Respecting Your Student’s Data Privacy is Critical to PowerSchool

PowerSchool processes student education records on behalf of educational institutions while respecting data privacy rights and supporting your education journey.

Read the Global Privacy Statement

Quick Links:

PowerSchool’s Privacy Principles

As a provider of innovative K-12 software and cloud-based solutions to improve educational outcomes and simplify school operations, central to our operations is the processing of personal data, PowerSchool places great importance and value on the proper handling of personal data that flows within our product as we provide services to our customers. We use the following Privacy Principles as a guide, and they inform our approach to data privacy and data protection throughout PowerSchool. 

Lawful Processing

At PowerSchool, starting from the collection of personal data, and subsequent processing that follows, we ensure there is at least one legal basis...  more +
Close 2
At PowerSchool, starting from the collection of personal data, and subsequent processing that follows, we ensure there is at least one legal basis for each of the processing activities we engage in. Such bases include the performance of a contract, your consent, a legitimate interest/purpose that we pursue, performing a legal obligation, etc. 
Fairness

Fairness connotes different things to different people. At PowerSchool, we use personal data in a legal and non-harmful way while respecting your rights and considering your interests. Personal data is processed fairly and reasonably by PowerSchool. By “reasonably”, we mean processing all personal data in ways that our customers knowingly expect and not processing in ways unexpected or unauthorized by our customers - schools and school districts. By "fairness" we mean all personal data we process is processed in the same or substantially similar manner.
Control

With this transparency, you can determine whether you agree to the processing of your personal data as directed by the data controller, (typically a school, district or higher educational institution who is a customer of PowerSchool). 
Uniformity

PowerSchool does not inherently process personal data differently within our applications from one data subject to the next. We refrain from processing... more +
Close 2
PowerSchool does not inherently process personal data differently within our applications from one data subject to the next. We refrain from processing your personal data in a way that knowingly has any negative affect on a data subject, whether a student or staff member or otherwise. 
Transparency

In this Global Privacy Statement, we provide you with relevant information concerning the processing of your personal data in PowerSchool... more +
Close 2
In this Global Privacy Statement, we provide you with relevant information concerning the processing of your personal data in PowerSchool applications.  Your personal data will be processed in an open, simple, and plain manner.  Most typically personal data is processed in the form of student education records under the control of your school or district (the “data controller”). We provide information such as what personal data will be processed within our applications, how personal data may be collected from you by a data controller (such as your school or district), for what purpose PowerSchool may process the personal data on behalf of the data controller, how long it will be kept, etc. 
Purpose Limitation

As stated in our Global Privacy Statement, we only process collected personal data for the specified, legitimate business purpose we... more +
Close 2
As stated in our Global Privacy Statement, we only process collected personal data for the specified, legitimate business purpose we stated before or at the point of collection of the personal data. We thus do not use personal data for any purpose beyond what we have informed or pre-disclosed to our customers and users. We ensure that any change in the purpose of how we use personal data (secondary purpose) is compatible with the initial purpose (primary purpose) disclosed to our customers for which personal data was collected. Where a secondary purpose is not compatible with the primary purpose, we take steps to inform you and ensure or obtain a new basis for the processing of personal data for the secondary purpose before commencing the processing of personal data. 
Privacy by Design

As PowerSchool offers several products to drive our mission to empower educators, administrators and families to support students to learn in the... more +
Close 2
As PowerSchool offers several products to drive our mission to empower educators, administrators and families to support students to learn in the way that’s right for them.   From the conception of any of our products, privacy considerations are embedded into the design, and this is reflected in our final products pushed to our customers. We build privacy as the default setting in our products, ensure end-to-end security, and exemplify respect for user privacy in all our products. This privacy-oriented product-building initiative is also reflected in our services and business practices. 
Data Minimization

We stay within the guiding boundaries of only processing personal data relevant, adequate, and necessary to advance the specified and legitimate business... more +
Close 2
We stay within the guiding boundaries of only processing personal data relevant, adequate, and necessary to advance the specified and legitimate business purpose and request of our customers using our products/services. For example, we use only de-identified and anonymous data in the development of our analytic algorithms and for product development purposes.  We may ask for the age of users, but only where the age of the user is necessary for that particular product.  
Accuracy

We strive to process and to collect accurate personal data from our customers and users. Correcting or updating the personal data we hold... more +
Close 2
We strive to process and to collect accurate personal data from our customers and users. Correcting or updating the personal data we hold or process can be done by the user, or our customer - the data controller who has appropriate access to our systems.  
Storage Limitation, and Disposal

PowerSchool retains personal data only for as long as necessary to advance the processing purpose for which personal data has been provided to us or... more +
Close 2
PowerSchool retains personal data only for as long as necessary to advance the processing purpose for which personal data has been provided to us or disclosed to us by a user. As a guide, we use a business or legal purpose to determine how long we retain your personal data, and when such business or legal purpose expires, we delete your personal data appropriately. We also ensure a Data Retention Policy is in place for all processing activities, and we periodically review processed personal data to determine deletion and ensure personal data is not kept longer than necessary.
Privacy Rights

A part of our privacy principle is ensuring our customers (the data controllers of the personal data we process in most instances) are provided with ways to... more +
Close 2
A part of our privacy principle is ensuring our customers (the data controllers of the personal data we process in most instances) are provided with ways to response to exercises of the privacy rights of data subjects.  Such privacy rights, granted under various privacy laws globally include: the right to access their personal data, the right to correct/update it, the right to request deletion of the data; the right to opt-out of processing, the right to withdraw given consents, etc.  
Security

We seek to protect our customers’ personal data from unauthorized access, use, modification, disclosure, loss, or theft by leveraging various reasonable... more +
Close 2
We seek to protect our customers’ personal data from unauthorized access, use, modification, disclosure, loss, or theft by leveraging various reasonable security measures and methods to secure our customers’ personal data throughout its processing lifecycle with PowerSchool applications. Our overall aim is to ensure the confidentiality, integrity, and availability of our customers’ personal data by leveraging technical, organizational, and where appropriate, physical security methods. Security protection at PowerSchool is a cross-functional activity that intersects our workforce duties, and we have relevant security and privacy policies to drive expectations from the workforce. 
Accountability

For all of the Privacy Principles stated above, PowerSchool endeavors to demonstrate compliance with each of these principles.  In additional... more +
Close 2
For all of the Privacy Principles stated above, PowerSchool endeavors to demonstrate compliance with each of these principles.  In additional internal audits, we have sought and obtained various privacy program certifications to demonstrate accountability for these principles.

Frequently Asked Questions  

At PowerSchool, we know that the privacy and security of your personal data is important to you. As your personal data privacy and its security are also of importance to us, we discuss below some of the most frequently asked questions:  

Who is a Data Subject and what are Data Subject Rights?  

A data subject is an individual person who is an identified or identifiable natural person.  As for data subject rights, these are rights granted in applicable laws in certain data which are exercisable, in most cases, by the data subject against a data controller.  Such rights, or data subject rights (DSRs), may include a right to access the personal data about you collected or processed, a right to request the personal data be deleted (where possible), the right to object to the processing based on valid grounds, etc.  

What Personal Data does PowerSchool collect about me?  

Personal Data is data that alone or in combination with another data element identifies you. Depending on the PowerSchool product/service that you are using, the personal data we process or collect about you varies. The Global Privacy Statement contains all of the specific types, and categories of personal data that we collect, please see Section 1 – Introduction of the Global Privacy Statement Such personal data include name, email address, date of birth, username/password (login credentials), etc.  

How does PowerSchool protect my Personal Data?  

We use state-of-the-art, and appropriate physical, technical, and administrative security measures to protect the personal data that we process. You can find further information in our Global Privacy Statement under Commitment to Protecting Your Data.  

Who controls the content/data on PowerSchool products?  

Depending on the content/data in question, who owns or controls differs depending upon the product. For our Cloud Offerings and Platform Capabilities, the licensed customer of our applications, typically schools and district, are the data controllers of the data, student educational records, processed in these applications. For the publicly accessible products, PowerSchool acts as the data controller of the data collected.  If you are the data subject, you may direct your requests to exercise any data privacy rights you may via the applicable data controller.  PowerSchool may have the right to anonymize/de-identify data.  PowerSchool also may use data relating to your usage of our products, usage analytics, to improve our products, including research and development, etc.  Such Transaction Data is owned by PowerSchool. 

Does PowerSchool sell my data? 

No. PowerSchool is bound by the instructions from our customers and the terms of our contract and data privacy agreements which do not include the right to sell the data captured in any PowerSchool products.

Does PowerSchool share my data without consent?

No. Our customers (school and school districts) have the responsibility to obtain voluntary and informed consent from data subjects to collect and process personal data, unless excepted under applicable law. PowerSchool obtains consent from our customers for the use of third-party subprocessors, who support the functionality of our applications and who are required to execute appropriate data privacy agreements.

How does PowerSchool use my Personal Data?  

At PowerSchool, we use your personal data solely for the specific purposes for which our customer has licensed access to our applications and imported their collect data into the application. We collect and use your personal data to deliver the service you and our licensed customers have requested from us.  

Where does PowerSchool store my Personal Data?  

PowerSchool data centers are situated in the United States, and Canada.  We also leverage third party cloud providers to support certain of our applications.  Where we use a service provider for a product offering, the service provider may store your personal data in another location/jurisdiction outside of the United States or Canada. To cater to this, we always enter into a Data Processing Agreement with all of our service providers – imposing a duty on them to process the personal data we have transferred to them securely including when they store or process the personal data in another location/jurisdiction.  

When does a data subject need to refer to PowerSchool Global Privacy Statement?

When the data subject wishes to understand PowerSchool’s commitment to global data privacy. PowerSchool’s Global Privacy Statement does not supersede the terms of any consent form or privacy notice from your applicable school, school district or higher education institution.

Who Owns Student Data Provided to PowerSchool by Customers for Processing?

Student data is synonymous with Customer Data under this Privacy Statement. Accordingly, all Customer Data is owned, and thereby controlled, by our customers (school, school districts or higher education institutions). Our customers have the responsibility to obtain voluntary and informed consent from data subjects to collect and process personal data, unless excepted under applicable law. PowerSchool will only process student data for the purposes of providing access to the PowerSchool Products and professional services that our customers (school or school districts) have contracted with us to provide, and we will process such student data according to instructions and the terms of our contract and data privacy agreements with our customers. This Global Privacy Statement is our commitment to ensuring the respect for global data privacy rights.

Is PowerSchool a “data controller” or a “data processor”?

PowerSchool is a “data processor” to its customers, who are educational institutions. A “data processor” is an entity that operates a service that processes data based on the instructions of and at the request of a data controller. PowerSchool does not have the same obligations as a data controller to obtain consent from the data subjects. For “publicly accessible products”, which are identified further in the global privacy statement are not licensed to educational institutions, PowerSchool does act as the data controller.

How are data subject requests concerning Customer Data and Collected Data handled at PowerSchool?

Under global privacy laws, it is the data controller who is responsible for responding to any exercise of a data subject right regarding the personal data collected. Nevertheless, an end user may elect to submit a DSAR (data subject access request) directly with PowerSchool at the link shown in section XIV of the global privacy statement. As the data processor, PowerSchool will transfer the validated request to the applicable data controller. In certain cases, PowerSchool may directly respond to the DSAR.

