App Vetting Profile for Wayside Publishing APprenons

Product: Wayside Publishing APprenons

Vetted by Kevin Lewis, Data Privacy Officer at 1EdTech on 2022-01-24

App Vetting Capability: Expert (Self Rated)

Privacy Rubric Results

N/A
UNMET
PARTIAL
MEETS

Data Collection

Security

3rd Party Data

Advertising

Certified

Rubric Area	Expectations
General	Meets	Partially Meets	Doesn't Meet
User Notes User Notes GEN1 - How are changes to key policies managed? ANSWER: Notification is provided to the user in advance and a history of policy revisions are available User Notes: We will provide notice on our website if we make any material changes to our privacy policies that relate to the collection or use of Student Education Records. We will provide notice on our website if we make any material changes to our privacy policies that relate to the collection or use of Student Education Records.	Answer Meets Expectations	Unselected Option:	Unselected Option:
Data Collected	Meets	Partially Meets	Doesn't Meet
User Notes User Notes DCQ1 - Do the policies list all data collected? ANSWER: Policies list the data collected OR policies state no data is collected User Notes: What information do we collect? If you create an account for use of the Wayside Services or communicate with Wayside you may provide what is generally called “personal information” or “personal data,” such as your full name, email address or other information that can be used to identify you. Information that cannot be used to identify you as an individual is called “de-identified” or non-personal information. We collect information, including personal information, in a variety of ways which may vary according to your use of the Services and your account settings. The categories of personal information we collect may include: Contact and profile information. When you create an account with Wayside or communicate with us we may collect personal information including your name and email address. After you register, you may also choose to provide additional information in your profile, such as your location (city, state) and other personal or demographic information. In addition, we may ask you for personal information at other times, such as when you contact our technical support team, send us an email, or otherwise communicate with us. What information do we collect? If you create an account for use of the Wayside Services or communicate with Wayside you may provide what is generally called “personal information” or “personal data,” such as your full name, email address or other information that can be used to identify you. Information that cannot be used to identify you as an individual is called “de-identified” or non-personal information. We collect information, including personal information, in a variety of ways which may vary according to your use of the Services and your account settings. The categories of personal information we collect may include: Contact and profile information. When you create an account with Wayside or communicate with us we may collect personal information including your name and email address. After you register, you may also choose to provide additional information in your profile, such as your location (city, state) and other personal or demographic information. In addition, we may ask you for personal information at other times, such as when you contact our technical support team, send us an email, or otherwise communicate with us.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes DCQ2 - Do the policies indicate how data is collected? ANSWER: Policies state specifically how data is collected OR policies state no data collected User Notes: What information do we collect? If you create an account for use of the Wayside Services or communicate with Wayside you may provide what is generally called “personal information” or “personal data,” such as your full name, email address or other information that can be used to identify you. Information that cannot be used to identify you as an individual is called “de-identified” or non-personal information. We collect information, including personal information, in a variety of ways which may vary according to your use of the Services and your account settings. The categories of personal information we collect may include: Contact and profile information. When you create an account with Wayside or communicate with us we may collect personal information including your name and email address. After you register, you may also choose to provide additional information in your profile, such as your location (city, state) and other personal or demographic information. In addition, we may ask you for personal information at other times, such as when you contact our technical support team, send us an email, or otherwise communicate with us. What information do we collect? If you create an account for use of the Wayside Services or communicate with Wayside you may provide what is generally called “personal information” or “personal data,” such as your full name, email address or other information that can be used to identify you. Information that cannot be used to identify you as an individual is called “de-identified” or non-personal information. We collect information, including personal information, in a variety of ways which may vary according to your use of the Services and your account settings. The categories of personal information we collect may include: Contact and profile information. When you create an account with Wayside or communicate with us we may collect personal information including your name and email address. After you register, you may also choose to provide additional information in your profile, such as your location (city, state) and other personal or demographic information. In addition, we may ask you for personal information at other times, such as when you contact our technical support team, send us an email, or otherwise communicate with us.	Answer Meets Expectations	Unselected Option:	Unselected Option:
