Privacy Policy

1. Who We Are

Qadras is an educational data management platform used by schools and districts to track student progress, manage class rosters, and facilitate communication between educators and families. The platform is operated under the direction of your school or school district, which acts as the data controller for student education records.

2. Information We Collect

Student Information

We collect information necessary to support educational services, including:

• Student name, date of birth, grade level, and school enrollment
• Academic assessment data and progress records
• Attendance, class assignments, and teacher notes
• Emergency contact and medical information (as provided by parents/guardians)
• Government-issued student IDs (district, state, and federal, where applicable)

Parent / Guardian Information

• Name, contact information (phone, email, address)
• Relationship to student
• Signed consent and permission forms

Staff / Teacher Information

• Name, email address, school affiliation, and role
• Login credentials (passwords are stored using one-way cryptographic hashing and are never readable)

3. FERPA — Family Educational Rights and Privacy Act

The Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. § 1232g, gives parents and eligible students (age 18+) important rights over education records:

Your Rights Under FERPA

• Right to Inspect: You may request to inspect and review your child's education records maintained by the school.
• Right to Amend: You may request that the school correct records you believe are inaccurate or misleading.
• Right to Consent to Disclosure: Schools must have your written consent before disclosing personally identifiable information from your child's education records, except in limited circumstances permitted by FERPA.
• Right to File a Complaint: You may file a complaint with the U.S. Department of Education if you believe your rights have been violated (FERPA Office, 400 Maryland Ave., SW, Washington, DC 20202).

FERPA Annual Notice

Schools using this platform are required to provide an annual FERPA notice to parents. If you have not received this notice from your school, please contact your school's administrative office.

Permitted Disclosures

Education records may be shared without prior consent only in specific circumstances permitted by FERPA, such as: school officials with a legitimate educational interest, other schools to which the student is transferring, or as required by state and local authorities.

4. COPPA — Children's Online Privacy Protection Act

The Children's Online Privacy Protection Act (COPPA), 15 U.S.C. §§ 6501–6506, applies to the online collection of personal information from children under 13.

School Operator Exception

Schools and districts using this platform operate under the "school operator exception" to COPPA. Under this exception, the school (not the parent) consents to data collection on behalf of students for educational purposes. The school's use of this platform is subject to this policy and the school's own data privacy agreements.

Parental Rights Under COPPA

• Review any personal information collected from your child
• Request deletion of your child's personal information
• Withdraw consent for future data collection

To exercise these rights, please use the Data Request form below or contact your school directly.

5. How We Use Student Data

Student data collected through Qadras is used exclusively for educational purposes:

• Tracking academic progress and growth over time
• Supporting teachers in identifying areas where students need additional help
• Facilitating communication between school staff and families
• Generating reports required for state and federal compliance

We do not: sell student data, use student data for advertising, share data with unauthorized third parties, or use student data to create behavioral profiles for non-educational purposes.

6. Data Retention

Student education records are retained for 5 years after the student's last active school year, consistent with FERPA best practices and many state education records laws. After this period, records are flagged for administrative review and either archived or securely deleted.

Parents/guardians may request early deletion of data that is no longer needed for educational purposes. Such requests are reviewed within 45 days as required by FERPA.

7. Security

We implement industry-standard security measures to protect student information:

• Encrypted connections (HTTPS/TLS) for all data in transit
• Session-based authentication with automatic 30-minute inactivity timeout
• HTTP-only, secure cookies to prevent session hijacking
• CSRF protection on all form submissions
• Role-based access control — teachers see only their students; admins see only their school
• Audit logging — all access to student records is logged with user, timestamp, and IP address

8. Exercising Your Rights

You may also contact your school's administrative office directly to exercise your FERPA rights.