Global Privacy Statement

Last Updated: October 1, 2024

I. Introduction

This Global Privacy Statement (“Statement’) provides information to you on how PowerSchool Holdings, Inc., and its various operating subsidiaries (“PowerSchool”) respects the privacy of the student educational records and personal information (referred to collectively as “Customer Data”) provided to us by our K-12 or higher education institutional customers (educational institutions) to process on their behalf when they, their staff, parents/guardians, and students access and use our products, including mobile services. This Statement also provides information how PowerSchool may collect personal information (“Collected Data”) when you visit and consent to use our publicly accessible products or websites, including https://powerschoolstg.powerschool.com/, (our “Websites”), (collectively, the “PowerSchool Products”). How we process the information provided or collected may differ based on our relationship with you and our contractual obligations to our customers and users. Below, we’ve detailed the different relationships we may have with you. References to “us,” “we,” “our,” or “PowerSchool” in this Privacy Statement, are referring to PowerSchool.

A. Data Categories

PowerSchool categorizes data into 3 categories: Customer Data, Collected Data and Transaction Data...  more +
Close 2
PowerSchool categorizes the data into 3 categories: Customer Data, Collected Data and Transaction Data.

Customer data which is the data received by PowerSchool from its customers and customer users and is processed by PowerSchool on behalf of the customer in our capacity as “data processor”. Collected data which means the personal information collected by PowerSchool directly from the users of our Publicly Accessible Products. Transaction data, also known as metadata, this data generated by PowerSchool software using PowerSchool Products and services and is proprietary to PowerSchool.
B. Customer Data

PowerSchool customers are mainly K through 12 schools and districts, and higher education institutions. The makeup of Customer Data processed...  more +
Close 2
PowerSchool customers are mainly K through 12 schools and districts, and higher education institutions. The makeup of Customer Data processed by PowerSchool can vary by PowerSchool service and a customer’s product configuration. PowerSchool provides a full spectrum of education-related services for customers to choose from. These include K-12 education technology products, higher education products, and administration products. Customers may have one or more of these PowerSchool products and services. Depending on the product or service, Customers may provide student data, employee data, or applicant data for PowerSchool processing. The mix of data provided by each customer may also vary based on how the customer configures the PowerSchool product or service for Customer Data collection (potential variations are discussed in more detail below). For this reason, it is impossible for PowerSchool to fully document the data that it will process for each customer until after the customer has fully implemented and configured the PowerSchool product and service. The configuration may also be dynamic in that the school or district may change its data collection configuration over time. If you have questions about which data is being collected by a customer connected to you, you should direct those questions directly to the PowerSchool customer that controls your data. The customer’s privacy policy may be another good source of information.

Many school districts are also obligated to parents to post information about the data that these institutions may collect. It bears mentioning again that PowerSchool processes the Customer Data under strict contractual obligations and privacy agreements signed with the customer. PowerSchool does not use or disclose Customer Data except as authorized and required by our customers and as provided for in our agreements with our customers. Because PowerSchool does not own or control Customer Data, any request for access, review, correction, or deletion of Customer Data must come directly from our customers. With our customer’s consent, PowerSchool may receive information from affiliates in our PowerSchool Group of companies, or third parties and combine that information with Customer Data.
C. Collected Data

Although most PowerSchool on-line services and products are used by customers for Customer Data collection, PowerSchool websites and some...  more +
Close 2
Although most PowerSchool on-line services and products are used by customers for Customer Data collection, PowerSchool websites and some PowerSchool products and services collect data directly from users of our website or those products and services. In these situations, PowerSchool is a “data controller” because PowerSchool determines the purposes for which and the way personal information is processed. Because PowerSchool is the collector and controls the configuration of these products and services, PowerSchool can provide more detail on the data collection. These websites, products and services are further detailed below.

We also collect device and usage information when you access and use PowerSchool Products, including information that your browser or the mobile app sends when you are using our products. This data may include your unique device identifier, IP address, your browser type and configuration, the date and time of your use of the product or service and cookie data. Learn more about our use of cookies in our  Cookie Statement.
D. Transaction Data

Transaction Data is not Customer Data, nor is it Collected Data. It is a different PowerSchool category of data. Transaction Data may contain copied...  more +
Close 2
Transaction Data is not Customer Data, nor is it Collected Data. It is a different PowerSchool category of data. Transaction Data may contain copied elements from Customer Data or Collected Data. For example, the logging of a user session may contain a unique id that identifies the user. The unique id is necessary for monitoring the health and security of PowerSchool applications.

The monitoring of PowerSchool systems and applications is a part of our standard business operations to protect Customer Data and Collected Data; comply with laws; be able to provide customer support, and monitor events related to Customer Data or Collected Data. The monitoring of events is essential in preventing data-related incidents and determining if a data-related incident has occurred or is occurring that requires immediate attention by PowerSchool’s Incident Response Team. System and application events are monitored by the creation of artifacts or metadata about our systems, applications and their use. We call this “Transaction Data”.  Transaction Data is vital to our ability to improve our products; trouble shoot customer support questions; analyze the health and performance of our products; and maintain security of Customer Data and Collected data, and privacy investigations.  Transaction Data may either contain personal information along with application data that does not directly or indirectly relate to a person; or application data without any personal information at all.  

The storage and maintenance of Transaction Data is separate from the storage and maintenance of Customer Data and Collected Data with clear boundaries between the three types of data. In fact, Transaction Data is temporary. This means Transaction Data is permanently deleted on a regular rolling basis over time. This occurs regardless of whether Transaction Data contains any personal information or not. This is an implementation of the data minimization principle.  Transaction Data which contains no personal information or Transaction Data containing even one element of personal information are all treated the same.  Except for Service Providers acting as data subprocessors supporting our applications who are granted secure access to Transaction Data, PowerSchool does not share, disclose, sell or transfer such Transaction Data.  Additionally, PowerSchool treats all Transaction Data as PowerSchool Restricted Information – meaning confidential and secured – and at the same level as Customer Data and Collected Data.

PowerSchool does work with various data subprocessors to support the operability of our products.  For these vendors to service us as captured in our agreements with them, they do create metadata within their systems.  In these cases, PowerSchool binds these vendors to privacy requirements to ensure any metadata is properly deleted as required by law.

PowerSchool respects our customers’ privacy and data security requirements. Transaction Data is one way we fulfill that promise to our customers – educational institutions and individuals. Transaction Data provides us with the ability to service our customers properly.
E. Commitment to Protecting Your Data

Whether PowerSchool is a collector or processor or your data, PowerSchool is committed to protecting your personal information. PowerSchool uses...  more +
Close 2
Whether PowerSchool is a collector or processor or your data, PowerSchool is committed to protecting your personal information. PowerSchool uses commercially reasonable physical, administrative, and technical safeguards to preserve the confidentiality, integrity, and availability of your personal information. Our systems are regularly certified by third parties against industry security standards from AIPCA and ISO. As customers provide PowerSchool with Customer Data to process, PowerSchool makes commercially reasonable efforts to ensure the security of our systems. Please note that this is not a guarantee that such information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, administrative, and technical safeguards.

Regardless of whether the data is Customer Data or Collected Data, both are covered under PowerSchool’s privacy program. PowerSchool supports privacy rights and has developed and implemented policies, processes, procedures, and technologies for the collection, processing, use, and protection of your data whether it is collected by a customer or us. We are also a signatory of the 2020 Student Privacy Pledge.

How is your personal information protected? PowerSchool employs a variety of physical, administrative, and technological safeguards designed to protect your data against loss, misuse, and unauthorized access or disclosure. We strive to continuously maintain reasonable physical, administrative, and technical security measures. Our security measures consider the type and sensitivity of the data being collected, used, and stored, and the current state of technology and threats to data. PowerSchool independently verifies its security management system to the internationally recognized standard for security management and holds ISO 27001 and SOC2 certifications. PowerSchool also endeavors to align its privacy and security operations to best practices and relevant international regulations.
F. Children's Privacy

Under the Family Educational Rights and Privacy Act (FERPA), PowerSchool acts as a “school official” with “legitimate educational interests” and...  more +
Close 2
Under the Family Educational Rights and Privacy Act (FERPA), PowerSchool acts as a “school official” with “legitimate educational interests” and contractually relies on educational institutions to obtain parental consent, if required.

More generally, PowerSchool has processes and procedures in place to protect the personal information of children under 13, as detailed below. We do not use such information for any purpose other than to provide our services and for the specific uses set forth below, in accordance with contractual agreements with our customers and our Terms of Service.

Consent to Collect, Use, or Disclose Personally Identifiable Information from Children Under 13. Children under 13 may only use PowerSchool’s Products with the prior consent of a parent or educational institution acting on behalf of the child’s parent. We will not collect, use, or disclose any personally identifiable information from children under 13 without such consent. Educational institutions may consent to the collection, use, or disclosure of personally identifiable information from children under 13 by agreeing to purchase our products.

Personal Information from Children Under 13 Provided to PowerSchool. PowerSchool products may collect the following categories of personal information from children under 13, with the appropriate consent:
- Information provided via customers or through use of PowerSchool’s Products, assessment data, conduct or behavior data, demographic data, enrollment data, contact information, course schedule data, online communications, student identifiers (e.g., school ID number), academic or extracurricular program membership, student-generated content, transcript data, college interests, college application list, college scholarships, career interests, and post-secondary planning data; and
- Usage, browser and device information. PowerSchool does not allow personal information from or about children under 13 to be made publicly available via its Products. PowerSchool does not share personal information from children under 13 with third parties unless consented to under our customer agreements or necessary under the law.
- Service providers, partners, and product integrations. Our service providers help us with things like data security, cloud hosting, information technology, customer support, usage and analytics, email delivery, application performance monitoring, and user identity and authentication. In addition, some of our Products may support partnerships and integrations that offer certain features to users, like CommonApp**, Gallup**, and McGraw-Hill Education**, at the election of educational institutions (see further detail in Section VII).
- Administrative and legal reasons. When reasonably necessary to meet and comply with any applicable law, regulation, legal process or enforceable governmental request; enforce applicable Terms of Service, including investigation of potential violations; detect, prevent, or otherwise address fraud, security or technical issues; or protect against harm to the rights, property or safety of PowerSchool, our users or the public as required or permitted by law.
- Business transitions. In the event PowerSchool goes through a business transition such as a merger, acquisition by another company, sale of all or a portion of its assets, bankruptcy, or other corporate change (including during the course of any due diligence process), this personal information may be shared or transferred based on consent of our customers.
Our customers, educational institutions, may share personal information of students with educators as needed for educational purposes. PowerSchool does not control and is not responsible for this type of sharing. If you are a parent and have questions about this, please contact your child’s educational institution.