DCQ3 - Do the policies state who owns the data? ANSWER: Policies state the user owns the data alone OR policies state no data collected	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes DCQ4 - Do the policies allow users to delete their data entirely? ANSWER: Policies allow users to delete data entirely after a period of time OR policies state no data collected User Notes: The School is responsible for managing Student Education Records which the School no longer needs for an educational purpose by submitting a deletion request when such data is no longer needed. Please note that Wayside cannot comply with a School’s request to delete personal information in a user account except for Student User accounts created by a School (i.e., using a School email address and/or an account login provided by a School) pursuant to a contractual agreement between the School and Wayside, or unless the Student User (or the user’s Parent) requests deletion directly. The School is responsible for managing Student Education Records which the School no longer needs for an educational purpose by submitting a deletion request when such data is no longer needed. Please note that Wayside cannot comply with a School’s request to delete personal information in a user account except for Student User accounts created by a School (i.e., using a School email address and/or an account login provided by a School) pursuant to a contractual agreement between the School and Wayside, or unless the Student User (or the user’s Parent) requests deletion directly.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes DCQ5 - Do the policies state the retention of data? ANSWER: Policies have a 60-day or less retention policy OR policies state no data collected User Notes: We will not knowingly retain Student Education Records beyond the time period required to support an educational purpose, unless authorized by a School, adult student or Parent. We will not knowingly retain Student Education Records beyond the time period required to support an educational purpose, unless authorized by a School, adult student or Parent.	Answer Meets Expectations	Unselected Option:	Unselected Option:
Security	Meets	Partially Meets	Doesn't Meet
SECQ1 - Do the policies state how data is protected? ANSWER: Policies list the steps taken to protect data or OR policies state no data collected	Answer Meets Expectations	Unselected Option:	Unselected Option:
SECQ2 - Do the policies state all confidential & sensitive information is encrypted throughout? ANSWER: Data encrypted throughout OR passes an encryption test with no vulnerabilities OR policies state no data collected	Answer Meets Expectations	Unselected Option:	Unselected Option:
SECQ3 - Do the policies state whether or not it enforces strong password creation? ANSWER: Supplier enforces strong password creation OR supplier user base exempt from password requirements or OR no account creation required	Answer Meets Expectations	Unselected Option:	Unselected Option:
SECQ4 - Do the policies indicate whether or not it leverages 2 step (or other forms of multifactor) authentication? ANSWER: Supplier uses SSO or an LTI launch OR no account creation is required OR supplier user base exempt from 2-step authentication requirements	Answer Meets Expectations	Unselected Option:	Unselected Option:
SECQ5 - Do the policies state the use of cookies? ANSWER: Policies list all cookies used and each cookie's purpose OR policies state that it only uses cookies that are crucial for app functionality	Answer Meets Expectations	Unselected Option:	Unselected Option:
Third Party Data	Meets	Partially Meets	Doesn't Meet
User Notes User Notes SHRQ1 - Do the policies state the use of third parties? ANSWER: Policies list each third party separately OR policies state third party use strictly for app functionality OR policies state that they do not use third parties User Notes: We collect, maintain, use and share Student Education Records only for an authorized educational purpose in connection with the Services, or as directed by the School, the Student User and/or the student’s parent or legal guardian (a “Parent”). ● We do not disclose Student Education Records for targeted advertising purposes and do not engage in targeted advertising of Student Users. We collect, maintain, use and share Student Education Records only for an authorized educational purpose in connection with the Services, or as directed by the School, the Student User and/or the student’s parent or legal guardian (a “Parent”). ● We do not disclose Student Education Records for targeted advertising purposes and do not engage in targeted advertising of Student Users.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes SHRQ2 - Do the policies state what information is shared with each 3rd party? ANSWER: Policies list the data it shares with each third party separately OR policies state that it does not share any data with any third party User Notes: We collect, maintain, use and share Student Education Records only for an authorized educational purpose in connection with the Services, or as directed by the School, the Student User and/or the student’s parent or legal guardian (a “Parent”). ● We do not disclose Student Education Records for targeted advertising purposes and do not engage in targeted advertising of Student Users. We collect, maintain, use and share Student Education Records only for an authorized educational purpose in connection with the Services, or as directed by the School, the Student User and/or the student’s parent or legal guardian (a “Parent”). ● We do not disclose Student Education Records for targeted advertising purposes and do not engage in targeted advertising of Student Users.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes SHRQ3 - Do the policies state whether or not users can opt out of 3rd party data sharing? ANSWER: Policies include an easy opt out process for users OR policies state that it does not share any data with any third party User Notes: We will never sell Student Education Records unless the sale is part of a corporate transaction, such as a merger, acquisition, bankruptcy, or other sale of assets, in which case we will require the new owner to continue to honor the terms provided in this Privacy Policy or we will provide the School with notice and an opportunity to opt-out of the transfer of Student Education Records by deleting the Student Education Records before the transfer occurs. We will never sell Student Education Records unless the sale is part of a corporate transaction, such as a merger, acquisition, bankruptcy, or other sale of assets, in which case we will require the new owner to continue to honor the terms provided in this Privacy Policy or we will provide the School with notice and an opportunity to opt-out of the transfer of Student Education Records by deleting the Student Education Records before the transfer occurs.