Privacy Policy
We recognize the great importance of keeping your personal data private and secure. By using Banzai, you demonstrate a trust in us that we are determined to never violate in any way. We have prepared this Privacy & Security Policy to help you understand what information we collect from you, what we do with it, and how we protect it. We will not make material changes to our privacy policies without prior notice and will allow you to make choices before data is used inconsistently with initially provided terms.
We are committed to the responsible stewardship and appropriate use of personal information, including Student Personally Identifiable Information (Student PII). We do not collect, maintain, use, or share Student PII beyond what is needed for authorized educational/school purposes or as authorized by the parent/student. We will not sell Student PII.
No one can compel us to reveal data which we do not have. For this reason, we limit the information we collect from you.
Children's Online Privacy Protection Act Compliance
We request the birth date of every visitor to our website seeking to create a student user account. In the event the birth date provided indicates a user to be under thirteen, we will not collect any personal information from that user and we will block them from using an email address as their username.
Notwithstanding any other provision of this Policy, Banzai never knowingly collects personal information from any user under the age of thirteen. In the event we discover or are informed that we have inadvertently collected personal information from a user under the age of thirteen, we will permanently delete such information and flag the user's account to prevent any future collection as soon as technically feasible. If you know or suspect any user under the age of thirteen to be using Banzai under pretenses of being thirteen or older, please contact us immediately via email at legal@banzai.org.
Note that birth dates provided by student users under the age of thirteen as part of our COPPA compliance process will not be used for any other purpose and are deleted from our systems as soon as technically feasible.
Information We Collect
Information You Provide
As you sign up for and use Banzai and its related services, you will be given the opportunity to provide various pieces of information to us. While some of these items may be required to use Banzai, others are optional. You may provide this information to us in a variety of ways, including by interacting with our website, sending us an email or other electronic communication, and so on.
Information We Obtain from Your Web Browser Using Cookies
To improve your user experience, Banzai uses browser cookies as a means of recognizing whether you have visited the site before and, if so, in what capacity. While the contents of these cookies have meaning to us, they contain no information which could be used by anyone else to personally identify you. These cookies are used solely for maintaining your session and ensuring a seamless user experience. Cookies do not contain information that could personally identify you to others.
Technical Information We Gather When You Visit the Site
Your browser passes certain information to our web servers during every visit, including data concerning the configuration of your computer and network connection and the means by which you are connecting to our site. This data may be recorded in log files stored on our server. Any data collected will only be used for system improvement and to enhance our educational services.
Information You Give to a Site Affiliated with Us
If you provide information to a third-party site with which we have an affiliate relationship, the operators of that site may share that information with us in accordance with their own privacy policy.
How We Use Your Information
As you would expect, we will use the information we collect from you to deliver the services and, if applicable, the products associated with your use of Banzai. We may analyze this information in an effort to make Banzai better, as well as to improve the technical functioning of the system as a whole. From time to time, you may see customized content on your homepage or elsewhere within the site that is based upon our analysis of the information we have collected from you.
If you provide us with your email address, it will be used to deliver information related to your use of Banzai, the status of your account, and may occasionally be used to announce or discuss new and existing features and functionality. The only messages you receive as a result of using the service will be from us.
Student Account Users
If you sign up to use Banzai as a student, you will be required to associate your account with a class established by a user who has signed up to use Banzai as a teacher. By doing so, that teacher will have access to all of the information you provide in your interaction with the website. That teacher will also be able to login to your account and make changes as if they were you. Aside from the information sharing with teacher users described above, our information sharing of student user website data with other non-affiliated third parties is strictly limited to aggregated reporting and contains no personally-identifiable information.
Banzai does not use or disclose student information collected through our services for behavioral targeting of advertisements to students, nor do we build personal profiles beyond supporting authorized educational purposes. We will maintain a comprehensive security program to protect the security, confidentiality, and integrity of Student PII.
Teacher Account Users
If you sign up to use Banzai as a teacher, we may share the information you provide to the website, including personally identifiable information including but not limited to your name and email address (but never your password) to non-affiliated third parties for the purpose of delivering optional products or services related to your use of the Banzai website. You have the right at any time to opt-out of this information sharing by emailing us at privacy@banzai.org.
Technical Services
We may provide technical information about your use of the service (such as your Internet Protocol address) to third parties as necessary to provide services on the website or to enforce the Terms of Use.
