Role-based access
Access to information should match each user's responsibilities and permissions.
Transparency, trust, and privacy
Privacy resource center
Privacy Policy
Aras Academy
This page explains the principles governing account information, educational data, user access, information security, and privacy at Aras Academy.
Last updated:
Our Privacy Principles
Transparent use
The purposes for collecting and using information should be clear.
Educational data care
Student educational information requires particular care and privacy protection.
Section
Privacy by User Role
Visible information and permitted actions should depend on a user's role, relationship to a class, and assigned permissions.
Teacher
Class and educational information should only be accessible within the teacher's responsibilities and permissions.
Student
Students should be able to access permitted information about their own accounts and educational records.
School Administrator
Administrative access should be limited to defined duties and the account's actual permissions.
These statements describe intended access principles. Actual access depends on the permissions and features implemented in the platform.
Section 1
Introduction and Scope
This policy explains privacy principles and the responsible handling of information at Aras Academy. Use of the platform should respect user confidentiality and applicable legal requirements.
- Information should be used for specific purposes related to educational services.
- Access should be appropriate to each user's role and responsibilities.
- Users should be able to request guidance about their information and how it is used.
Section 2
Information That May Be Processed
Depending on the features you use, information needed to create accounts, provide educational services, and operate the platform may be processed. The actual information depends on enabled features and what users or authorized personnel provide.
- Account information such as names, contact details, and login information.
- Educational information such as classes, courses, assignments, exams, attendance, and grades.
- Technical information and events needed to support security and platform operation, where recorded by the system.
Section 3
How Information Is Used
Information should be used only for purposes related to the platform's services and within authorized access. Use for an incompatible purpose requires appropriate review and authorization.
- Creating and managing user accounts.
- Providing educational features and displaying relevant records to authorized users.
- Responding to support requests and technical issues.
- Investigating security events and preventing unauthorized access.
Section 5
Information Security
Protecting information requires technical and organizational measures. Appropriate safeguards should reflect the type of data, level of risk, and platform capabilities. No method of transmitting or storing information should be assumed to be entirely risk-free without assessment.
- Restricting access to authorized accounts and areas.
- Using appropriate safeguards to protect information in transit and at rest.
- Addressing reports of suspicious access and potential vulnerabilities.
- Avoiding the sharing of passwords and login credentials.
Section 6
Accounts and Authentication
Users should protect their accounts and login credentials and must not share credentials with others. Suspected account misuse or unauthorized access should be reported through the platform's support channels.
- Using a strong, hard-to-guess password.
- Signing out on shared devices.
- Promptly reporting suspected account compromise or misuse.
- Granting access only through authorized platform procedures.
Section 7
Educational Data and Student Privacy
Educational information may include coursework, exam responses, assignments, grades, and attendance. Such information requires careful handling and should be used only for authorized educational and administrative purposes.
- Students should be able to access permitted information about their own accounts and educational records.
- One student's information should not be visible to other students without appropriate authorization.
- Teacher and administrator access should be limited by role, relevant class, and actual permissions.
- The age and interests of students and applicable legal requirements should be considered when handling student information.
Section 9
Information Retention
Information should be retained only for as long as needed to provide services, fulfill educational responsibilities, maintain security, or meet legal requirements. Retention periods should be determined according to the purpose and circumstances of each data type.
- The need to retain information should be reviewed periodically.
- Deletion or anonymization should follow applicable legal and operational requirements.
- Some records may need to be retained for educational responsibilities or dispute resolution.
Section 10
User Rights
Users may ask questions about information associated with their accounts and request a review if they identify inaccurate information or have concerns about its use. Handling each request depends on the user's role, the type of information, and applicable legal requirements.
- Requesting information about records held and their use.
- Requesting correction of inaccurate information through authorized channels.
- Reporting access or use that appears unauthorized.
- Following up on requests through the available support channels.
Section 11
Changes to This Policy
This policy may be reviewed when platform features, information-processing practices, or legal requirements change. The updated version should be published on this page, and significant changes should be communicated to users where appropriate.
- The latest update date is displayed on this page.
- Users should review the updated policy when needed.
Section 12
Contact About Privacy
If you have questions about account information, educational records, or data use, contact support through the channels provided on the platform. Do not include unnecessary personal information or passwords in your message.
- Describe the subject of your request as clearly as possible.
- Never send passwords or login verification codes.
Questions About Privacy?
If you have questions about account information, educational records, or data use, contact support through the channels provided on the platform. Do not include unnecessary personal information or passwords in your message.