At a glance
These addenda apply in addition to our Privacy Policy for districts in California and New York.
California (AB 1584 and SOPIPA)
- The district owns and controls all pupil records and staff data.
- Pupils may keep content they create; Pulse is staff-facing and does not collect pupil-created content.
- We never use data for targeted advertising, never sell it and never build profiles for non-school purposes.
- Parents, legal guardians or eligible pupils may review and correct records through the district.
- Staff who handle data are trained on its confidentiality.
- We notify the district of any unauthorized disclosure.
- Data is deleted at the end of the contract, confirmed with a deletion certificate.
- Pulse complies with FERPA and acts as a school official.
New York (Education Law 2-d) — Parents' Bill of Rights
- A student's personally identifiable information cannot be sold or released for commercial purposes.
- Parents may inspect and review their child's education records through the district.
- Data is protected by encryption, firewalls and safeguards meeting industry standards.
- Parents may file complaints about possible breaches with the district or the NYSED Chief Privacy Officer.
NY Supplemental Information
- Exclusive purpose: to provide walkthrough, coaching and improvement-plan tools to the district.
- Subcontractors: listed on our Subprocessors page and bound by the same data protection duties.
- Contract end: data is returned through the district export and then securely deleted.
- Challenges to accuracy: made through the district, which tracks requests in Pulse with a 30-day due date.
- Storage: hosted in the United States, encrypted in transit and at rest.
- Security: aligned with the NIST Cybersecurity Framework.
Questions about privacy?
We're happy to walk your legal or IT team through it.