PowerSchool does not share personally identifiable information from children under 13 for advertising or marketing purposes. (See section V.2)

Parental Rights. For PowerSchool Products provided to educational institutions, the collection, maintenance, and use of personal information from children under 13 is controlled by the educational institution that contracts with PowerSchool for use of its Products. If you are a parent and have questions regarding personally identifiable information collected from your child as part of their educational institution’s use of PowerSchool’s Products, including your rights to review, delete, and refuse further collection of such information from your child, please contact your child’s educational institution. PowerSchool cannot delete such information unless authorized by your child’s educational institution.
G. Data Subject Rights

In response to proper requests from Data Subjects (a natural person about whom a data controller holds personal information and who can be...  more +
Close 2
In response to proper requests from Data Subjects (a natural person about whom a data controller holds personal information and who can be identified, directly or indirectly, by reference to that personal information) regarding Customer Data received by PowerSchool, we will direct the Data Subject to contact the data controller with their request. A proper request must include the specific PowerSchool application at issue, name of the data controller, the requester’s relationship to the Data Subject, and the specific right to be exercised on that Customer Data or Collected Data. If the controller is not responsive, and the Data Subject notifies PowerSchool that the data controller was not responsive and properly identify the data controller, PowerSchool will then notify the data controller of the Data Subject’s request and await guidance from the data controller. PowerSchool will follow applicable law with respect to Data Requests. We will also reasonably cooperate and assist our customers in connection with access requests, inquiries, and complaints from Data Subjects to whom the Customer Data relates or from data protection authorities. We will not directly respond to a Data Subject request for Customer Data except on documented instructions of our customers. PowerSchool acknowledges that applicable law regarding Data Subject Rights may be further promulgated, modified, or interpreted by supervisory authorities, and enforced by stakeholders such as state attorney generals. PowerSchool will reasonably cooperate and assist customers in adapting PowerSchool’s support of customers regarding responding to Data Subject requests.
H. Data Retention

We keep information collected on behalf of our Customers for as long as necessary to fulfill the purpose for which it was collected, pursuant to...  more +
Close 2
We keep information collected on behalf of our Customers for as long as necessary to fulfill the purpose for which it was collected, pursuant to contractual terms or as otherwise required by applicable law. We dispose of information that is not held pursuant to contractual terms within a commercially reasonable period or at the request of a customer using reasonable measures to protect against unauthorized access to or use of information.
I. Data Subprocessors

To comply with PowerSchool’s obligations under applicable data protection laws and to our customers, we provide a list of significant...  more +

Close 2

To comply with PowerSchool’s obligations under applicable data protection laws and to our customers, we provide a list of significant third-party suppliers that enable us to provide our products and services and operate our business. These third-party suppliers perform the functions described below and are considered subprocessors under applicable data protection laws (“Subprocessors”). We require our Subprocessors to implement proper security measures to safeguard and to respect the privacy rights attendant to Customer Data and Collected Data.

Data Subprocessors	Processing Activity	Location
AWS	Data Storage	United States
Microsoft Azure	Data Storage	United States
Oracle	Database	Various
Snowflake	Data Storage	United States
Twilio	Cloud Communications	United States
Salesforce	Data storage of customer data for sales and marketing activities	United States
Qlik	Tool to support data migration to data storage	United States

J. Legitimate Interest

PowerSchool ‘s legitimate interest to process personal data, whether Collected Data or Customer Data is addressed in our Legitimate Interest Statement.
K. Bases of Processing

PowerSchool’s base for processing student education records and personal data of data subjects is the contract we enter into with our customers. We may also base our processing on the consent from data subjects, or legal obligation.

II. MyPowerHub

PowerSchool’s “MyPowerHub” acts as a single user interface to access multiple platforms based on the role of the user. It allows families, schools and teachers to share one source of information, including grades, attendance, assignments, calendar events, newsfeed posts, completed and in-progress forms, behavior, and fees, in a seamless experience. The data entered by the Customers in other PowerSchool products is reflected in MyPowerHub, based on the PowerSchool products the customer wants to integrate into MyPowerHub product. MyPowerHub may also process data for features offered directly within the MyPowerHub product itself. Moreover, it may be used to process roster and personal data imported from 3rd party platforms.

To exercise your privacy rights under state, federal, provincial or country privacy legislation related to this application and the Customer Data it processes on behalf of your educational institution, please contact your educational institution. As a data processor for our customers, PowerSchool will take direction from our customers on exercising those privacy rights. Direction from our customers can be submitted through the PowerSchool support system. To help protect the security of your Personal Information, PowerSchool will always work with your educational institution to verify your identity.

Show more +

III. PowerSchool Cloud Offerings

Below is a brief privacy-related description of each of PowerSchool’s cloud offerings, platform capabilities and publicly accessible products. Customers may purchase a license to access one or more PowerSchool products within the listed “clouds” and “platforms”.

A. Student Information Cloud

This suite of solutions includes the hosted PowerSchool SIS, Document Management, Special Programs, Ecollect Forms, Enrollment, Enrollment Express...  more +
Close 2
This suite of solutions includes the hosted PowerSchool SIS, Document Management, Special Programs, Ecollect Forms, Enrollment, Enrollment Express, PowerSchool Neverskip ERP (School Essential) and SchoolMessenger Permission Click. To exercise your privacy rights under state, federal, provincial, or country privacy legislation related to this application and the Customer Data it processes on behalf of your educational institution, please contact your educational institution. As a data processor for our customers, PowerSchool will take direction from our customers on exercising those privacy rights. Direction from our customers can be submitted through the PowerSchool support system. To help protect the security of your Personal Information, PowerSchool will always work with your educational institution to verify your identity.

1. Student Information Systems.

This hosted application enables a school or district to manage educational student records within this flexible student information system. Personal Information on each individual student is stored and processed within this application based on the instructions of the educational institution. The application includes multiple features and can be accessed via a mobile application by teachers, parents and to a more limited extent, students. Separately, your educational institution may elect to allow third parties to connect with PowerSchool’s Student Information Systems application to take advantage of a functionality offered by the third party. Please ask your institution to identify if any third-party products are connected to review those third party privacy statements for more detail.

a) PowerSchool SIS

Our PowerSchool SIS application includes a feature (PowerSchool Payments) that facilitates the ability for school related expenses to be paid through our selected vendor, Payrix Merchants (Payrix). As with all our vendors, we have carried out extensive due diligence on Payrix’ business processes. We have also ascertained that Payrix is PCI-DSS Level I compliant. Additionally, as with all our vendors, we also have a Data Processing Agreement (DPA) with Payrix that regulates the way the vendor processes and protects your personal information. The personal information Payrix collects is used solely to process your requested payment transaction. For credit and debit cards, for example, such personal information processed may include card holder first and last name, card number, expiration date, card verification value (CVV), and zip code, as required. For eCheck payments, personal information processed may include account holder’s first and last name, routing number, bank account number, and zip code, as required. PowerSchool does not receive or store any of this personal information. PowerSchool only retains the binary information in its products that the transaction occurred and was completed.

b) eSchoolPlus

Our eSchoolPlus is a student information system used by schools and districts to facilitate management of the daily activities of an educational institution. This application enables administrators to configure and manage their district and school data; teachers to collect data related to their classes, and parents and students to have visibility of the applicable student data.  The application collects personal data such as name, class schedule, course of study, classwork, standardized test scores, grades, address, medical-related information, attendance, and staff member social security numbers, for which access is restricted. The application acts as a system of record of student information and supports administrative and to make class management more efficient for educators.

2. Document Management.

This functionality enables the school or school districts to efficiently manage all school-to-home document distribution, long-term document storage, and electronic document signatures. This application can be integrated, meaning Customer Data can be shared, amongst other PowerSchool products if your educational institution elects to take advantage of this functionality.

3. Special Programs.

This application processes inputs from schools and district officials managing state special education regulatory documents, section 504 programs, English learner and gifted and talented plans for students. This application can be integrated, meaning Customer Data can be shared, amongst other PowerSchool products if your educational institution elects to take advantage of this functionality.

4. Ecollect Forms.

This application supports a school or school district to create and deploy forms unrelated to student enrollment as part of forms-based workflows. With this product, educational institutions are enabled to offer online forms for parents/guardians, students, and teachers to provide personal information about themselves or a student for import into the school or school district student information system. This Customer Data collected, such as name, date of birth, address, contact information, demographic information, etc., are populated into the student information system and used for business process-driven workflow purposes determined by the Customers.

5. Enrollment.

This application supports the digitization of the student enrollment process for a school or school district. With this product, educational institutions are enabled to offer online forms for parents/guardians to provide personal information on their student for import into the school or school district student information system. This Customer Data collected, such as name, date of birth, address, contact information, demographic information, medical information (such as allergies, primary doctor, immunization), etc., are populated into the student information system and used for enrollment and registration purposes.

6. Enrollment Express.

This application supports the digitization of the student registration process for a school or school district. With this product, educational institutions are enabled to offer online forms for parents/guardians to provide personal information on their student for import into the school or school district student information system. This Customer Data collected, such as name, date of birth, address, contact information, demographic information, medical information (such as allergies, primary doctor, immunization), etc., are populated into the student information system and used for enrollment and registration purposes.

7. PowerSchool Neverskip ERP

This platform product offers a suite of six modules.   These include student records, fee collection, admission, report card, transport, communication, and a learning management system. The platform maintains physical, electronic, and procedural safeguards that comply with industry standards to protect Customer Data or Collected Data processed on the platform.
B. Personalized Learning Cloud

This suite of solutions includes the hosted Schoology Learning, Curriculum & Instructions, Performance Matters, and ContentNav.  more +
Close 2
This suite of solutions includes the hosted Schoology Learning, Curriculum & Instructions, Performance Matters, and ContentNav.

To exercise your privacy rights under state, federal, provincial, or country privacy legislation related to this application and the Customer Data it processes on behalf of your educational institution, please contact your educational institution. As a data processor for our customers, PowerSchool will take direction from our customers on exercising those privacy rights. Direction from our customers can be submitted through the PowerSchool support system. To help protect the security of your Personal Information, PowerSchool will always work with your educational institution to verify your identity.

1. Schoology Learning.

In addition to processing online communications, and enrollment data, this learning management system stores lessons and other content uploaded by educators; and receives student-submitted materials (i.e. assignments) within a course. This application is integrated, meaning it can share data with other PowerSchool products if your educational institution elects to take advantage of this functionality. Separately, your educational institution may elect to allow third parties to connect with PowerSchool’s Schoology Learning application to take advantage of a functionality offered by the third party.   Please ask your institution to identify if any third party products are connected to PowerSchool Schoology Learning application to review those third party privacy statements for more detail.

There are two versions of this application. One, an “enterprise version”, which is licensed to educational institutions, our customers. The other, a “basic version”, which allowed the public to license and login to an account for free. The “basic version” is presently not enabled for the creation of new instructor accounts, although existing grandfathered teacher basic accounts can enroll free student accounts. Both versions may take advantage of functionality provided by ContentNav.

2. Curriculum & Instruction.

This application processes inputs from teachers and others at the educational institution to create a digital curriculum map and lesson plans to support students. This application can be integrated, meaning Customer Data can be shared, amongst other PowerSchool products if your educational institution elects to take advantage of this functionality. 

A generative AI solution is incorporated within the Curriculum & Instruction solution to support the drafting of curriculum map and lesson planning content tailored to specific criteria provided by the school/district staff or teacher's prompt. The features do not utilize personal information. Neither was personal information used to train the model. The feature output is tailored based on the selection of appropriate grade level and academic area. District administrators can enable this feature for their uses, based on the district's discretion. 

3. Performance Matters.

This application processes inputs from educational institutions to offer a comprehensive student assessment. Educational institutions may elect to input student grades, student assessments, student demographics, and social-emotional learning indicators; or custom data fields derived from school/district initiatives to provide real-time insights.   This application can be integrated, meaning Customer Data can be shared, amongst other PowerSchool products if your educational institution elects to take advantage of this functionality.

4. ContentNav.

The ContentNav service provides access to a repository of educational content, global search platform for instruction content, and a repository to bring in content into one place.  Internal IDs are used for authorization of content.  Teachers will have access to a bank of instructional materials from different providers. ContentNav allows teachers to search for content. ContentNav allows teachers to add content to their Schoology course and to assign it to their students.   Some content is secured and thus internal IDs are generated in Schoology to enable authorization to access the content.  ContentNav provides a way to index content into our leaning object repository through a partnership agreement. 

