隐私声明
本服务隐私声明适用于链接到本页面的Brisk Labs Corp.(“Brisk”、“我们”、“我们的” 或 “我们”)的产品和服务,例如Brisk的在线平台和网络浏览器扩展程序(统称为我们的 “服务”)。我们为briskteaching.com网站的访问者单独发布了网站隐私声明。
Through our Service, we provide productivity tools that speed up tasks like lesson planning and grading, engage student learning, and more. This Privacy Notice describes how we 1) collect, use and disclose your personal data as a controller when you use our Service or otherwise engage with us, and, 2) how we process personal data in our role as a processor when our Service is used by providers of educational services, such as schools and school districts (collectively, “Schools”), as well as teachers and authorized school users and administrators (collectively, “Educators”).
When the Service is used as part of a School’s educational curriculum, the personal data related to students (“Students”) that is (i) provided to Brisk by a School, or (ii) collected by Brisk during the provision of the Service to a School, may include information defined as “educational records” by the Family Educational Rights and Privacy Act (“FERPA”), “covered information” under California’s Student Online Personal Information Protection Act (“SOPIPA”), “personal information” under Canadian provincial and territorial privacy legislation, “personal information” under Australian Privacy Act 1988 (Cth) (“Privacy Act”) or other information protected by similar data privacy laws. We call this information “Student Data.” The School is the controller of Student Data, and we handle Student Data in our role as a processor on behalf of the School. If you are a Parent or Student and have questions about specific practices relating to Student Data provided to Brisk by a School, please direct your questions to your School.
Please see the “Student Data” section below to understand the principles which guide our collection, use and disclosure of Student Data.
For Australian users only, please refer to the end of this Privacy Notice for further information about our overseas disclosure requirements and complaints handling process.
For more information about our product available for students, please refer to our disclosures for Brisk Boost, below.
If you are an Educator who will use the Service in an educational setting, and your School has not entered into a separate student data processing agreement with Brisk, please note that the Brisk Student Data Processing Addendum applies to your use of the Service.
简而言之:“个人数据” 是指识别您的身份或与您有关或以其他方式符合以下定义的数据或信息。
When we use the term “personal data” in this Privacy Notice, we mean any data or information that identifies, relates to, describes, is capable of being associated with or could reasonably be linked, directly or indirectly, with a particular natural person or household.
In short: We collect personal data in the ways described below. For example, we may collect personal data when you register for an account on our Service, send us messages, subscribe to our mailing lists, participate in a survey, or integrate our Service with a third-party site or service. In addition, we may collect personal data automatically when you interact with our Service. We may also collect personal data about you from other sources and third parties.
您提供的信息
We collect the following information you provide in connection with our Service:
- Account Information, including full name, email address, School name, and other account information that you choose to provide to us.
- Inquiry and Communication Information, including information you provide to us when you submit a form, email us, or call us regarding our Service.
- Information Collected Through the Use of the Service, including any files, documents, videos, images, or other information you choose to provide through your use of the Service.
- Information from Educators, such as School name, district, teacher or authorized administrator title, organizational units associated with the School, course information and topics, grade levels taught, course work and assignments, course sections.
- Student-related Information, such as topics of study, assignments and content (e.g., homework), and grades. For more information about our privacy practices with regard to Student Data, please see the Student Data section below.
自动收集的个人数据
We and our third-party providers may use (i) cookies or small data files that are stored on an individual’s computer and (ii) other, related technologies, such as web beacons, pixels, embedded scripts, location-identifying technologies and logging technologies (collectively, “cookies”) to automatically collect certain data regarding how you interact with our Service, such as log files and analytics data. For more information about how we use cookies and your choices regarding cookies, please see our Cookie Notice for the Service.
来自第三方的个人数据
We also obtain personal data from third parties. We often combine with personal data we collect either automatically or directly from an individual. We may receive the same categories of personal data as described above from the following third parties:
- Information That Our Users Direct Us to Process: We may receive your information from other users who interact with our Service. For example, if an Educator uses our browser extension’s Inspect Writing feature, our Service will process any personal data included in the document. For more information about how we use information that our users direct us to process, please see our Privacy and Security FAQs.
