Privacy Policy
Draft template. Have it reviewed by a lawyer before signing contracts with schools.
Who we are
ZorvGuard provides classroom management and web filtering software to schools. Schools are our customers; we process student information only on a school's behalf and under its direction.
What we collect
- School staff accounts: name, school email address, role, and a securely hashed password.
- Class rosters: student school email addresses that teachers add to their classes.
- Demo requests: the contact details you submit on our website.
- Safety alerts (only if the school turns them on): flagged searches, as described below.
What we do not store
- Screenshots: captured only while a teacher is viewing a class that is in session, held in memory, and never written to disk.
- Browsing history: open tabs are shown live to the student's teacher during class and are not saved or logged.
- We never sell student data, use it for advertising, or build profiles of students.
Safety alerts (optional)
If a school turns on safety alerts, the extension checks searches on the device against a short list of phrases that suggest self-harm or violence. Only matching searches are sent to ZorvGuard, where they are checked again and saved with the student's school email and the time, so the school's admins can follow up. Alerts are deleted automatically after 90 days. Searches that don't match are never sent or stored. Schools can also show students a support message with the 988 Suicide & Crisis Lifeline.
Who can see student information
Teachers can only see students on their own class rosters, and only see screens while that class is in session. School admins can see their own school's devices. ZorvGuard staff access data only to provide support when a school asks.
Transparency for students
The ZorvGuard extension always shows students when their screen is being viewed.
Security
Data is encrypted in transit (HTTPS). Passwords are hashed with scrypt. Device enrollment uses a per-school secret key that admins can rotate at any time.
Retention and deletion
A school admin can permanently delete all of the school's data at any time from School account → Delete all school data. When a school's contract ends, we delete its data within 30 days.
Laws we follow
We support schools' obligations under FERPA and COPPA, and will sign state student data privacy agreements on request.
Contact
Questions? Contact us.