The generative AI features in this product support the generation of learning content such as reading passages tailored to specific criteria provided by the school/district staff or teacher's prompt. The application also employs PowerSchool developed AI models to rank learning content for users. The features do not utilize personal information. Neither was personal information used to train the model. The feature output is tailored based on the selection of appropriate grade level and academic area. District administrators can enable this feature for their uses, based on the district's discretion.
C. Talent Recruitment & Retention Cloud

This suite of solutions includes Perform, Professional Learning, Applicant Tracking, Candidate Assessments, Coaching and Mentoring; Employee Records...  more +
Close 2
This suite of solutions includes Perform, Professional Learning, Applicant Tracking, Candidate Assessments, Coaching and Mentoring, Employee Records, Premium Library, SchoolSpring and SmartFind Express. These products enable schools and districts to manage their employee recruitment processes. These products do not process student educational records. The Personal Information processed is provided with consent from applicants and collected by our customers for the purpose of securing staff for their educational institution.

To exercise your privacy rights provided under the applicable state, federal, provincial or country privacy legislation related to this application and the Customer Data it processes on behalf of your educational institution, please contact your educational institution. As a data processor for our customers, PowerSchool will take direction from our customers on exercising those privacy rights. Direction from our customers can be submitted through the PowerSchool support system. To help protect the security of your Personal Information, PowerSchool will always work with your educational institution to verify your identity.

1. Perform.

This teacher evaluation platform processes the Personal Information of individuals serving as staff or teachers within an educational institution along with inputs from evaluators employing the application to support evaluation activities. The application allows a manager conduct walkthroughs and observations, evaluate staff, track progress of evaluation processes, and analyze results. The Personal Information involved in this application depends upon the unique evaluation workflow, created observation or walkthrough forms, self-assessments, goal setting established win the application. Personal Information captured within a form or evaluation and collected within the application so that analytics and dashboards can be generated.

2. Professional Learning.

This application supports professional development learning for teachers by presenting training learning opportunities, assigned or recommended, related to specific subjects, grade levels or other classifications. Personal Information is processed within the application solely to present learning opportunities, track attendance, monitor progress to a set professional development plan, and schedule courses, used to generate completion certificates for teachers; and notify teachers of upcoming opportunities via email (as enabled by the customer administrator). The credential system within the application can capture an individual teacher’s existing and expiring credentials.

3. Applicant Tracking.

The application supports the hiring process from sourcing, screening, selection, hire and onboarding. Personal Information provided and processed could be an email address, name, contact information, resume information necessary for creating an account on the platform.

4. Candidate Assessment.

This application is an online multi-format assessment platform that processes teacher candidate responses to aid a school or district to evaluate candidates objectively and fairly who apply for positions with an educational institution. Personal Information provided as part of the assessments are controlled by customer.

5. Coaching and Mentoring.

PowerSchool’s Coaching and Mentoring solution enables Mentors to collaborate with their mentees, track check-ins, and share resources to create personalized learning opportunities. Generative AI increases efficiency saving mentors time and surfacing key data points to drive educator effectiveness. It aims to facilitate mentor/mentee collaboration and personalized learning for educators, save mentors and mentees time, and surface data to help districts understand the effectiveness of recent professional development, opportunities for future professional development, and the impact their mentor programs have on retention.

6. Employee Records.

This application supports the onboarding and maintaining digital records on an educational institution’s staff and teachers. The Personal Information processed would cover all personal information required by the school, school district or another relevant stakeholder in the process of supporting the employee. The information includes task information for onboarding and other district processes, annual contract or letters to the employee, biographic information, and other HR information retained by the district.

7. Premium Library.

This application serves as the central hub through which learners access self-paced, asynchronous professional learning content from PowerSchool’s content partners. Schools and districts purchase courses through Professional Learning that are hosted, delivered, and managed by each provider. Course completion data and grades are synched back to Professional Learning for credit tracking and transcripts.

8. SchoolSpring Job Board – Administrative View.

This application provides the ability for schools, school districts National Job board) or a large school district, consortiums or educational organization (Consortium job board) to list their available positions. Personal Information of individuals creating a profile is collected and processed within the application.

9. SmartFind Express (Absence Management).

This application enables the district staff/teachers to enter their absence requests which need substitute staff/teachers to fill those absences. The application posts the substitute positions which may be accepted or declined by the candidates for the substitute position. Personal Information necessary to support this application include, name, phone number, email address, and certifications. Schools and School districts can manage teacher absences and also create additional vacation positions needing substitute staff to fill those. Potential substitutes can manage their schedule availability within the application.
D. Resource Planning Cloud

This suite of solutions includes: eFinance Plus ERP, Atrieve ERP, Business Plus, Allovue Allocate, Allovue Manage, Allovue Budget...  more +
Close 2
This suite of solutions includes: eFinance Plus ERP, Atrieve ERP, Business Plus, Allovue Allocate, Allovue Manage, Allovue Budget, ERP (Enterprise Resource Planning). To exercise your privacy rights provided under the applicable state, federal, provincial or country privacy legislation related to this application and the Customer Data it processes on behalf of your educational institution, please contact your educational institution. As a data processor for our customers, PowerSchool will take direction from our customers on exercising those privacy rights. Direction from our customers can be submitted through the PowerSchool support system. To help protect the security of your Personal Information, PowerSchool will always work with your educational institution to verify your identity.

1. eFinance Plus ERP.

This application provides extensive features supporting financial administration for a school or district. The application stores information required to accurately pay employees and to submit information to the federal and state agencies as required for compliance reporting. The data processed in this application is sensitive and protected accordingly.

2. Atrieve ERP.

This application is an integrated software which supports the Finance and HR Operations for the K-12 educational institutions located in Canada. It enables the teams to work better across departments while simplifying processes and compliance. The application collects personal data like Name, Profession, Address, Educational qualifications, Social security details. The application processes client data in accordance with accounting and finance regulations to offer Payroll Processing and Financial Accounting.

3. BusinessPlus.

This application enables the educational institutions at district levels to work across departments for processing HR records, payroll and General accounting purposes. The application collects personal data like name, profession, address, educational qualifications, social security details. The application processes client data in accordance with accounting and finance regulations to offer Payroll Processing and Financial Accounting.

4. Allovue Allocate.

This application enables educational institutions at the district and state level to conduct planning and analysis for resource allocation to school and district sites. This application includes aggregated personal data such as student counts by disability category, student counts by socioeconomic status, average salaries by job roles, and other data at the department, school, or district level.

5. Allovue Manage.

This application enables educational institutions at the district and school level to review, analyze, and monitor financial and human resources data. The application collects personal data like Name, Profession, Salary, and Benefits Elections for educational institution employees, as well as detailed records from accounting, accounts payable, and other key financial sources. The data in this application is sensitive and processed accordingly.

6. Allovue Budget Suite.

This application enables institutions at the district and school level plan, review, and analyze future financial and staffing plans assigned to strategies and priorities. This application collects personal data like Name, Profession, Future Salary, and Future Benefits for educational institution employees as well as contain potentially sensitive data about planned future spending by vendor, purpose, and fund sources. The application processes client data in accordance with the sensitivity of the data contained therein and protected accordingly.
E. Student Success Cloud

This suite of solutions includes MTSS, Attendance Intervention, and Behavior Support. These products enable schools and districts to manage the...  more +
Close 2
This suite of solutions includes MTSS, Attendance Intervention, and Behavior Support. These products enable schools and districts to manage the educational institution on a day-to-day basis. This includes providing a means to manage the educational records of students, communication with stakeholders such as parents, and conduct analytics of non-student educational records necessary to a school’s and district’s operations as well as managing financial metrics. These products do not process student educational records. The Personal Information processed is provided with consent from applicants and collected by our clients for the purpose of securing staff for their educational institution.

To exercise your privacy rights provided under the applicable state, federal, provincial or country privacy legislation related to this application and the Customer Data it processes on behalf of your educational institution, please contact your educational institution. As a data processor for our customers, PowerSchool will take direction from our customers on exercising those privacy rights. Direction from our customers can be submitted through the PowerSchool support system. To help protect the security of your Personal Information, PowerSchool will always work with your educational institution to verify your identity.

1. MTSS.

Provide educators with one, secure tool to establish personalized student plans, and intervention teams with the critical data (such data related to attendance, academics, assessments, student behavior and social-emotional learning) needed to identify at-risk students, assign and monitor interventions, and track progress toward goals.

2. Attendance Intervention.

A solution used by districts to address student attendance and chronic absenteeism. The product imports student attendance data and guardian contact information from a district's SIS to drive attendance insights. The application also supports reporting to parents and guardians through one-way and two-way communications to help address attendance issues for the student.

3. Behavior Support.

This application processes inputs from schools and district officials who seek to manage behavior and/or social and emotional learning inputs concerning students in the classroom. Staff and administrator inputs on student behavior is managed within this application to support and automate PBIS (positive behavior intervention support) programs.
F. College, Career, & Life Readiness Cloud

This suite of solutions includes Naviance CCLR, Headed2, and Connected Intelligence P20W...  more +
Close 2
This suite of solutions includes Naviance CCLR, Headed2, and Connected Intelligence P20W.

To exercise your privacy rights provided under the applicable state, federal, provincial, or country privacy legislation related to this application and the Customer Data it processes on behalf of your educational institution, please contact your educational institution. As a data processor for our customers, PowerSchool will take direction from our customers on exercising those privacy rights. Direction from our customers can be submitted through the PowerSchool support system. To help protect the security of your Personal Information, PowerSchool will always work with your educational institution to verify your identity.

1. Naviance CCLR.

Naviance CCLR provides school districts with tools to help their students engage and manage postsecondary planning activities. In addition to processing online communications, conduct, demographics, transcript and enrollment data, this application processes inputs from schools and district officials and students and parents who desire to manage post-secondary planning activities. Such activities include student self-discovery assessments, goal setting, resume and portfolio development, career and college exploration, college application management, course planning, and in limited situations student-directed connections to colleges of interest. Additional activities for students 13+ include portfolio profile generation, direct admissions, work-based learning exploration. The application processes Customer Data for an educational purpose. This application can be integrated, meaning Customer Data can be shared, amongst other PowerSchool products if your educational institution elects to take advantage of the services offered by the other PowerSchool products, and for portfolio profile generation, digital profile links could be shared outside of Naviance CCLR. For portfolio digital profile links, when generated links are sent outside of Naviance CCLR at the decision of the student, the personal information accessible via the link is disclosed to such external recipient(s).

The Naviance CCLR Portfolio feature is a new tool for students to build a holistic view of what they have done – both inside and outside of Naviance CCLR – that are related to their career journey. Entries added to the Portfolio (by students) can be mapped to careers through capabilities within Naviance CCLR, which helps students understand how their portfolio relates to eventual employment.

Direct admissions through Match powered by Concourse: Naviance users may elect to have access to an integration with Match powered by Concourse, which is a third-party direct admission platform where students, 13 or older, can receive offers of admission and scholarships from colleges and universities in the Match powered by Concourse network, without needing to submit a traditional application.

2. Headed2.

This application is a career exploration and planning system, designed to be a lifelong tool that helps users navigate their way through the world of work. The applications provide tools that help users develop career exploration skills, identify next steps, and plan for their future. Based on the access opted by the Customer, the users can connect with Navigators, who can help facilitate that process and guide their journey

3. Connected Intelligence P20W.

Connected Intelligence P20W is the first data as a service (DaaS) platform to help education and government agencies make the most efficient and effective use of their data, helping to improve student outcomes and create pathways to social mobility.