- Referral Information: We may receive your contact information from people who think you may also be interested in our Service. For example, an Educator may provide us with your contact information as a part of a referral program.
- Information We Receive from Third-Party Platforms: Some parts of our Service allow you to login or link your account with a third-party platform, such as Google. These platforms give you the option to share certain personal data with us that you make available on those platforms. For example, if you register through or otherwise link your Brisk account with your Google account (e.g., Google Classroom, G-Suite including Google Docs, Google Chrome, and Google Drive), we may collect personal data that is associated with your Google account. This information we collect may include your name, account profile data, email address, courses, Student rosters, course materials, information about Google Doc views, version history, comments, and authentication action information, and Student submissions, including some Student Data. If you create or upload assessments or other academic or educational resources or materials from a linked third-party platform, we collect the content of these materials and metadata you provide about them. Our Service's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.
- The information we receive from a third-party platform depends on the third party’s policies and your privacy settings on its platform. You should always review and, if necessary, adjust your privacy settings on third-party platforms before linking them to our Service.
- Other Sources: We may also collect personal data about individuals that we do not otherwise have from, for example, publicly available sources, third-party data providers like MDR, or through transactions such as mergers and acquisitions.
简而言之:我们使用个人数据来管理我们的组织及其日常运营。更多详情,请参见下文:
We use personal data to:
- Verify your identity and check whether you are permitted to access certain features of our Service.
- Provide our Service. For example, as part of our 'Inspect Writing' feature, Brisk accesses the version history of documents.
- Personalize our Service, including by recognizing an individual and remembering their information when they return to our Service.
- Conduct research and analytics on our user base and our Service.
- Send communications, including via email and newsletters.
- Improve and customize our Service to address the needs and interests of our user base and other individuals we interact with.
- Test, enhance, update and monitor the Service, and diagnose or fix technology problems.
- Help maintain the safety, security and integrity of our Service, technology assets and other property, and our business.
- To enforce our contractual rights, to resolve disputes, to carry out our obligations and enforce our rights, and to protect our business interests and the interests and rights of third parties.
- Prevent, investigate or provide notice of fraud or unlawful or criminal activity.
- Comply with contractual and legal obligations and requirements.
- To fulfill any other purpose for which you provide personal data.
- For any other lawful purpose, or other purpose that you consent to.
We never sell personal data from our Service. We also do not share personal data from our Service with third parties for their own marketing purposes. Our Service is free from any advertising, ensuring a secure, distraction-free educational environment for both Students and Educators. For example, we do not use third-party cookies on our Service for personalized advertising or to track users and display personalized advertisements on other third-party websites or services.
Where you choose to contact us, we may need additional information to fulfill the request or respond to inquiries. We may provide you with additional privacy-related information where the scope of the inquiry/request and/or personal data we require fall outside the scope of this Privacy Notice. In that case, the additional privacy notice will govern how we may process the information provided at that time.
Please note, if you choose to not provide us with personal data in sufficient details, we may not be able to provide you with the products or services you seek.
简而言之:我们向几种不同类别的收件人披露个人数据。收件人可能包括使我们能够提供人工智能支持的服务的公司、您的学校以及下述其他机构。
We may also share, transmit, disclose, grant access to, make available, and provide personal data with and to third parties, as follows. For more information on how we share Student Data that we collect from Schools, including a list of the specific third parties with whom Student Data is shared, please see the section on “Student Data” below.
- AI Service Providers: We share personal data with service providers who enable us to provide AI-powered services. For example, this may include service providers who assist us in providing the AI-powered tools that form a part of our Service. Our current list of service providers is available upon request. As required by applicable data protection laws, we impose contractual limits on how these service providers can use the personal data they receive.
