Instructure Paid Canvas Privacy Policy

Last Updated: February 28, 2014

Instructure, Inc. (“Instructure”) is committed to protecting your privacy. We have prepared this Privacy Policy to describe our practices regarding the personal information that may be collected from users of our websites which post this Privacy Policy, including http://canvas.instructure.com (“Site”), Instructure’s Canvas iOS, Android, and other mobile applications (“Apps”), and other related educational services (“Services”). By submitting personal information through our Site, Apps, or Services, you expressly consent to the processing of your personal information in the U.S. in accordance with this Privacy Policy. The use of personal information collected through our service shall be limited to the purposes described in this Privacy Policy.

IMPORTANT NOTICE FOR SCHOOL USERS: If you are a user (or a parent of a user) who was given access to the Services by the organization you are affiliated with, this Privacy Policy does not govern your organization’s collection, use, or disclosure of personal information through the Site, Apps, or Service. We are not responsible for your organization’s collection, use, or disclosure of your personal information. Please contact your organization to better understand your organization’s privacy practices. Instructure will retain personal information we process on behalf of organizations for as long as needed to provide services and as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Instructure uses only de-identified and aggregated data for its own purposes.

TRUSTe

Instructure, Inc. has been awarded TRUSTe’s Privacy Seal signifying that this privacy policy and practices have been reviewed by TRUSTe for compliance with TRUSTe's program requirements and the TRUSTed Cloud Program Requirements including transparency, accountability and choice regarding the collection and use of your personal information. The TRUSTe program covers only information that is collected through these Sites http://www.instructure.com, http://canvas.instructure.com, http://www.canvas.net and the associated Services. The TRUSTe Program does not cover information that may be collected through mobile applications, or information collected offline.

TRUSTe’s mission, as an independent third party, is to accelerate online trust among consumers and organizations globally through its leading privacy Trustmark and innovative trust solutions. If you have questions or complaints regarding our privacy policy or practices, please contact us at privacy@instructure.com. If you are not satisfied with our response you can contact TRUSTe here.

U.S.—E.U. and U.S.—Swiss Safe Harbor.

Instructure, Inc. complies with the U.S.—E.U. Safe Harbor framework and the U.S.—Swiss Safe Harbor framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal data from European Union member countries and Switzerland. Instructure has certified that it adheres to the Safe Harbor Privacy Principles of notice, choice, onward transfer, security, data integrity, access, and enforcement. To learn more about the Safe Harbor program, and to view Instructure’s certification, please visit http://www.export.gov/safeharbor/

Data You Provide to Us.

We collect information from you, such as first and last name, gender, e-mail and mailing addresses, professional title, company name, and password when you create an account to log in to our network. We also may retain information on your behalf, such as files and messages that you store using your account. If you provide us feedback or contact us via e-mail, we will collect your name and e-mail address, as well as any other content included in the e-mail. When you participate in one of our surveys, we may collect additional profile information. We also collect other types of personal information and demographic information that you provide to us voluntarily.

Data Collected via Technology.

To make our Site, Apps, and Services more useful to you, our servers (which may be hosted by a third party service provider) collect information from you, including browser type, operating system, Internet Protocol (IP) address (a number that is automatically assigned to your computer when you use the Internet, which may vary from session to session), domain name, unique device identifiers, information about how you use our Site and Apps, and/or a date/time stamp for your visit. We also use cookies and web beacons (as described below) and navigational data like Uniform Resource Locators (URL) to gather information regarding the date and time of your visit and the solutions and information for which you searched and which you viewed. Like most Internet services, we automatically gather this data and store it in log files each time you visit our Site, use our Apps, or access your account on our network. We may link this automatically-collected data to personally identifiable information.

“Cookies” are small pieces of information that a website sends to your computer’s hard drive while you are viewing a website. We may use both session cookies (which expire once you close your web browser) and persistent cookies (which stay on your computer until you delete them) to provide you with a more personal and interactive experience on our Site.

“Web beacons” are digital images we use to log information on our Site and in our emails. We use web beacons to manage cookies, count visits, and to learn what marketing works and what does not. We also use web beacons to tell if you open or act on our emails.

“Flash Cookies” are used to store your preferences such as volume control or to display content based upon what you view on our websites to personalize your visit. Third party partners who provide certain features on our websites, such as videos, may place Flash cookies on your device. They may use Flash cookies to track your web browsing activity and to display personalized advertising. Flash cookies are different from other cookies because of the amount of, type of, and way in which data is stored. Cookie management tools provided by your browser usually will not remove Flash cookies. To learn more about Flash cookies, who has placed Flash cookies on your device, and how to manage privacy and storage settings for Flash cookies click here: http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager.html#117118. We do not control the privacy practices of the third parties who place or track Flash cookies and this privacy policy does not cover their practices. You should visit the privacy policies of companies who place Flash cookies to understand their practices.