Connected Intelligence P20W allows education and government agencies to securely unify, integrate, and access all source system data in a state-specific data cloud thus providing insights into previously siloed, underutilized, and inaccessible data with unparalleled ease. This holistic high-performance system creates linked, anonymized data sets in near-real-time from early childhood, K–12, post-secondary, and workforce development systems. This is the first secure, turnkey enterprise solution with an extensible framework that is financially sustainable and durable for the long term, unlike custom solutions that are difficult to maintain over time.
G. HigherEd Cloud

PowerSchool products and services provide an online presence for our higher education customers (universities and colleges) to collect data from the...  more +
Close 2
PowerSchool products and services provide an online presence for our higher education customers (universities and colleges) to collect data from the customer’s end-users, including students, parents and guardians, faculty, staff, and applicants. User access to these PowerSchool products and services is restricted and controlled by the customer. PowerSchool processes the collected data per contractual and privacy obligations with the customer. A reminder that the data collected varies by the configuration of the product or service by the customer.

To exercise your privacy rights under state, federal, provincial or country privacy legislation related to this application and the Customer Data it processes on behalf of your educational institution, please contact your educational institution. As a data processor for our customers, PowerSchool will take direction from our customers on exercising those privacy rights. Direction from our customers can be submitted through the PowerSchool support system. To help protect the security of your Personal Information, PowerSchool will always work with your educational institution to verify your identity.

1. Intersect.

This application is a web-based recruitment platform that is licensed to higher education (or postsecondary) institutional customers, allowing them to generally promote their institution ; and potentially engage with prospective students from Naviance CCLR, only when students make an affirmative decision to connect with selected higher education institution(s) for educational purposes.

2. PeopleAdmin-branded Products.

This application targeted at higher education institutions, provides applicant and job candidate tracking services to such institutions.

a. Application Tracking System.

The application supports the hiring process from sourcing, screening, selection, hire and onboarding. It enables the institution to post the job openings and enables the applicants to easily track the status of the jobs they applied for. Personal Information provided and processed could be an email address, name, contact information, resume information necessary for creating an account on the platform.

b. Employee Records.

This application supports the onboarding and maintaining digital records on an educational institution’s staff and teachers. It is a form and process management solution that allows higher education institutions to manage their forms and HR tasks. The Personal Information processed would cover all personal information required by the higher education institutions or another relevant stakeholder in the process of supporting the employee.

c. Performance Management.

This staff evaluation platform allows the manager to conduct the performance assessment of the teachers and staff in a seamless manner. It enables tracking and reporting of the evaluations of staff holding various titles. The Personal Information involved in this application depends upon the unique evaluation workflow, created observation forms, self-assessments, goal setting established win the application. Personal Information captured within a form or evaluation and collected within the application so that analytics and dashboards can be generated.

d. Faculty Information System.

This faculty information system works as a store house to store the personal data of the faculty associated with a higher educational institution. It collects personal information of the faculty like publications published by the faculty, research papers crafted by the faculty, any honors the faculty is awarded with, etc. This application works as an information data warehouse of the faculty working in a higher educational institution.

e. Insights.

This application supports the customers by processing information required by higher educational institutions and presenting them as  trends analysis and dashboards, making it convenient for universities to take decisions benefiting them. Such data is not disclosed independently but is aggregated. The application allows for trend analysis without disclosing identified personal data.

f. Insights Advanced.

This application supports the need for data science capabilities across data collected and processed in a way that provides a view into key data metrics leaders of higher educational institutions require. Such data is not disclosed independently, but is aggregated. The application allows for trend analysis without disclosing identified personal data.

g. Marketplace for Connectors

A space to select bi-directional connections to support secure and effective data migration amongst applications used by higher educational institutions. The scope of partners connectors offered through various types of data collected and processed by higher educational institutions enables the support of several administrative goals.

IV. Platform Capabilities

A. Analytics and Insights

This is a student data analytics platform for state departments of education (DOE), districts and schools that can generate graphical representations of various...  more +
Close 2
This is a student data analytics platform for state department of education (DOE), districts and schools that can generate graphical representations of various forms of Customer Data for use by these educational institutions. The capabilities here include Student Analytics, Student Readiness Analytics, Risk Analysis, Predictive Enrollment Analytics, Community Engagement and Talent Analytics, Educator Analytics, and Continuous Improvement Planning.

To exercise your privacy rights under state, federal, provincial, or country privacy legislation related to this application and the Customer Data it processes on behalf of your educational institution, please contact your educational institution. As a data processor for our customers, PowerSchool will take direction from our customers on exercising those privacy rights. Direction from our customers can be submitted through the PowerSchool support system. To help protect the security of your Personal Information, PowerSchool will always work with your educational institution to verify your identity.

1. Student Analytics.

This application enables educators, school, and district staff to observe trends in student enrollment, attendance, behavior (incidents), academics, and assessments. The application does not include any original source information as data displayed comes from the district's SIS and assessment platforms. Information surrounding students include name, student id, birthday, race, ELL, SPED/IEP, and other information pertaining to enrollment, attendance, behavior, academics, and assessments. Staff name also appears as a filter for this application.

2. Student Readiness Analytics.

This application enables educators, school, and district staff to observe trends in student graduation and credit progress towards graduation. It utilizes SIS and NSC data to show credit progress for students still in K12 and graduation trends / college enrollment for students who have matriculated. Information surrounding students include name, student id, birthday, race, ELL, and SPED/IEP are shown at the student profile level. Staff name also appears as a filter for this application.

3. Risk Analysis.

This module assists schools/districts in identifying students in need of support. Data utilized for this is pulled from student analytics, no new data is collected from districts for this module. Data elements utilized include student demographics, enrollment, attendance, discipline incidents, and assessment. This application employs PowerSchool developed AI models to identify students that are at-risk of not graduating on-time.

4. Predictive Enrollment Analytics.

This application is an enrollment analytics and location intelligence platform that provides school district leaders with plotting and boundary analysis tools and enrollment projection reports that help them plan for student enrollment. This application employs PowerSchool developed AI models to forecast student enrollment for future time periods.

5. Community Engagement.

This application is a public facing analytics application to share state, district, and/or school level trends in student enrollment, attendance, behavior (incidents), academics, and assessments with the public for transparency of the district. The Community Engagement application does not include any original source information since the displayed data is provided by the district via nightly file imports. All data within the Community Engagement applications is at the School level or student group level and does not include any student level data or PII. The application provides public users the ability to view and or filter results to distinct student subgroups based on gender, ethnicity/race, and grade level. Additionally, this application include a "school finder" application that provides public users the ability to locate an address's assigned schools and compare travel distances, performance and more.

6. Talent Analytics.

This application provides an in-depth analytics application combining staff data of varying types or categories to provide district administrators the ability to identify actions and patterns of successful educators so school districts can make informed decisions and surface unrealized events across the district. The application does not include any original source information as data displayed comes from the district's Talent Ed products. Information from staff include: name, student id, race, ELL, location, and other information pertaining to locations, years in the district, position, etc.

7. Educator Analytics.

This application combines data from the Student Analytics and Talent Analytics applications for a deeper analysis of the actions of educators that impact students by surfacing trends & patterns with data linked between educators and students. Educator Analytics provides correlative analysis of cross-domains of staff data with student achievement data to identify actions which could assist struggling teachers improve student outcomes. The application does not include any original source information as data displayed comes from the district's SIS and assessment combined with the TalentEd product data (Professional Learning, Perform, SmartFind Express & Applicant Tracking/Records). Educator Analytics does not include any original source information as data displayed comes from the district's SIS and assessment platforms. Information surrounding students and staff that include: name, student id, ethnicity/race, ELL, SPED/IEP, location, and other information pertaining to each groups demographics and performance within the district.

8. Continuous Improvement Planning.

Provide a streamlined, digital, data- driven approach to support continuous improvement planning efforts. Support your plans through our pre-built, configurable, and continuous improvement workflows that make analysis easy and actionable. Act quickly, see improvement faster, and communicate progress to stakeholders. "Continuous Improvement also addresses more than just annual school improvement, but other school based plans which schools utilize, and the product is built to support."
B. Communications

This communications suite includes the newly acquired SchoolMessenger Communications products. PowerSchool SchoolMessenger...  more +
Close 2
This communications suite includes the newly acquired SchoolMessenger Communications products. PowerSchool SchoolMessenger Communicate, PowerSchool SchoolMessenger Presence, PowerSchool SchoolMessenger SafeArrival, PowerSchool SchoolMessenger Permission Click.

To exercise your privacy rights provided under the applicable state, federal, provincial, or country privacy legislation related to this application and the Customer Data it processes on behalf of your educational institution, please contact your educational institution. As a data processor for our customers, PowerSchool will take direction from our customers on exercising those privacy rights. Direction from our customers can be submitted through the PowerSchool support system. To help protect the security of your Personal Information, PowerSchool will always work with your educational institution to verify your identity.

1. PowerSchool SchoolMessenger Communicate.

Communicate is a mass notification platform that allows customers to quickly communicate with their district stakeholders, including parents/guardians, students, staff, and their community. This application leverages Customer demographic and contact data to ensure relevant communications are sent to the proper recipients.

2. PowerSchool SchoolMessenger Presence.

This application provides customers with the ability to create and maintain a school and/or district website. Data required for creators/users include name, email address and password. Personal data from public website visitors are not required.

3. PowerSchool SchoolMessenger SafeArrival.

SafeArrival leverages Customer attendance data to notify parents and guardians of relevant absences and collect verified absence reasons. Information relating to attendance that is entered by parents and guardians are fed back to the customer’s Student Information System.

4. School Messenger Permission Click

This platform supports the creation of online forms that capture parent permissions and other data which can integrate into a student information system. Payments are facilitated through the application as well as archiving of digitally signed permissions slips. Data privacy considerations are addressed via secure connections within the application to student information systems to store data transactions.
C. PowerSchool AI

PowerSchool uses artificial intelligence (AI) to promote efficiency in its technology development for its engineering teams. All PowerSchool AI...  more +
Close 2
PowerSchool uses artificial intelligence (AI) to promote efficiency in its technology development for its engineering teams. All PowerSchool AI development is governed by the PowerSchool’s Responsible AI Guiding Principles. Moreover, we are engaging AI to innovate our products to provide even more valuable benefits to our customers. As a function of our commitment to privacy by default, PowerSchool evaluates any AI solution to ensure customer PII data is not included as part of any training data sets for AI models. PowerSchool will apply customer data in production to optimize and personalize the AI recommendations for those customers who explicitly purchase PowerSchool's AI-powered solutions. Moreover, our AI solutions do not enable any automated decision-making. Our solutions leveraging AI or ML provide customers with valuable recommendations that then must be actioned via a human decision.

PowerSchool trains its internally developed AI models exclusively on anonymized data or data for which explicit customer consent has been expressly obtained. If the AI models are trained on customer data, they are strictly used only for the specific customer’s use with no disclosures to other customers. The products leveraging PowerSchool’s own AI models are ContentNav, Risk Analysis and Predictive Enrollment Analytics, Intersect (RepVist).

Separately, PowerSchool AI products branded “PowerBuddy™” are embedded with generative AI features utilize pretrained AI models from third-party vendors. However, customer data or user prompt data is never used to enhance or train any third-party AI models.