- Other Service Providers: We also share personal data with our other service providers, such as vendors who help us with data analysis, fraud prevention, infrastructure provisioning, analytics services, IT services, product fulfillment, and web hosting. Our current list of service providers is available upon request. As required by applicable data protection laws, we impose contractual limits on how these service providers can use the personal data they receive.
- Your School: If you interact with our Service through your School, we may disclose your information to your School.
- Other Users: Our Service does not currently enable users to post public profiles. However, if you are a member of a Slack channel, Facebook group or other online community group relating to our Services, your public profile information for the applicable online community group will be disclosed to other members of that online community, as well as any other information you choose to provide or make public.
- Customer Service and Communication Providers: We share personal data with third parties who assist us in providing customer service and facilitating our communications with individuals that submit inquiries. As required by applicable data protection laws, we impose contractual limits on how these third parties can use the personal data they receive.
- Business Transaction or Reorganization. We may take part in or be involved with a corporate business transaction, such as a merger, acquisition, joint venture, or financing or sale of company assets. We may disclose personal data to a third party during negotiation of, in connection with or as an asset in such a corporate business transaction. Personal data may also be disclosed in the event of insolvency, bankruptcy, or receivership. As required by applicable data protection laws, we impose contractual limits on how applicable third parties can use the personal data they receive.
- Legal Obligations and Rights. We may disclose personal data to third parties, such as legal advisors and law enforcement:
- in connection with the establishment, exercise, or defense of legal claims.
- to comply with laws or to respond to lawful requests and legal process.
- to protect the rights and property of Brisk, our agents, users, and others, including to enforce our agreements, policies, and terms of service.
- to detect, suppress, or prevent fraud.
- to reduce credit risk and collect debts owed to us.
- to protect the health and safety of us, our users, or any person.
- as otherwise required by applicable law.
- With Your Consent or At Your Direction. In addition to the sharing described in this Privacy Notice, we may share information about you with third parties whenever you consent to or direct such sharing.
When we disclose personal data to third parties, we take steps to protect the data in a manner that is consistent with our policies and obligations under applicable privacy laws.
简而言之:根据我们与学校签订的合同,我们认为学生数据是机密的,除了代表学校提供服务外,不会将学生数据用于任何其他目的。有关我们的学生数据隐私惯例的更多详细信息,请参阅下文。
为了帮助学校履行保护学生数据隐私的义务,当学校与Brisk签订合同,将该服务作为学校教育课程的一部分时,我们对学校实施了额外的控制和程序,例如 Brisk 的学生数据隐私附录 或学校要求的其他类似保护措施。当本服务用作学校教育课程的一部分时,(i)学校向Brisk提供的学生相关个人数据,或(ii)Brisk在向学校提供服务期间收集的与学生相关的个人数据可能包括《家庭教育权利和隐私法》(“FERPA”)定义为 “教育记录” 的信息,加利福尼亚州学生在线个人信息保护法(“SOPIPA”)下的 “涵盖信息”,加拿大省和地区隐私立法下的 “个人信息”,或受保护的其他信息类似的数据隐私法。我们称这些信息为 “学生数据”。
