracking (College Tracker), goal planning (Goal Tracker), Scholarship Guide completion, and school-related engagement data. We collect only the minimum information necessary to provide our Service.

User-Generated Content

When you interact with the Portal, we may collect inputs, notes, goals, plans, profile information, and other content you submit, as well as generated outputs and feedback.

Usage Data

We collect information about how you interact with the Service, such as features used, time spent, and activity logs relevant to role-based features (e.g., Counselor/Administrator actions for legitimate educational interests).

Technical Data

We collect technical data such as IP address, browser type, device information, operating system, and performance/diagnostic data to improve compatibility, performance, and security.

How We Use Your Information

We use the information we collect to:

• Provide and improve our Service and personalize user experience;
• Support user accounts, authenticate users, and manage role-based access;
• Analyze usage patterns to improve features, performance, and outcomes;
• Communicate about accounts, updates, or support inquiries;
• Maintain security, detect and prevent fraud or misuse, and enforce our Terms of Service;
• Comply with legal obligations and respond to lawful requests.

Information Sharing and Disclosure

We do not sell or rent personal information. We may share information only in the following circumstances:

Service Providers

With third-party service providers who assist with hosting, infrastructure, security, analytics, SIS integrations, and other operational functions. These providers are contractually required to protect information and use it only for the services we specify.

Authorized Educational Personnel and Parents/Guardians

With authorized school or district staff who have legitimate educational interests, and with parents/guardians who access their own student’s information through the Parent Portal.

Third-Party Integrations

With integrated systems (e.g., PowerSchool, Clever, ClassLink, Google Classroom) as directed or authorized by the district/school and governed by applicable contracts and data protection requirements.

Sponsors and Corporate Partners

We may share aggregate and de-identified analytics for program evaluation and sponsorship reporting. We do not disclose personally identifiable student information to sponsors.

Legal Compliance and Safety

When required to comply with law, regulation, subpoena, court order, or governmental request; or to protect the rights, property, or safety of HS2C, our users, or others.

Business Transfers

If involved in a merger, acquisition, or sale of assets, information may be transferred as part of the transaction subject to continuity of privacy commitments.

Data Retention and Deletion

We retain student and educational data only as directed by the applicable school or district or as required by law. Upon district instruction or contract termination, HS2C will delete or return student data in accordance with the applicable agreement and law. Other operational data may be retained or anonymized for security, audit, and product improvement purposes.

Deletion Requests: Parents/guardians or eligible students may request deletion of personal information by contacting us at privacy@hs2c.org. We may coordinate with the relevant school or district to validate and fulfill the request consistent with FERPA and contract requirements.

Security

We employ industry-standard safeguards appropriate to education data, including encryption in transit and at rest, role-based access controls, staff training, and incident response protocols. While we work hard to protect your information, no method of transmission or storage is 100% secure.

Access and Control

Parents/guardians and eligible students may request to review, correct, or delete personal information. To exercise these rights, contact privacy@hs2c.org. HS2C may first verify authorization with the relevant school or district to ensure requests comply with FERPA and local policy.

Third-Party Vendors and AI/Hosting Providers

HS2C partners with select infrastructure, database, analytics, and AI technology providers to operate and improve the Service. These vendors receive only the minimum information necessary to perform contracted services and are bound by confidentiality and data protection obligations. HS2C does not permit third-party vendors to use personally identifiable information for their own purposes, including model training or targeted advertising.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect operational, legal, or regulatory changes. We will post updates on the Portal with a revised Effective Date. Continued use of the Service after changes become effective constitutes acceptance of the updated policy.

International Data Transfers

HS2C is based in the United States. Data is stored and processed in the U.S. If you access our Service from outside the U.S., you acknowledge your information may be transferred to and processed in the U.S. in accordance with this Privacy Policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, contact:

Compliance with Student Privacy Laws (FERPA and COPPA)

FERPA: HS2C acts as a “school official” with a legitimate educational interest when processing Student Data on behalf of schools or districts and uses Student Data solely to provide the contracted services.

COPPA: HS2C does not permit children under 13 to create direct accounts. Student accounts are provisioned or authorized by schools/districts. If you believe a child under 13 submitted information directly to HS2C without school authorization or parental consent, contact privacy@hs2c.org and we will promptly address the issue.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you may have rights to access and delete personal information. HS2C does not sell personal information. To exercise your rights, contact privacy@hs2c.org. Where Student Data is involved, we may coordinate with your school or district consistent with FERPA and contractual commitments.

EU/EEA and UK Data Subjects (GDPR/UK GDPR)

If you are located in the EU/EEA or UK, you may have rights to access, correct, delete, restrict processing, or object to processing of personal information. To exercise these rights, contact privacy@hs2c.org. If your data was provided by a school or district, we may coordinate with that institution to process your request. You may also lodge a complaint with your local supervisory authority.

Age Restrictions

Our Service is intended for educational institutions, educators, and students using accounts authorized by schools/districts. If we become aware that we collected personal information from a child under 13 outside school authorization and without verifiable parental consent, we will take steps to delete it promptly.

Third-Party Links

The Service may contain links to third-party websites, products, or services. HS2C is not responsible for the privacy practices of those third parties. Review their privacy policies before providing personal information.

Updates to Your Information

To update or correct your information, contact privacy@hs2c.org or use your account settings, where available. For Student Data controlled by schools/districts, we may coordinate with the institution to process updates.

Data Usage Compliance (Single Sign-On and APIs)

HS2C’s use of information received from single sign-on or API providers (e.g., Google) will adhere to those providers’ user data policies, including any Limited Use requirements, as applicable.

Our Role as Processor; Not a Controller (When Acting for Districts)

When providing services to a school or district, HS2C acts as a data processor/school official under FERPA and similar laws, and is not a data controller with respect to Student Data. HS2C processes Student Data only on documented instructions from the school or district and consistent with applicable agreements.

Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Authenticate sessions and maintain security;
• Remember user preferences and accessibility settings;
• Measure and enhance performance.

You may disable cookies, but some features may not function properly. HS2C does not use third-party advertising cookies or cross-site tracking for targeted ads.

Sponsorship and Research Reporting

To support program evaluation and sponsorship initiatives, HS2C may provide aggregated, de-identified analytics that do not identify individuals. HS2C does not share personally identifiable student information with sponsors.