PowerBuddy™ Branded Products/Features

1. PowerBuddy™ for Assessment.

This generative AI solution is incorporated within the Performance Matters solution to support the drafting of learning assessment questions and answers tailored to specific criteria provided by the school/district staff or teacher’s prompt. The features do not utilize personal information. Neither was personal information used to train the model. The feature output is tailored based on the selection of appropriate grade level, industry academic standard, and academic area.

2. PowerBuddy™ for College and Career.

This AI assistant chatbot is an add on to our Naviance CCLR product. It helps students identify suitable careers and suggests colleges that offer programs aligned with their career interests, academic history, and personal preferences.

3. PowerBuddy™ for Custom AI.

This solution enables users to pose questions in natural language to a chatbot, which are then answered by an AI assistant. The AI assistant produces responses based on a database of text from district-generated materials and support documentation. district created materials and support documentation.

4. PowerBuddy™ for Data Analysis.

This AI assistant chatbot is an add on to our PowerSchool Connected Intelligence product. By using natural language prompts, the feature retrieves the data, analyzes the results and delivers data related insights to district data analysts.

5. PowerBuddy™ for Learning.

This AI assistant chatbot feature is an add-on to our Schoology Learning product. By adaptively responding to prompts from students concerning their assigned course material, the feature supports their personal learning process. The feature does not utilize personal information.

6. PowerBuddy™ for Engagement.

This AI assistant chatbot feature is an add-on to our MyPowerHub product. The AI assistant helps students and parents by answering questions about related topics such as their attendance, grades, school schedules, forms, and fee-related topics.

7. PowerBuddy™ for Curriculum & Instruction.

This generative AI solution is incorporated within the Curriculum & Instruction solution to support the drafting of curriculum map and lesson planning content tailored to specific criteria provided by the school/district staff or teacher’s prompt. The features do not utilize personal information. Neither was personal information used to train the model. The feature output is tailored based on the selection of appropriate grade level and academic area.

8. PowerBuddy™ for Coaching and Mentoring.

PowerSchool’s product, Coaching and Mentoring has an AI feature of Coaching and Mentor facilitates the collaboration between coaches and educators and personalizes educator growth. Personal information in the form of employee data of the educator is processed in this tool. Such data is only accessible by the educator’s respective school or school district. Coaches can complete check-ins with their mentees and generative AI will analyze the check-in conversations, propose action items, and track time spent against district defined support areas. A dashboard surfaces data such as time spent by support area, location, and mentee type - providing districts with insights into potential opportunities for educator growth and the effectiveness of their coaching and professional development programs.

9. PowerBuddy™ for Content.

The generative AI features in this product support the generation of learning content such as reading passages tailored to specific criteria provided by the school/district staff or teacher’s prompt. The application also utilizes AI models developed by PowerSchool to rank learning content for users.

Additional AI Products

1. Analytics and Insights.

Certain PowerSchool’s Analytics and Insights cloud products, specifically Risk Analysis and Predictive Enrollment Analytics, use traditional AI/ML models. Risk Analysis product identifies whether students are at-risk of not graduating on-time by classifying them into high, moderate, and low risk categories, and determines the degree of risk associated with all students (probability of on-time graduation). The Predictive Enrollment Analytics product leverages AI and machine learning models to forecast student enrollment for future time periods.
D. Data

Connected Intelligence K12. This is a Data-as-a-Service (DaaS) offering for schools and districts. The purpose is to support the educational purposes of...  more +
Close 2
Connected Intelligence K12. This is a Data-as-a-Service (DaaS) offering for schools and districts. The purpose is to support the educational purposes of the educational institution. Schools and districts can use this functionality to have access to all Customer Data in one location, whether educational records or non-student data.

To exercise your privacy rights provided under the applicable state, federal, provincial or country privacy legislation related to this application and the Customer Data it processes on behalf of your educational institution, please contact your educational institution. As a data processor for our customers, PowerSchool will take direction from our customers on exercising those privacy rights. Direction from our customers can be submitted through the PowerSchool support system. To help protect the security of your Personal Information, PowerSchool will always work with your educational institution to verify your identity.
E. Publicly Accessible Products

PowerSchool makes a limited number of services available to the public free of charge. Because an educational institution is not licensing...  more +
Close 2
PowerSchool makes a limited number of services available to the public free of charge. Because an educational institution is not licensing the product from PowerSchool in this unique circumstance, PowerSchool is the controller of any data captured in such products and this Collected Data is used for an educational purpose. Customers and users of these limited products are not necessarily educational institutions, and the users are not necessarily students or staff of an educational institution. For these publicly available applications, the individuals interacting with these products are required to provide informed and explicit consent before providing any of their Personal Information. In these limited situations, PowerSchool acts as a data collector and data processor of Personal Information.

For the specific PowerSchool Products listed in this section of the privacy statement, parents have the right to review, have deleted, or refuse to permit further collection or use of personally identifiable information from their child under 13. To do so, please contact us via our Data Subject Access Form.

1. Headed2.

This free application offers services related to career literacy for individuals via self-assessment activities, data on industry sectors, and local opportunities network. The product provides for various personas – such as job seeker, students, educators – the opportunity to provide their Personal Information for log in and the ability to match them with provided opportunities in the local or regional area of their choosing. Headed2 Supplement

2. SchoolSpring Job Board - Applicant View.

This application allows users to search for educational job postings at no charge. Personal Information collected include first and last name, email, zip/postal code, teaching certification information. Additionally, individual or institutional employers interested in posting a job on the job board can pay a subscription fee for a limited license to post a single or multiple job openings. SchoolSpring Supplement

3. Chalk and Chalk Gold.

These applications allow users, only teachers, to create a digital lesson plan to support students. These applications are offered directly to the public either for free, Chalk, or for an upcharge change to another version of the application called Chalk Gold. Personal Information collected include first and last name, and email. Chalk Supplement

V. PowerSchool Websites, Webinars, Demos

For users of our publicly accessible Websites, we offer details on how PowerSchool collects and uses information from or about you. In this relationship, PowerSchool acts as a data collector (controller). This is because we collect aggregated information about your browser until and if you consent to provide us personal information about you when you wish to engage with PowerSchool directly to receive information about our webinars, white papers and product information.

Information You Provide: You may voluntarily provide us with information when you complete a form or survey on our Websites or subscribe to our blogs or newsletters. This may include some or all the following categories of information: name and role; job title; signature; profession; social media account name; username; telephone number; and email address. You may also provide information when you register for an account through a Website to log in to a PowerSchool Product, or submit a resume or other information through the Careers link.From the moment you first interact with one of our Websites, we may collect personal information. Sometimes we collect personal information automatically when you interact with our Websites and sometimes we collect the personal information directly from you. At times, we may collect personal information about you from other sources and third parties, even before our first direct interaction.

Note that if you use a PowerSchool application website to access a service or product, you may need to log in to make use of the functionality of the product.

Our Websites may offer publicly accessible community forums. You should be aware that any information you provide in these areas is public and may be read, collected, and used by others who access them and may remain on the public forum indefinitely. To request removal of your personal information from our community forums, please contact us via our Data Subject Access Form. In some cases, we may not be able to remove your personal information, in which case we will let you know if we are unable to do so and why. We encourage all users to exercise caution when providing personal information in community forums. If you provide information when you communicate through our PowerSchool community forums, we may link this information with your personal information.

Information We Collect Automatically. We collect information about the pages your device’s browser visits and how your browser accesses and uses the Websites using cookies, tracking technologies and other third-party analytics tools. Specifically, we and our service providers use cookies and similar technologies such as local storage (HTML5), web beacons, JavaScript, and eTags on our Websites. This includes information about the devices you use to access the Websites including, but not limited to, unique device identifiers, IP address, operating system, browser, and cookies. Depending on your device settings, we may also collect information about your approximate geographical location. You can learn about our use of cookies, and set your preferences, in our Cookie Statement.

Information We Receive From Third Parties. PowerSchool works with third-party ad publishers to re-publish PowerSchool content on paid media platforms. We may receive personal information about users from these publishers, which we may use to provide user-requested information or to contact users regarding PowerSchool Products. We may also supplement the information we collect from you with information from PowerSchool Group affiliates and other third parties that we use to promote PowerSchool Products. For example, we may receive information from a third party about how well an online marketing or email campaign performed, or from conference and trade show organizers.

How We Use Your Information

In addition to the uses described above, we may collect and use your personal information for the following purposes:

Product Improvements, Analytics and Requested Communications. We may use your information collected to provide and improve our Websites and PowerSchool Products by using third-party analytics tools to help us understand how our Websites are used, analyze usage information for sales and marketing purposes, and to communicate with you in any manner that you have requested. We also use the information collected to communicate with you in any manner that you have requested.
Marketing. We conduct marketing to promote PowerSchool Products, but do not use or disclose student information (whether personal information or otherwise) provided by customers into our platforms for targeting of advertisements to students. When we conduct (or sponsor) events, conferences, and webinars, we will collect information about attendees, such as the session they attend and their contact information to provide them information about PowerSchool Products and other PowerSchool information. Marketing Preferences and Opt-Out Our marketing emails include an “unsubscribe” link so that you can change your preferences and opt-out of receiving marketing emails or communications from PowerSchool. You can also send us email at marketingops@powerschool.com to unsubscribe. Please note that even if you opt-out of marketing emails, we may still need to contact you with important information about your PowerSchool account.
Interest-based Advertising.
We use third party advertising tools to collect information about your device browser’s visits to the Websites to provide targeted advertisements to you based on your browsing history on other websites or on other devices you may use. If you would prefer to not receive personalized ads based on your browser or device usage, you may generally express your opt-out preference to no longer receive tailored advertisements. Please note that you will continue to receive advertisements, but they will no longer be tailored to your interests.

To learn more or opt-out of interest-based advertising by participating companies in the following consumer choice mechanisms, please visit:

Digital Advertising Alliance (DAA)’s self-regulatory opt-out page (https://optout.aboutads.info/) and mobile application-based “AppChoices” download page (https://youradchoices.com/appchoices).
European Interactive Digital Advertising Alliance (EDAA)’s consumer opt-out page (https://youronlinechoices.eu), if you’re located in the EU
Network Advertising Initiative (NAI)’s self-regulatory opt-out page (https://optout.networkadvertising.org/).

Please note that we do not use student data for targeted advertising purposes, for example, by inhibiting these third-party advertising networks from collecting information for targeted advertising purposes when a student logs into the service through their student account. We do not provide any student data to any third parties for marketing purposes not related to legitimate educational interests.

Show more +

VI. Product Performance Monitoring.

When you interact or use any PowerSchool licensed products, we use an information-gathering tool for collecting data that may contain Personal Information (in one of the use cases discussed further below) as you navigate our products or web properties. PowerSchool uses product experience software to monitor and improve the customer experience accessing   our products. With product experience software monitoring the usage of our products, PowerSchool can track customers’ usage patterns on our products, measure product performance, analyze customer churn rates for greater understanding of customers’/users’ needs and preferences, procure feedback from users/customers, carry out marketing activities, etc.

PowerSchool does not track or monitor an individual’s activity outside of the individual’s use of PowerSchool products or website properties. This means we do not store tracking cookies on a user’s browser to build a profile of what you may do on the internet or to identify you when they visit our web properties or use our products. PowerSchool does implement activity monitoring tools to help detect and mitigate insider threats, whether unintentional or with malicious intent. Generally, the range of monitoring and methods utilized depends on each specific objective described in the use cases below.