- 在我们和学校之间,学生数据由学校拥有和控制。我们对学生数据的收集和使用是我们作为处理者的职责,受我们与学校签订的协议和适用的隐私法的约束。例如,根据FERPA,我们以 “学校官员” 的身份向学校提供服务
- 我们收集、维护、使用和共享学生数据仅用于授权的教育目的,如我们与学校的协议中所述,或按照学校或学生的家长或法定监护人(均为 “家长”)的指示收集、维护、使用和共享学生数据。
- 我们不会出于定向广告目的使用或披露学生数据。
- 除了促进教育目的外,我们不会建立学生的个人资料。
- 我们维护一项全面的数据安全计划,旨在保护该服务维护的学生数据类型。有关我们的安全措施的更多信息,请参阅 安全 以下部分。
- 我们将向用户清晰透明地披露我们的数据政策和惯例。
- 除非出售是公司交易(例如合并、收购、破产或其他资产出售)的一部分,否则我们绝不会出售学生数据,在这种情况下,我们将要求新所有者继续遵守本隐私声明中规定的条款,或者我们将向学校提供通知和机会,通过在转移发生之前删除学生数据来选择不转让学生数据。
- 除非事先通知学校并在以与收集信息时所披露的方式截然不同的方式使用学生数据之前做出选择,否则我们不会对与收集或使用学生数据相关的隐私声明或协议进行任何实质性更改。
我们如何共享和披露学生数据
- 根据我们与特定学校签订的协议或经学校或家长的同意,我们仅在需要时披露学生数据,以代表特定学校提供服务。
- 例如,学生数据和账户使用数据可能会被授权代表学校使用服务的用户(例如学校或地区管理员)披露或访问这些数据。此外,根据学校使用Brisk的方式以及学校与Brisk之间的协议条款,我们可能会向学生和/或与数据相关的学生家长提供对某些学生数据的访问权限,以监控学生的使用和活动并评估学校使用服务的有效性。
- 我们还向有合法需要代表我们访问此类信息的可信服务提供商披露学生数据,但须遵守保护此类数据的适当合同条款。我们当前的服务提供商清单可在我们的附表4中找到 数据处理附录。
我们还可能披露与商业交易有关的学生数据或支持我们的合法权利和义务,如中所述 我们对个人数据的披露 本隐私声明的部分。
我们如何使用去识别的数据
在法律允许的范围内,根据我们与学校的协议,我们还可能生成、使用和披露去身份识别的信息,用于适应性学习目的或定制的学生学习目的,推荐与学校目的或其他教育或就业目的相关的内容或服务,以及开发、研究和改进我们的服务。此外,在适用法律允许的范围内,我们可能会使用去识别信息来更广泛地开发和改进其他教育网站、服务和应用程序或技术。“去识别信息” 是指从中删除或掩盖所有个人身份信息的数据,其余信息无法合理识别个人,也没有合理的依据认为该信息可用于识别个人。
我们如何保留学生数据
除非获得学校的授权,否则我们不会故意保留学生记录的时间超过支持教育目的所需的期限。
请注意:学校有责任维护当前的班级名册,并通过提交删除请求来管理不再需要用于教育目的的学生数据。
如果您代表学校使用该服务并希望访问学生数据、删除学生数据或关闭您的账户,请联系我们(privacy@briskteaching.com)。如果您是家长或学生并希望访问学生数据、删除学生数据或关闭您的帐户,请将您的请求直接提交给您的学校。
有关学生数据的问题
如果您是家长或学生,对学校提供给 Brisk 的学生数据的具体做法有疑问,请直接向您的学校提问。
In short: We may choose to make parts of our Service available to children under 13 years old, such as Brisk Boost. Our privacy practices with regard to children under 13 are set out below. We will not collect personal data from children under 13 without appropriate consent or authorization.
In addition to our tools for Educators, our Brisk Boost offering provides a powerful tool designed to help learners boost their academic progress using AI.
We may choose to make Brisk Boost available to children under the age of 13. However, Brisk will not collect personal data from children under 13 without appropriate consent or authorization, as follows:
- When Brisk provides the Service on behalf of a School, the School provides consent for Brisk to collect information from Students under the age of 13 through the Service provided on the School’s behalf, as permitted by the Children’s Online Privacy Protection Act (“COPPA”) and other applicable data privacy laws. In this case:
- We collect and process personal data from Students under 13 solely at the direction of and under the control of a School, and do not require Students to disclose more information than is reasonably necessary to use the Service.
- At all times, Schools have the right to request to review or delete the personal data from Students under 13 or decline to permit further collection or use of the Students’ personal data by contacting the School’s account representative.
- Schools are responsible for providing appropriate notice to Parents of the School’s use of third-party service providers such as Brisk. We recommend that our School customers provide a link to this Privacy Notice to all Parents.
