SISBridge Privacy Policy
Effective Date: 1 June 2025
Last Updated: 1 June 2025
Overview
SISBridge is a data migration tool designed to help educational institutions migrate their data from CSV files and Canvas LMS to BigQuery. We are committed to protecting student privacy and educational data in accordance with FERPA and other applicable privacy laws.
What We Do
Our Service: We provide automated data migration from CSV files and Canvas LMS to BigQuery for educational institutions.
Our Role: We act as a data processor on behalf of schools. We do not own or control the educational data we process.
Information We Process
We process only the educational data that schools choose to migrate through our service:
- CSV Data: Any data elements contained in CSV files provided by the school
- Canvas LMS Data: Course, enrollment, user, assignment, grade, and other Canvas data as selected by the school
- System Logs: Technical logs of migration activities for troubleshooting and verification
Data Control: Schools retain full control over what data they choose to migrate. We only process the specific data elements schools provide or authorize through Canvas API access.
How We Use Information
We use educational data solely for these authorized purposes:
- Migration Services: Automated processing and transfer of data to BigQuery
- Technical Support: Troubleshooting migration issues and ensuring data integrity
- Optional Visualization Services: Creating dashboards or reports when specifically requested by the school
We Do NOT:
- Sell, rent, or lease educational data to third parties
- Use data for commercial purposes unrelated to migration services
- Create student profiles for non-educational purposes
- Use data for advertising or marketing
- Combine student data with data from other sources
- Share data between different school clients
- Use data to train AI models or for analytics without explicit authorization
Data Security
We implement industry-standard security measures:
- Encryption for data in transit and at rest
- Access controls limiting data access to authorized personnel only
- Regular security updates and monitoring
- Secure authentication and network controls
Data Retention and Deletion
- Migration Data: Retained only during the migration process, typically no more than 30 days after successful completion
- Visualization Projects: Retained only for the duration of the specific project plus 30 days
- System Logs: Retained for troubleshooting purposes as specified in our service agreement
Upon completion of services or upon request, we securely delete all educational data using industry-standard methods.
Data Sharing
We do not share educational data with third parties except:
- Authorized Subcontractors: Only with school approval and under strict data protection agreements
- Legal Requirements: When required by law (with notice to the school when legally permissible)
- Emergency Situations: For health and safety purposes as permitted by FERPA
School and Student Rights
Schools retain full ownership and control of their educational data and may:
- Retrieve their data at any time
- Modify or terminate data processing
- Request reports on processing activities
Students and parents may exercise their FERPA rights through their school, including accessing, correcting, or requesting deletion of their educational records.
Third-Party Services
We use secure cloud infrastructure providers that maintain appropriate security standards for educational data. All subcontractors must comply with the same privacy and security requirements we follow.
Compliance
We maintain compliance with:
- Family Educational Rights and Privacy Act (FERPA)
- State student privacy laws
- Applicable data protection regulations
Contact Information
For privacy-related questions or requests:
SISBridge.com
Email: [email protected]
Changes to This Policy
We may update this privacy policy to reflect changes in our practices or applicable laws. We will notify school clients of any material changes and post the updated policy with a new effective date.
Schools should review our Data Processing Agreement for additional details about our data handling practices and contractual obligations.