A. Aggregated Monitoring

In this use case, PowerSchool monitors, at an aggregate anonymized level, how users from a customer, school or district, interact with our products to improve our product and the user experience.  These actions are not leveraged for any other reason than as stated in this Global Privacy Statement.

PowerSchool uses its product experience software to gather metrics on PowerSchool product usage, and products’ most-used feature(s). Importantly, as mentioned above, the generated data are at the aggregate level, and are not traceable to an individual.  This holds true for pseudonymized data disclosed to our data subprocessor vendors leveraged to enable our services. These vendors do not have access to the data that could identify the user.

PowerSchool monitors certain data associated with identified users within the product’s unique infrastructure solely to monitor the technical performance of its platforms and to improve the design of our products. Any logs or records of such tracking are deleted, and not shared or disclosed outside of PowerSchool in any non-aggregated, individually identifiable way other than to the specific licensed customer, who is the data controller of the data.

Please be aware that schools or districts may elect to monitor their user engagement on a platform, such as Naviance CCLR, for district and statewide reporting and monitoring of CCLR progress.  No product experience software is used to process Customer Data.

B. Product Feedback Requests

In addition to the above use case on aggregated monitoring of product performance, PowerSchool uses its product experience software to support efforts to obtain voluntarily provided feedback from customers of our products or visitors to our web properties. Those instances are detailed below:

We present customers and users of our platforms with a request to opt in to participate in future research activities related to our product development. Upon receipt of an opt-in, we collect the individual’s contact email to send further information surrounding the upcoming research activity. The personal information we collect here includes the user’s name, and email address, although, we also collect the name of the product the user is using or intends to provide feedback on. We use a consent management tool to facilitate the communication of research questionnaires only to users who have opted-in to receive such research-related communication. Every such communication has an unsubscribe link, allowing for the revocation of a previously provided opt-in. Additionally, when we send research-related communications to opted-in individuals and do not receive a response within a limited period, PowerSchool refrains from sending any further communications to such user/customer.
We also present anonymous surveys to users and licensees of our products. Responses to the survey questionnaire are anonymous and cannot be traced to any individual. For these surveys we do not collect any personal information.  The focus is only on feedback related to product usages and suggestions/reactions to product features.
Additionally, we may present prescribed survey questions with defined answer options. In this way, responses are void of any personal information being collected and processed by PowerSchool.  As an example, we may ask if a user likes a (newly added) feature or page.  If a user chooses “No” for their answer, for example, we then present restricted answers such as “I don’t like this page because it is too long”, “I don’t like this page because it has too many options”, etc.

In all the use cases discussed above (Aggregated Monitoring, and Feedback Requests), PowerSchool uses tools that have undergone security and privacy review. Moreover, the service provider is also subjected to the rigorous PowerSchool third-party risk management program before their services are engaged.

Show more +

VII. PowerSchool Service Providers, Partners, and Other Third-Party Disclosures

PowerSchool works with service providers and partners to fulfill our obligations to our Customers. Customers may also contract directly with a third party and ask PowerSchool to share access to Customer Data with that third party. Some disclosures may also be required by law.

Service Providers. We engage directly with certain service providers to help us provide PowerSchool Products. Our service providers are required to abide by our privacy and security requirements and are contractually restricted from using any Customer Data or Collected Data accessed or received through us for any purposes other than as needed to perform such services. We may use service providers to help us conduct marketing campaigns or events and disclose customer contact information collected on our website as necessary for those activities.
Partners. Educational institutions may work with PowerSchool Partners to provide additional content and functionality, which may require access to Customer Data maintained within PowerSchool Products. Only with your educational institution’s permission, PowerSchool will share (provide access) to Customer Data. With your educational institution’s permission, and subject to an agreement between your educational institution and the Partner, PowerSchool will share (i.e., provide access) to your data.
Application Programming Interface (APIs): Third-party APIs software such as those of Google**, Microsoft**, etc. (“API Providers”) are used as an intermediary to allow applicable PowerSchool products and third-party API provider applications to communicate. For example, while using a PowerSchool product (e.g. PowerBuddy™, Schoology®), users may use Google API to communicate with the user’s Google Drive account to upload documents to the PowerSchool product that has this functionality or feature to upload documents or files. For more on PowerSchool Disclosure on how APIs are being leveraged in our product, see this link.
Other Types of Disclosures. We may also need to share certain portions of Customer Data or Collected Data under the following circumstances:
1. We may need to disclose Customer Data or Collected Data to comply with legal or regulatory requirements and to respond to lawful requests, such as court orders and subpoenas within a legal proceeding. Where such disclosures relate to personal information we hold as a data processor on behalf of our customers, we will refer such requests to our customers where permissible.
2. We may need to disclose Customer Data or Collected Data to protect and defend the rights, property, or safety of our customers or users, including enforcing contracts or policies, or in connection with investigating and preventing fraud or other misuse of our systems.
3. Where permitted by applicable law, we may utilize aggregated or de-identified, or anonymized information that is no longer associated with a person for internal purposes, such as to enhance and promote PowerSchool Products. PowerSchool does not rent, sell, or otherwise provide access to student personal information to third parties for marketing or advertising purposes.

Show more +

VIII. United States Student Privacy Laws

PowerSchool complies with privacy laws of the United States with respect to personal information and especially student educational records. We do not use Student Data for any purpose other than to provide the services, in accordance with our contractual agreements with our Customers, our Terms of Service, and this Privacy Policy. PowerSchool does not own or control Student Data, which belongs to the student and/or the Customer (schools, school districts, and higher education institutions) that contracts with PowerSchool to provide access to PowerSchool Products.

IX. California Privacy Rights

California law requires us to disclose the following information with respect to our privacy practices. If you are a California resident, this section applies to you in addition to the rest of the Privacy Statement.

Categories of Personal Information PowerSchool Collects and Purposes for Collection and Use

The types of personal information we collect depends on which PowerSchool Product(s) and/or Websites you utilize but can include:

Basic identifying information (e.g., name, address, email, phone number)
Demographic data (e.g., age, date of birth, gender)
Device information and other unique identifiers (e.g., device ID, IP address, cookies)
Network activity
User-generated content, including student-generated content

Depending on the PowerSchool Product(s) and/or Websites you utilize, we may collect personal information through the following means:

Directly from you (e.g., upon creating an account)
Automated data collection technologies (e.g., cookies, pixels)
Other sources (e.g., data analytics providers)

PowerSchool collects and uses personal information for various purposes, including the following:

Administration of PowerSchool Products
Improvement of PowerSchool Products
Communications with you
Legal obligations
Security, fraud prevention, and troubleshooting

PowerSchool does not share personal information with third parties unless necessary for the above-listed purposes. PowerSchool may disclose personal information to the following categories of third parties:

Service providers and partners. Our service providers help us provide services to our customers via our PowerSchool Products. These service providers support activities such as data security, cloud hosting, information technology, customer support, usage and analytics, email delivery, application performance monitoring, error and crash reporting, and user identity and authentication. In addition, we engage in product partnerships and integrations that offer certain features to users as requested by our customers. Under data privacy agreements, these third parties may require access to your personal information.
Administrative and legal reasons. We may share personal information with third parties based on a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to meet any applicable law, regulation, legal process or enforceable governmental request; enforce applicable Terms of Service, including investigation of potential violations; detect, prevent, or otherwise address fraud, security or technical issues; or protect against harm to the rights, property or safety of PowerSchool, our users or the public as required or permitted by law.

Exercising California Privacy Rights

Subject to certain limitations, including that PowerSchool cannot delete Customer Data where it is acting as a data processor under legal agreements with the data controller (our customers), California residents have the right to request access to the categories and specific pieces of personal information we collect, use, and disclose; the right to request deletion of their personal information; and the right to opt out of any sales of personal information that may be occurring. These rights may be exercised via our PowerSchool Products or by contacting your respective educational institutions who are licensed to the applicable PowerSchool Product(s).

Access to Data and Deletion Requests

For Collected Data where PowerSchool is not acting as a data processor, but collects personal information directly from a user, you may submit a request for a copy of the information collected about you in the last 12-months, or request deletion of information, by contacting us via our Data Subject Access Form.

Show more +

X. International Privacy Laws, Data Transfers and Access

Your data may be transferred to and stored by us in the United States and by our affiliates and third parties even if our customers are based elsewhere other than in the United States. Customer Data is hosted for all but a few PowerSchool Products, such as the Canadian-hosted Atrieve product, within the United States. Therefore, Customer Data may be transferred and processed in the United States from Customers residing outside of the United States. Your Data may be processed outside your jurisdiction, and in countries that may not provide for the same level of data protection as your jurisdiction, such as the European Economic Area (EEA) or the United Kingdom (UK). PowerSchool utilizes the Data Privacy Framework to support our transferring of personal data out of the European Economic Area (EEA) or the UK.

PowerSchool complies with the EU-US Data Privacy Framework (EU-US DPF), and the Swiss-US Data Privacy Framework (Swiss-US DPF) as set forth by the US Department of Commerce. PowerSchool has certified to the US Department of Commerce that it adheres to the EU-US Data Privacy Framework Principles (EU-US DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-US DPF. PowerSchool has certified to the US Department of Commerce that it adheres to the Swiss-US Data Privacy Framework Principles (Swiss-US DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-US DPF.

If there is any conflict between the terms in this notice and the Data Privacy Framework Principles, the Data Privacy Framework Principles shall govern. To learn more about the Data Privacy Framework program, and to view our certification, please visit https://www.dataprivacyframework.gov/s/PowerSchool is responsible for the processing of personal data it receives, under the EU-US DPF, the UK Extension to the EU-US DPF, and Swiss-US DPF and subsequently transfers to a third party acting as an agent on its behalf.  PowerSchool complies with the EU-US DPF Principles and the Swiss-US DPF Principles for all onward transfers of personal data from the EU, UK, and Switzerland, including the onward transfer liability provisions.

The Federal Trade Commission has jurisdiction over PowerSchool’s compliance with the EU-US DPF, the UK Extension to the EU-US DPF, and the Swiss-US DPF. In certain situations, PowerSchool may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

In compliance with the EU-US DPF, the UK Extension to the EU-US DPF, and the Swiss-US DPF, PowerSchool commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-US DPF, the UK Extension to the EU-US DPF, and the Swiss-US DPF to TRUSTe, an alternative dispute resolution provider based in the United States.  If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://feedback-form.truste.com/watchdog/request for more information or to file a complaint.  These dispute resolution services are provided at no cost to you.

For complaints regarding EU-US DPF, the UK Extension to the EU-US DPF, and Swiss-US DPF compliance not resolved by any of the other DPF mechanisms, you have the possibility, under certain conditions, to invoke binding arbitration. Further information can be found on the official DPF website: https://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf?tabset-35584=2.

PowerSchool’s privacy practices, described in this Privacy Statement, comply with the APEC Privacy Recognition for Processors (PRP) system. The APEC PRP system provides a framework for organizations to ensure protection of personal information transferred among participating APEC economies. More information about the APEC PRP framework can be found here.

The company’s global presence requires us to be aware of and comply with global privacy laws as an important aspect of our Global Privacy program. Below are regions of the world in which we operate and a brief statement on the laws governing our privacy obligations concerning Customer and Collected Data in those regions.