- For more information on how we collect and process Student Data, please see the section on Student Data above.
- When Brisk provides the Service directly to children under 13 outside of the school context, we require the child’s parent or legal guardian to provide the appropriate consent or authorization for their child to use Brisk.
- The parent, legal guardian or school may withdraw consent at any time.
Data Collected from a Child
When a child under 13 uses the Service, we will ask for certain information about the child that is typically provided by the adult setting up the Service for the child, which may include the child’s name and information about the child’s parent, guardian or School (as applicable).
When the child uses the Service, we will collect the following information from the child:
- Information Collected Through the Use of the Service, including any files, documents, videos, images, or other information the child chooses to provide through the child’s use of the Service.
- Student-related Information, such as topics of study, assignments and content (e.g., homework), and grades.
- Usage information, such as date/time of visit, time spent on our Service, time zone, and activities completed or engaged with through the Service.
- Device data and log files, which could include IP address, operating system, device type and version, browser type and version, browser id, and location data derived from IP address. This information is typically collected through cookies or similar technologies and we may use third-party providers to collect this information on our behalf. We collect this information to help us understand usage, to diagnose problems and provide support, to administer our Service, facilitate navigation, display information more effectively, to remember users’ settings and preferences, to personalize the user’s experience while using the Service, and to recognize a user’s computer or device in order to assist the use of the Service and for security purposes.
We do not require the child to provide any more information than is reasonably necessary to use the Service.
How we share or disclose a child’s personal data
We share or disclose a child’s personal data as needed to provide our Service or with third parties with appropriate consent or authorization. For example, we share a child’s personal data with third parties as authorized by the Parent or the School, such as school administrators, counselors, resource professionals and others subject to appropriate authorization. Similarly, children may communicate with others through the Service subject to appropriate authorization, such as with their teachers. Brisk Boost users are not permitted to interact with other untrusted users.
We also share information with our trusted third-party service providers who provide services to us or on our behalf, such as website hosting and customer support services, information technology and related infrastructure provision, and other services.Our current list of service providers is available in Schedule 4 of our Data Processing Addendum. As required by applicable data protection laws, we impose contractual limits on how these service providers can use the personal data they receive.
We may also share personal data if we believe to be necessary or appropriate: (a) under applicable law; (b) to comply with legal process; (c) to respond to requests from public and government authorities, including public and government authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety or property, and/or that of our affiliates, our users or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain. If Brisk becomes involved in a merger, acquisition, bankruptcy, change of control, or any form of sale of some or all of its assets, a child’s personal data may be transferred or disclosed in connection with the business transaction, subject to any applicable laws.
We may also share aggregate or de-identified information in a manner that cannot be reasonably used to identify an individual user.
How to access and delete a child’s personal data
A parent/guardian has the right to access the personal data we have collected from the child, withdraw consent for further collection and request deletion of the child’s personal data. If you are a Parent of a child under 13 that uses our Service outside of school and you want to access, correct, or delete your child’s personal data, please contact us to submit your request. If you are a Parent of a Student under 13 using the Service through a School and you want to access, correct, or delete the Student’s personal data, please contact your child’s School to submit your request. We will respond to the School’s instructions with respect to your child’s personal data.
Unless we receive a deletion request, we will retain the personal data collected from the child for as long as necessary to provide the Service and comply with our legal obligations, which could include retaining information as needed for recordkeeping and billing obligations. We will delete and/or de-identify the child’s personal data when it is no longer needed for the purposes for which it was collected.
If you require additional assistance regarding your child’s personal data, please contact us at privacy@briskteaching.com. We will respond to all requests as soon as possible. For requests that relate to Students, we may be required to refer the request to the School or School administrator for action.
If you believe a child under the age of 13 has provided personal data to us other than as described above, please contact us using the information in the Contact Us section below so that we may delete such information.
In short: If you would like to update, access, review, modify or delete your information you can do so as described below.