Analytics. We use analytics services to help analyze how users use the Site and Apps. These services use cookies and scripts to collect and store information such as how users interact with our Apps, errors users encounter when using our apps, device identifiers, how often users visit the Site, what pages they visit, and what other sites they used prior to coming to the Site. We use the information we get from Google Analytics only to improve our Site, our Apps, and our Services. Please see the following links for more information about Google Analytics: http://www.google.com/privacy_ads.html, http://www.google.com/privacy.html, and http://www.google.com/analytics/tos.html. We do not tie the information gathered using third party analytics to your personally identifiable information.

Forums

Our Site and Apps offer community forums. You should be aware that any information you provide in these areas may be read, collected, and used by others who access them.

Use of Your Data

Personal information you submit to us is used either to respond to requests that you make, or to aid us in serving you better. Instructure uses your personal information in the following ways: to create and maintain your account; to identify you as a user in our system; to operate, maintain, and improve our Site, Apps, and Services; to personalize and improve your experience; to send you administrative e-mail; to respond to your comments or inquiries; to send you surveys, promotional communications about our products and services with your permission; to protect, investigate, and deter against fraudulent, unauthorized, or illegal activity; and to make telephone calls to you, from time to time, as a part of secondary fraud protection or to solicit your feedback with your permission.

Disclosure of Your Personal Information

We will share your personal information with third parties only in the ways that are described as follows or with your express consent.

Affiliates. Although we currently do not have a parent company, any subsidiaries, joint ventures, or other companies under a common control (collectively, “Affiliates”), we may in the future. We may share some or all of your information with these Affiliates, in which case we will require our Affiliates to honor this Privacy Policy.

Third Party Service Providers. We may share your personal information with third party service providers for the sole purpose of providing you with the Services that we offer you through our Site. For example, we may share data with service providers who host our websites or provide email services on our behalf.

Other Disclosures. Instructure may disclose information about you if it believes such disclosure is necessary to (a) comply with laws or to respond to lawful requests and legal process; or (b) protect or defend the rights, safety, or property of Instructure, users of the Services, or any person including to enforce our agreements, policies, and terms of use, or (c) in an emergency to protect the personal safety of any person.

We may also share information about you in connection with or during negotiation of any merger, financing, acquisition, bankruptcy, dissolution, transaction or proceeding involving sale, transfer, divestiture or disclosure of all or a portion of our business or assets to another company. In the event that information is shared in this manner, notice will be posted on our Site.

We may also share de-identified and aggregated data with others for their own uses.

Social Networking Platforms.

We may allow you to connect and share information with certain social networking platforms (“Social Networking Platforms”) (e.g., a Facebook application). By choosing to use these Social Networking Platforms, you allow Instructure to share information with the Social Networking Platform. For example, you might use an application to publish Instructure related notices on your Facebook wall. If you do not want us to continue to provide your information to the Social Networking Platform, you may change your privacy settings in the Social Networking Platform.

You can also access certain features of our Site using Social Networking Platforms. These services will authenticate your identity and provide you the option to share certain personal information with us such as your name, email address, and other personal information to pre-populate an application.

We do not control the privacy practices of the Social Networking Platforms and sign-in services you choose to use and this privacy policy does not cover their practices, you should visit the privacy policies of any Social Networking Platform or sign-in service you choose to use to understand their practices.

Your Choices Regarding Your Personal Information

Choices. We offer you choices regarding the collection, use, and sharing of your personal information. When you receive newsletters or promotional communications from us, you may “opt-out” by following the unsubscribe instructions provided in e-mails you receive from us or by contacting us directly at the contact information below. Most web browsers are set to accept cookies by default. If you prefer, you can typically remove and reject cookies from our Site with your browser settings. If you remove or reject our cookies, it will affect how our Site and Services work for you.

When you visit the Site, we and others give you the following choices about use of mechanisms for tracking, including tracking of your online activities over time and across different websites and online services by third parties:

While we and others give you the choices described in this Privacy Policy, there are many ways web browser signals and other similar mechanisms can indicate your choice to disable tracking, and we may not be aware of or honor every mechanism.

Changes to Personal Information. You may change some of your personal information in your account by editing your profile within the Service. You may also request changes or deletions by e-mailing us at the e-mail address set forth below. We will respond to your request, when permitted by law, within 30 days. We will retain your information for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. We may be unable to delete information that resides in our archives.

Security of Your Personal Information. Instructure takes reasonable steps to help protect your personal information in an effort to prevent unauthorized access, use, or disclosure. Despite these measures, you should know that Instructure cannot fully eliminate security risks associated with personal information. No method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security. Any content you post while using the Services is at your own risk. If you have any questions about security on our Site or Apps, you can contact us at the contact information set forth below.

Contact Information

Instructure welcomes your comments or questions regarding this Privacy Policy. Please e-mail us at privacy@instructure.com or contact us at the following address or phone number:

Instructure, Inc.
6330 S 3000 E, STE 700
Salt Lake City, UT 84121
(801) 869.5000

Changes to This Privacy Policy.

Instructure may change this Privacy Policy from time to time. If we make any changes to this Policy, we will change the "Last Updated" date above. If such changes are material, a notice of the changes will be posted along with the revised Privacy Policy, prior to the change becoming effective. We encourage you to visit this page from time to time for the latest on our privacy practices.