Show more +

a. Africa

Like the GDPR is the data privacy law for the EU countries, the African Union Convention on Cyber Security and Personal Data Protection, 2014 is applicable to the countries...  more +
Close 2
Like the GDPR is the data privacy law for the EU countries, the African Union Convention on Cyber Security and Personal Data Protection, 2014 is applicable to the countries in the African Union. 16 out of 54 African countries have signed to the conventions, whereas 36 countries have their own data privacy laws. With the expansion of PowerSchool’s business into the African continent, PowerSchool is actively identifying and analyzing the list of country-specific data privacy laws along with the territorial framework from the African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention) which came into force in 2023. As PowerSchool continues to monitor the developments in this region of the world, we will adjust our processes and procedures appropriately.
b. Australia

The Privacy Act, 1988 (as amended) provides for individuals' rights to know the purpose of their personal data being collected, how it will be used and who it will be disclosed to...  more +
Close 2
The Privacy Act, 1988 (as amended) provides for individuals' rights to know the purpose of their personal data being collected, how it will be used and who it will be disclosed to. It allows the individuals to ask for access to their personal data, the option of not identifying themselves, or of using a pseudonym. The Australian Privacy Act is based on the principle of open and transparent management of personal information. PowerSchool’s global privacy statement provides this information. Furthermore, we support an individual’s ability to exercise their privacy rights over the personal data we process on behalf of our customers.
c. Canada

The Personal Information Protection and Electronic Documents Act (PIEDA) address private sector activities whereas the Privacy Act governs an individuals’ right...  more +
Close 2
The Personal Information Protection and Electronic Documents Act (PIEDA) address private sector activities whereas the Privacy Act governs an individuals’ right to access personal information collected by an agency of the Government of Canada. Additionally, there are provincial laws impacting how student educational records and personal data generally are managed. PowerSchool works to understand and comply with these laws as they impact our customers’ use of our services.
d. Europe

Data privacy in the European Union Countries (“EU”) is governed under the General Data Protection Regulation (GRDP), 2018. The GDPR provides the right to the citizen to control...  more +
Close 2
Data privacy in the European Union Countries (“EU”) is governed under the General Data Protection Regulation (GRDP), 2018. The GDPR provides the right to the citizen to control their personal data. It also recognizes the right to access, rectification, erasure, data portability, etc. At present PowerSchool does not cater to EU customers; nevertheless, PowerSchool is mindful of GDPR requirements, self-certifying as an active member of the EU-US and Swiss-US Data Privacy Framework Program, as an appropriate aspect of PowerSchool global privacy compliance strategy concerning international transfer of personal data.
e. India

India in August 2023 enacted its new privacy law—the Digital Personal Data Protection Act, 2023 (DPDP Act). Once the DPDP Act, is in full force...  more +
Close 2
India in August 2023 enacted its new privacy law—the Digital Personal Data Protection Act, 2023 (DPDP Act). Once the DPDP Act, is in full force, which awaits a commencement date set by the Indian Central Government, it will supersede specific provisions of the existing Information Technology Act of 2000, Information Technology (Amendment) Act, 2008, and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011. Importantly, the DPDP Act recognizes the right of individuals to protect their personal data collected digitally or collected physically and later converted to digital. DPDP Act casts a duty on the Data Fiduciary (person who shall be liable to collect data) to send notices to obtain free consent from the Data Principals (individual's whose personal data is processed). The Notice should contain details of (i) what data will be collected, (ii) how it will be processed and (iii) where the end data upon processing would be used. The DPDP Act puts additional consent requirements from the parents/ lawful guardians for processing data of children or persons with disabilities. The DPDP Act once enforceable would be administered by the Data Protection Board of India. PowerSchool is monitoring for the DPDP act to be enforced and to understand the implementation and it impacts on our services to our customers (schools/districts) and data subjects whose personal data is processed by our services
f. Latin America

Unlike the GDPR in EU, the Latin American countries do not have any standard law for the data privacy. While some of the countries have enacted their data privacy laws...  more +
Close 2
Unlike the GDPR in EU, the Latin American countries do not have any standard law for the data privacy. While some of the countries have enacted their data privacy laws, like Brazil has LGPD Law, Ecuador’s the Organic Law on Personal Data Protection, 2021; Peru’s Personal Data Protection Law 2011, etc., the other Latin American countries are either developing their own data protection Laws or adopting the GDPR. PowerSchool is actively engaged to further understand these laws and their implementation as it impacts our services to our customers (schools/districts) and data subjects whose personal data is processed by our services.
g. Middle East

The privacy laws in Middle East countries vary; however, they follow the Islamic principles and recognize the right of personal privacy. Privacy laws in the Middle East place...  more +
Close 2
The privacy laws in Middle East countries vary; however, they follow the Islamic principles and recognize the right of personal privacy. Privacy laws in the Middle East place restrictions on the collection and use of personal data, and provide individuals with the right to access, rectification, erasure, and data portability. Personal Data Protection Law, Federal Decree Law No. 45 of 2021 of UAE ensures confidentiality of information and protection of the privacy of citizens of UAE and prohibits the processing of Personal Data without obtaining the consent of the Data Subject. PowerSchool works diligently to both understand the implications of these new laws and comply to the extent they impact our customers’ use of our services.
h. Southeast Asia

The Privacy laws in Southeast Asia are clear and cast the obligation on organizations collecting/ processing data to obtain consent of the data subject, secure...  more +
Close 2
The Privacy laws in Southeast Asia are clear and cast the obligation on organizations collecting/ processing data to obtain consent of the data subject, secure the data and provide access to personal data to the data subject. The Personal Data Protection Act 2012 (PDPA), Singapore, applies to any organization which has customer or users in Singapore. Personal Data Protection Act 2012 (PDPA) of Malaysia are similar to the PDPA of Singapore and applies to any data processed in Malaysia. PowerSchool is not subject to GDPR, yet PowerSchool is identifying and analyzing the feasibility of complying with the privacy laws in Southeast Asia as a good governance measure.
i. United Kingdom

Post-Brexit, the GDPR, 2018 is not applicable to UK. Instead, the data privacy law in UK, the Data Protection Act, 2018 – which was a domestication and implementation...  more +
Close 2
Post-Brexit, the GDPR, 2018 is not applicable to UK. Instead, the data privacy law in UK, the Data Protection Act, 2018 – which was a domestication and implementation of the GDPR when the UK was still part of the EU, controls how businesses process personal data. It imposes the duty on every person using personal data to comply with the seven ‘data protection principles’. The Act provides the UK citizens numerous rights over their data as used by government, businesses, and private organizations. Through our agreements with our customers and our internal processes, PowerSchool complies with this Act as a data processor to our customers who engage directly with data subjects. or are impacted by our customers’ use of our services.
j. United States

The existence of United States federal laws such as Family Educational Rights and Privacy Act (FERPA) drive the data privacy rights and protection requirements...  more +
Close 2
The existence of United States federal laws such as Family Educational Rights and Privacy Act (FERPA) drive the data privacy rights and protection requirements for student education records. Recently, the United States has experienced an explosion in the number of state-level data privacy laws protecting personal data of individuals. PowerSchool works to understand and to comply with each of these laws as we act as a data processor for student educational records.

XI. Links to Other Sites.

Our Websites may provide links to third party websites or resources. The information practices of those websites are not covered by this Privacy Statement or any othuer policies or terms applicable to PowerSchool Products or Websites. We recommend that you review any terms of use and privacy policies of any linked third-party website before providing any personal information.

XII. In the Event of Corporate Transition.

In the event that PowerSchool is acquired by or merged with a third-party entity, we reserve the right, in any of these circumstances, to transfer or assign the personal information our Customers have provided to us from our Users as part of such merger, acquisition, sale, or other change of control to the new data processor. In the unlikely event of our bankruptcy, insolvency, reorganization, receivership, or assignment for the benefit of creditors, or the application of laws or equitable principles affecting creditors’ rights generally, we may not be able to control how your personal information is treated, transferred, or used. Nevertheless, in such a circumstance, PowerSchool would request that all applicable data privacy standards no less stringent than our own shield the personal information already in our possession. In the event that information is shared in any manner, notice will be posted on our site.

XIII. Changes to the Statement

We may update this Privacy Statement and its last updated date to reflect changes to our data governance practices. If we propose to make any material changes, we will notify you by means of a notice on our public facing webpage page prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices.

XIV. Contact Us.

If you have any questions or concerns about your privacy or this Privacy Statement, please contact us via our Data Subject Access Form.

You may also write to us at:

PowerSchool Holdings, Inc.
150 Parkshore Dr. Folsom, CA 95630
USA
ATTN: Privacy
Chief Privacy Officer
Phone Number: 1 (916) 790-1509

If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third-party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.

* Note: © PowerSchool. PowerSchool and other PowerSchool marks are trademarks of PowerSchool Holdings, Inc. or its subsidiaries.

** Other names and brands may be claimed as the property of others.

Respecting Your Student’s Data Privacy is Critical to PowerSchool

PowerSchool’s Privacy Principles

Lawful Processing

Fairness

Control

Uniformity

Transparency

Purpose Limitation

Privacy by Design

Data Minimization

Accuracy

Storage Limitation, and Disposal

Privacy Rights

Security

Accountability

Frequently Asked Questions

Who is a Data Subject and what are Data Subject Rights?

What Personal Data does PowerSchool collect about me?

How does PowerSchool protect my Personal Data?

Who controls the content/data on PowerSchool products?

Does PowerSchool sell my data?

Does PowerSchool share my data without consent?

How does PowerSchool use my Personal Data?

Where does PowerSchool store my Personal Data?

When does a data subject need to refer to PowerSchool Global Privacy Statement?

Who Owns Student Data Provided to PowerSchool by Customers for Processing?

Is PowerSchool a “data controller” or a “data processor”?

How are data subject requests concerning Customer Data and Collected Data handled at PowerSchool?

Global Privacy Statement

I. Introduction

A. Data Categories

B. Customer Data

C. Collected Data

D. Transaction Data

E. Commitment to Protecting Your Data

F. Children's Privacy

G. Data Subject Rights

H. Data Retention

I. Data Subprocessors

J. Legitimate Interest

K. Bases of Processing

II. MyPowerHub

III. PowerSchool Cloud Offerings

A. Student Information Cloud

1. Student Information Systems.

a) PowerSchool SIS

b) eSchoolPlus

2. Document Management.

3. Special Programs.

4. Ecollect Forms.

5. Enrollment.

6. Enrollment Express.

7. PowerSchool Neverskip ERP

B. Personalized Learning Cloud

1. Schoology Learning.

2. Curriculum & Instruction.

3. Performance Matters.

4. ContentNav.

C. Talent Recruitment & Retention Cloud

1. Perform.

2. Professional Learning.

3. Applicant Tracking.

4. Candidate Assessment.

5. Coaching and Mentoring.

6. Employee Records.

7. Premium Library.

8. SchoolSpring Job Board – Administrative View.

9. SmartFind Express (Absence Management).

D. Resource Planning Cloud

1. eFinance Plus ERP.

2. Atrieve ERP.

3. BusinessPlus.

4. Allovue Allocate.

5. Allovue Manage.

6. Allovue Budget Suite.

E. Student Success Cloud

1. MTSS.

2. Attendance Intervention.

3. Behavior Support.

F. College, Career, & Life Readiness Cloud

Frequently Asked Questions  

Who is a Data Subject and what are Data Subject Rights?  

What Personal Data does PowerSchool collect about me?  

How does PowerSchool protect my Personal Data?  

Who controls the content/data on PowerSchool products?  

Does PowerSchool sell my data? 

How does PowerSchool use my Personal Data?  

Where does PowerSchool store my Personal Data?  