You may control your information in the following ways:
- Profile, controls and data sharing settings. You may update your account information and may change some of your account controls and data sharing preferences by visiting your “Account” page, removing our browser extension via the “settings” or “tools” menu on your web browser, or emailing us at privacy@briskteaching.com.
- Disconnecting your Brisk account from third party sites. As discussed above, you may be able to connect your Brisk account to accounts you have on third party sites such as Google. You may disconnect your account from a third-party site at any time by visiting the “Account” page to remove authenticated sites and services or removing the Google Chrome Extension under the “Tools” page.
- Changing your cookie preferences. For additional details about the cookies we use on our websites and to adjust your preferences with regard to those cookies, please review our Cookie Notice for the Service.
- Changing your communications preferences. You can stop receiving promotional email communications from us by clicking on the “unsubscribe link” provided in such communications. We make every effort to promptly process all unsubscribe requests. You may not opt out of service-related communications (e.g., account verification, transactional communications, changes/updates to features of the Service, technical and security notices).
- Accessing, reviewing, modifying or deleting your information. If you want to access, review, modify or delete your information, or if you want to remove your name or comments from our Service or publicly displayed content, you can contact us directly at privacy@briskteaching.com to submit your request. We will respond to these types of requests in compliance with any applicable data protection laws.
简而言之:我们维护个人数据的技术和组织保障,如下所述。
Brisk 采用多层方法来保护个人数据,包括技术和组织保障。Brisk 执行一项强大的安全计划,其中包括旨在保护个人数据免受已知和预期威胁的政策和控制措施。例如,Brisk 的安全控制措施包括防火墙、基于角色的访问控制和加密。我们的技术和组织安全控制措施在中有更详细的描述 我们的数据处理附录。
Brisk将个人数据的访问限制在需要了解的基础上,并对任何违规行为采取纪律处分程序。
对于为我们提供安全漏洞指定联系点的学校,Brisk维持学生数据泄露响应协议。在未经授权的访问、销毁、使用、修改或披露学生数据的情况下,将根据协议通过电子邮件或其他直接沟通渠道通知学校的指定联系人。
我们在美国和我们的服务提供商所在的其他司法管辖区处理和存储个人数据。请注意,因此,这些司法管辖区的执法机构、法院和其他政府机构可能会访问您的个人信息。如果您对我们使用服务提供商有疑问,请使用下面提供的联系信息联系我们。
简而言之:如有任何问题,请随时联系我们。我们的联系信息如下。
如果您对本隐私声明或其他隐私相关事宜有任何问题或要求,请发送电子邮件至 privacy@briskteaching.com。
简而言之:我们可能会更新本隐私声明。我们将通知您重大变更,如下所述。
We will update this Privacy Notice from time to time. When we make changes to this Privacy Notice, we will change the “Last Updated” date at the beginning of this Privacy Notice. If we make material changes to this Privacy Notice, we will provide reasonable notice to you, such as by email to your registered email address, by prominent posting on this website or our online services, or through other appropriate communication channels. All changes shall be effective from the date of publication unless otherwise provided.
As noted above, we will not make any material changes to this Privacy Notice that relate to the collection or use of Student Data without first giving notice to the School and providing a choice before the Student Data are used in a materially different manner than was disclosed when the information was collected.
In some cases, we may need to disclose your personal information to our related entities, contractors and service providers that are located outside of Australia.
Where this occurs, we take reasonable steps to ensure that all personal information is handled in a manner that is consistent with the Australian Privacy Principles. These overseas recipients are likely to be located in the United States.
If you have a complaint or believe we are in breach of the Australian Privacy Principles, or relevant registered code under the Privacy Act, you can use our contact details as outlined above to notify us of any privacy complaints you have against us.
We will acknowledge your complaint in writing and will provide an estimated time frame for when we will respond (no more than 30 days).
While it is our hope to be able to resolve any complaints you may have, you can also lodge a complaint with the Office of the Australian Information Commission (OAIC).