We may elect to outsource certain technical services to third-party providers as necessary to ensure that you receive the best possible user experience. Authorized personnel at these organizations may be given access to databases containing user information for the sole purpose of performing technical maintenance tasks. In these cases, we will require that vendors follow our commitments to Student PII.
Legal Requirements
If we receive a subpoena or court order which we believe to be valid and enforceable, we reserve the right to share whatever information we have been ordered to provide.
Data Retention
Your user data may remain on our servers even after you stop using your account. If you do not intend to make further use of your Banzai account and would like us to permanently delete your user data send an email with your request to Banzai to privacy@banzai.org. Make sure to include with your request the username you use to login to the website. Upon receiving this request, we will delete your user account and all associated data from our active website user database. Note, however, that your data may remain in our database backup files for a period of time.
Upon written request from the LEA, Banzai will dispose of or securely transfer all Student Data within 90 days, ensuring it is not retained beyond the agreed period unless required by law.
We do not retain Student PII beyond the period required to support authorized educational purposes or as required by law.
Security
We protect your security both by limiting the amount of personally identifiable data we retain, as described above, and by ensuring that appropriate measures are taken to secure the data we do store. We will use encryption protocols that comply with applicable laws and ensure that all Student Data is encrypted at rest and in transit. We also require all employees and subprocessors with access to data to be trained on privacy laws. Some of the security measures we've implemented are shown below.
Employee Background Checks
All employees of Banzai who have direct contact with student will pass criminal background checks as required by applicable law.
Storage Location
All Student Data will be stored within the United States only.
Audits and Data Breach Notification
We will allow the LEA or its designees to audit our data security measures annually or following any unauthorized access. In the event of a data breach, will notify LEA within 72 hours of confirmation of the incident.
SSL Encryption
When accessing critical parts of the Banzai website, transmissions between your web browser and our servers are encrypted using the Secure Sockets Layer protocol. Your data will be encrypted using a key up to 256 bits in length (the exact key length is dependent upon your browser).
Data Backup
All user data stored in the Banzai web application is backed up nightly, providing protection in the unlikely event that the server upon which your data resides fails or sustains physical damage.
Intrusion Protection
We have implemented a variety of technical safeguards to minimize the possibility of an unauthorized user gaining remote access to our servers. These measures include, but are not limited to, utilizing a firewall to protect server data, restricting the number of individuals with administrative access to the server and databases, and taking appropriate steps to secure administrative login credentials.
Password Encryption
Your password is stored in our user database in an encrypted format. Even server administrators do not have access to it.
Physical Security
All of our servers are located in secure facilities designed to deter attempts at unauthorized physical access.
Successor Entity Compliance
In the event of a merger or acquisition, we will allow a successor entity to maintain Student PII only if that entity is subject to the same privacy commitments outlined in this policy for the previously collected Student PII.
Changes
Please note that this Privacy & Security Policy may change from time to time. We will always post the most up-to-date version of the Policy on our website for you to review. We will attempt to give you advance notice of any substantive changes, but reserve the right to make such modifications immediately if required.
We will not make material changes to this policy without providing prominent notice and allowing you to make choices before data is used in any inconsistent manner.
Definitions:
Local Education Agency (LEA): Refers to a public school district, charter school, or any other public authority that is legally constituted within a state to provide administrative control or direction for public elementary or secondary schools. The LEA is responsible for managing public education at the local level and is a party to agreements governing the use of student data.
Student Personally Identifiable Information (Student PII): Information that can be used to identify a student, such as their name, address, date of birth, student ID number, or any other information that, alone or in combination, is linked or linkable to a specific student and would allow a reasonable person to identify the student with reasonable certainty.
Subprocessor: A third party that the provider uses to collect, process, store, or otherwise manage data on behalf of the provider to deliver services. Subprocessors must adhere to the same data privacy and security requirements as the provider.
Encryption: The process of converting data into a coded format that can only be read by those possessing a specific decryption key or password, ensuring that the data is protected and secure from unauthorized access.
Data Breach: An incident where there is an unauthorized access to, or acquisition of, Student PII or APPR Data that compromises the security, confidentiality, or integrity of the data.
Data Retention: The period during which the provider retains Student PII or APPR Data as necessary to fulfill the purposes for which it was collected, as required by law, or as authorized by the LEA.
Contact Information
If you have questions or concerns regarding our Privacy & Security Policy, feel free to contact us via email at privacy@banzai.org or by mail at Banzai Inc., 2230 North University Parkway, Building 14, Provo, Utah 84604-1509, United States.