Privacy Policy

1. Information We Collect

We collect information you provide directly, including:

• Account information: Name, work email address, organization, and role when you register.
• Student records: Names, identifiers, and assessment data entered by your institution. This data is classified as an education record under FERPA.
• Usage data: Log files, session duration, feature usage patterns (no personally identifiable information).
• Communications: Any messages you send to our support team.

2. How We Use Your Information

• Provide, maintain, and improve TCS Platform services.
• Process transactions and send administrative notices.
• Respond to comments, questions, and requests for support.
• Monitor and analyze usage patterns to improve performance.
• Comply with legal obligations, including FERPA, HIPAA (where applicable), and applicable state laws.

3. Data Sharing

We do not sell, trade, or rent your personal information. We may share information only in the following limited circumstances:

• Service providers: Vendors who assist in operating our platform (hosting, email delivery) under strict data processing agreements.
• Legal requirements: When required by law, subpoena, or to protect the rights and safety of our users.
• Business transfers: In connection with a merger or acquisition, with appropriate notice.

4. Data Security

All data transmitted to and from TCS Platform is encrypted in transit over HTTPS, and browsers are required to use HTTPS (HTTP Strict Transport Security). Passwords are stored as salted bcrypt hashes, and stored credentials and integration secrets are encrypted with AES-256. Encryption of the database and stored files at rest is provided, where it is provided, by the hosting environment rather than by the application; institutions that require it should raise it during procurement. Access is controlled by role and scoped to each institution, changes to records are audit logged, and we review security periodically. In the event of a data breach, we will notify affected institutions within 72 hours.

5. Data Retention

We retain your data for the duration of your active subscription and, after account closure, for the export period set out in our Data Retention & Deletion policy (currently 30 days). After that period, data is erased, apart from records we are legally required to keep; copies in backups age out on their own schedule. You may request early deletion at any time by contacting support@jottertech.com.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal retention requirements).
• Object to or restrict certain processing.
• Data portability: receive your data in a machine-readable format.

To exercise these rights, contact us at support@jottertech.com.

7. Contact

ECC, Inc. DBA Training Centre Solutions
Privacy Officer: support@jottertech.com