AccelEye Data Privacy and Security Compliance
We take data privacy and security seriously
AccelEye’s Artificial Intelligence (AI) Ethics & Principles
AccelEye recognizes the transformative potential of artificial intelligence in technology and business. We are committed to the responsible and ethical use of AI, ensuring that our solutions maximize benefits while serving our customers’ best interests. Our AI ethics framework aligns with our core values and professional standards, building trust with our clients, communities, and regulatory authorities.
We uphold our commitment to act in the public interest, respect public trust, and demonstrate professional excellence in all AI implementations.
For more information, please see our Responsible Use of AI Policy.
Children’s Online Privacy Protection Act (COPPA)
Effective Date of Current Compliance: June 23, 2025 (2025 Amendments)
The Children’s Online Privacy Protection Act (COPPA) applies to the online collection of personal information from children under 13 years of age by persons or entities under U.S. jurisdiction. COPPA requires verifiable parental consent for the collection, use, or disclosure of personal information from children.
AccelEye’s COPPA Compliance
AccelEye complies with COPPA and the 2025 amendments to ensure the online safety of children. Student accounts are provided exclusively through verified educators, schools, or educational organizations. Educators agree to obtain appropriate parental permission before issuing accounts to students.
Read AccelEye’s Complete COPPA Notice
Our COPPA Commitments
Data Collection:
- We will NOT collect online or offline contact information without consent from a parent, qualified educator, or educational institution
- We will NOT collect personally identifiable information without proper authorization
- We expand “personal information” to include biometric identifiers (fingerprints, voiceprints, facial recognition data) as required by the 2025 amendments
Data Use and Disclosure:
- We will NOT distribute personally identifiable information to third parties without prior parental consent
- We will NOT use or disclose student information for behavioral targeting of advertisements
- We will NOT build personal profiles of students except for authorized educational or school purposes
- We require separate opt-in parental consent before sharing children’s data for targeted advertising
Data Protection (2025 Requirements):
- We maintain a comprehensive written Information Security Program with administrative, technical, and physical safeguards protecting children’s data
- We retain children’s personal information only for the minimum time necessary to fulfill collection purposes
- We implement secure data disposal procedures when retention is no longer required
Incentives:
- We will NOT entice children to divulge more information than necessary by offering special games, prizes, or activities
Family Educational Rights and Privacy Act (FERPA)
The Family Educational Rights and Privacy Act (FERPA) is a federal law protecting the privacy of student education records. FERPA applies to all schools receiving funds under applicable U.S. Department of Education programs.
AccelEye’s FERPA Compliance
Although FERPA applies to schools rather than vendors, AccelEye may be designated as a “School Official” under FERPA. In this capacity, we comply fully with FERPA requirements and protect the privacy of student information entrusted to us by school districts.
Key Commitments:
- School districts maintain control of all student data; we operate under their direction
- We support parents’ and eligible students’ rights to access, inspect, review, and rectify student records
- We respond to verified written requests from school districts within required timeframes
- We implement appropriate security measures to protect education records
Important Note: AccelEye has no direct contact with students or parents. All interactions occur through authorized school officials.
New York Education Law 2-D
New York Education Law § 2-d, effective April 2014, protects the privacy and security of personally identifiable information (PII) of students, classroom teachers, and principals.
AccelEye’s NY Education Law 2-D Compliance
AccelEye complies with NY Education Law 2-D and the Parents’ Bill of Rights for Data Privacy and Security.
Required Protections:
- Student PII cannot be sold or released for commercial purposes
- Parents have the right to inspect and review their child’s complete education records
- We implement industry-standard safeguards including encryption, firewalls, and password protection when storing or transferring student PII
- We provide timely breach notification in accordance with applicable laws and regulations
- We address parental complaints about possible data breaches
- Our staff handling PII receive training on federal and state laws, policies, and industry best practices
- Our contracts with educational agencies address all statutory and regulatory data privacy and security requirements
Student Data Privacy Consortium (SDPC) and National Data Privacy Agreement (NDPA)
The SDPC’s National Data Privacy Agreement (NDPA) streamlines contracting between schools/districts and marketplace providers while establishing common data privacy expectations.
AccelEye’s SDPC/NDPA Participation
- AccelEye works with school districts in all participating states to execute Data Processing Privacy Agreements
- School districts interested in signing the SDPC/NDPA with AccelEye should contact: privacy@acceleye.com
- The SDPC represents a unique collaboration among schools, districts, regional agencies, territories, state agencies, policymakers, trade organizations, and marketplace providers addressing real-world, implementable solutions to data privacy concerns
California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)
Effective Date: January 1, 2023 (CPRA)
Latest Amendments: 2025
The California Privacy Rights Act (CPRA) amends and significantly expands the California Consumer Privacy Act (CCPA). CPRA protects personal data of California employees (B2E), business-to-business (B2B) contacts, and California residents.
Who CPRA Protects
Any individual who is:
- A California resident employee
- A service provider, vendor, contractor, consultant, applicant, freelancer, or remote worker reasonably identifiable as a California resident
California Employee & B2B Data Rights
Right to Know: Employees, contractors, and service providers have the right to know what personal data is collected and managed, including access to “specific pieces of personal information”
Right to Access: Individuals may submit Data Subject Access Requests (DSARs) for their information, subject to limited exceptions
Right to Limit Use and Disclosure: Individuals may request businesses limit or stop using and disclosing sensitive personal information
Right to Correct: Individuals may request correction of inaccurate information
Right to Opt-Out: Individuals may opt out of having personal information sold or shared
Right to Non-Retaliation: Individuals cannot be retaliated against for exercising any data rights
AccelEye’s CCPA & CPRA Compliance Program
Data Subject Access Requests:
Data subjects may exercise their rights by contacting our Privacy Team: privacy@acceleye.com
Data Mapping:
We maintain comprehensive mapping, inventory, and classification of all personal data
Data Minimization:
We process only data that is adequate, relevant, and limited to what is necessary for specified purposes
Data Retention Policies:
We implement data retention policies across all products and processes, retaining data only as long as reasonably necessary to fulfill processing activities
Privacy Impact Assessments:
We conduct risk assessments of all products and processes to ensure privacy and security by design
AI-Specific Protections (AB 1008):
We comply with expanded CCPA requirements for generative AI systems, ensuring AI systems adhere to the same privacy protections governing other data storage, processing, and use
Neural Data Protection (SB 1223):
We protect “neural data” (information generated by measuring central or peripheral nervous system activity) as sensitive personal information
Transaction Compliance (AB 1824):
We maintain consumer opt-out preferences through mergers, acquisitions, bankruptcy, or other transactions
Document Version: 2.0
Last Updated: October 18, 2025
Next Review Date: April 18, 2026
This document is maintained by (Accelx Inc.) AccelEye’s Legal and Privacy Team and is reviewed quarterly for compliance with evolving regulations.
