Purpose
This Data Security Policy outlines the measures ASLdeafined takes to protect the identifiable and non-identifiable information of its users, particularly students, educators, and other stakeholders. We are committed to ensuring data privacy and security while minimizing the collection of personally identifiable information (PII).
Data Collection Practices
- Minimal Data Collection
- ASLdeafined does not collect or use email addresses, full names, or other PII unnecessarily.
- Usernames created for accounts may remain unidentifiable and are often assigned based on teacher-defined formats.
- Student Accounts
- For school-age students, ASLdeafined ensures that no email addresses are collected during account creation.
- Teachers and administrators may assign usernames in formats that prevent identification of the student’s real name or other identifying details.
- Educator and Administrative Accounts
- For teacher and administrator accounts, limited information may be collected to facilitate account setup and secure access, such as a username and a secure password.
Data Usage and Purpose
- The sole purpose of any identifiable information collected (e.g., usernames or secure login credentials) is to enable user access to individual accounts.
- No collected data is used for marketing, sales, or sharing with third-party services.
Data Protection Measures
- Encryption
- All data stored within ASLdeafined systems is encrypted in transit and at rest using industry-standard encryption protocols.
- Secure Authentication
- User accounts are secured by robust password protection mechanisms to ensure only authorized access.
- Multi-factor authentication (MFA) may be implemented for administrative accounts where applicable.
- Restricted Access
- Access to user data is strictly limited to authorized personnel who require it for account management or technical support.
- Data is never shared with unauthorized individuals or third parties.
- Regular Security Audits
- ASLdeafined conducts regular security audits and vulnerability assessments to ensure compliance with industry best practices.
Student Privacy Compliance
- ASLdeafined adheres to applicable student privacy regulations, including FERPA (Family Educational Rights and Privacy Act) and COPPA (Children’s Online Privacy Protection Act).
- All collected data is handled in a manner that protects the rights and privacy of minors.
Data Retention and Deletion
- User data is retained only as long as necessary to fulfill the purposes of the platform (e.g., maintaining user accounts).
- Upon account deletion or at the request of an authorized user or institution, all related data is permanently removed from our systems.
Incident Response
- ASLdeafined has an incident response plan in place to address potential security breaches or unauthorized data access.
- In the unlikely event of a breach, affected users and relevant authorities will be promptly notified, and corrective actions will be taken immediately.
Commitment to Privacy
ASLdeafined is committed to upholding the privacy and security of all users. We actively work to maintain a safe, secure environment that prioritizes the protection of data, particularly for school-age users.