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes SHRQ4 - Do the policies state if the supplier requires 3rd parties to adhere to the terms of the vendor/customer agreement? ANSWER: Supplier claims responsibility for third party privacy practices OR policies state that it does not share any data with any third party User Notes: We will contractually require any service providers that we engage in connection with the Services who may receive Student Education Records acquired through our Services to use the information only to provide the contracted services, not to further disclose the information, to maintain reasonable data security measures, and to comply with applicable data privacy laws. We will contractually require any service providers that we engage in connection with the Services who may receive Student Education Records acquired through our Services to use the information only to provide the contracted services, not to further disclose the information, to maintain reasonable data security measures, and to comply with applicable data privacy laws.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes SHRQ5 - Do the policies state whether or not user is notified of a change in third parties? ANSWER: Supplier changes third party and keeps the same data sharing terms OR supplier does not use any third parties User Notes: We will not make any material changes to our Privacy Policy or contractual agreements that relate to the collection or use of Student Education Records without first giving notice to the School and providing a choice before the Student Education Records are used in a materially different manner than was disclosed when the information was collected. We will not make any material changes to our Privacy Policy or contractual agreements that relate to the collection or use of Student Education Records without first giving notice to the School and providing a choice before the Student Education Records are used in a materially different manner than was disclosed when the information was collected.	Answer Meets Expectations	Unselected Option:	Unselected Option:
Advertising	Meets	Partially Meets	Doesn't Meet
User Notes User Notes ADVQ1 - Do the policies indicate if advertisements are displayed? ANSWER: No ads are displayed User Notes: We do not disclose Student Education Records for targeted advertising purposes and do not engage in targeted advertising of Student Users. We do not disclose Student Education Records for targeted advertising purposes and do not engage in targeted advertising of Student Users.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes ADVQ2 - Do the policies indicate whether or not users are targeted for advertisement? ANSWER: Policies guarantee no ad targeting OR Policies state no ads are used on its platform User Notes: We do not disclose Student Education Records for targeted advertising purposes and do not engage in targeted advertising of Student Users. We do not disclose Student Education Records for targeted advertising purposes and do not engage in targeted advertising of Student Users.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes ADVQ3 - Do the policies indicate whether or not any 3rd parties track or collect information for advertisement? ANSWER: Policies state third parties are not used for ads or tracking User Notes: We do not disclose Student Education Records for targeted advertising purposes and do not engage in targeted advertising of Student Users. We do not disclose Student Education Records for targeted advertising purposes and do not engage in targeted advertising of Student Users.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes ADVQ4 - Do the policies indicate whether or not web beacons or other tracking methods are used for ad purposes? ANSWER: Policies state that it only tracks interactions within its application OR policies state that it does not use any tracking technologies for ads User Notes: We do not disclose Student Education Records for targeted advertising purposes and do not engage in targeted advertising of Student Users. We do not disclose Student Education Records for targeted advertising purposes and do not engage in targeted advertising of Student Users.	Answer Meets Expectations	Unselected Option:	Unselected Option:
User Notes User Notes ADVQ5 - Do the policies state whether or not users can opt out of sharing data with advertisers? ANSWER: Policies state in detail how users can opt out of sharing data with advertisers OR policies state no ads are used on its platform User Notes: We do not disclose Student Education Records for targeted advertising purposes and do not engage in targeted advertising of Student Users. We do not disclose Student Education Records for targeted advertising purposes and do not engage in targeted advertising of Student Users.	Answer Meets Expectations	Unselected Option:	Unselected Option:

Vetting Context

Policies Cited

The following urls were cited as a basis for this information.

The person providing this information is NOT using the product.
The supplier was reportedly consulted about this evaluation.

Geographical Context

(Laws and regulations can vary across regions)

Maine

United States

Regulatory Compliance

The information below provides insight into compliance with various regulatory policies.

GDPR Compliant: Unknown
FERPA Compliant: Yes
COPPA Compliant: Yes

This application can be used by children under the age of 13.

Email Kevin about this record

The views and opinions expressed in this information are those of the authors and do not necessarily reflect the official policy or position of 1EdTech. The information provided is intended to surface trends about the policies and procedures of systems leveraged by the educational community. It should not be considered legal advice.

Disclaimer: 1EdTech Trusted Apps provides a vetting of a product's data policy according to the 1EdTech Trusted Apps Rubric. Achieving the TrustEd Apps Certified Seal indicates adherence to a baseline level of privacy. Institutions should review an application's detailed vetting results before approving it for use.

App Vetting Rubric Version: 2

ABOUT US

TrustEd Apps Profile for Wayside Publishing APprenons