Legal

Privacy Policy

Effective and last updated: October 11, 2026

MasteryCue provides instructional data analysis and planning tools for educators, schools, and districts. This policy explains what information we collect, how we use it, and the choices available to schools and users.

Information we collect

We collect account and contact information, organization and role information, files and educational records submitted by authorized users, roster and assessment information provided by schools or integrations, product activity, device and security logs, support communications, and subscription records. Payment-card details are collected and processed by Stripe and are not stored by MasteryCue.

Student information

Student records are used only to provide, secure, support, and improve the services requested by the school or district. We do not sell student personal information, use it for targeted advertising, build advertising profiles, or disclose it for unrelated commercial purposes. A school or district controls student information submitted on its behalf and determines authorized users and permitted educational purposes.

How information is used

Disclosure and subprocessors

Information may be processed by contracted infrastructure, database, authentication, payment, email, monitoring, and rostering providers that support the service. We may disclose information when directed by an authorized school, required by law, necessary to protect the service or users, or as part of a business transaction subject to appropriate confidentiality and data-protection obligations. We do not permit subprocessors to use student data for their own advertising. Review our core service providers and their purposes.

Retention and deletion

We retain information only while needed to provide the service, meet contractual requirements, protect security, or comply with law. Schools may request export or deletion of their data. At contract termination, student data will be returned or deleted according to the applicable agreement and documented retention schedule, except where law requires limited retention. Backup copies expire through controlled rotation. Retention periods depend on the record type, contractual requirements, security needs, and applicable law; MasteryCue does not represent that every record has one universal deletion period.

Security

We use administrative, technical, and physical safeguards appropriate to the nature of the information, including encrypted transport, managed encrypted infrastructure, access controls, tenant isolation, audit records, private file storage, and vendor review. No method of storage or transmission is completely secure.

Children and school-authorized use

MasteryCue is directed to educators and institutional users, not children acting independently. Student information may be provided by a school under applicable law and agreement. We do not knowingly invite children to create self-service consumer accounts. When a school is permitted to authorize collection for an educational service, we provide the school the required notice and use student information only for the school-authorized educational purpose. MasteryCue remains responsible for its own COPPA obligations and does not shift those obligations to a school.

Requests and rights

Students and parents should direct education-record requests to their school, which can verify identity and instruct us. An authorized school may request access, correction, export, deletion, or cessation of further collection or use. We will authenticate the requester, respond through a secure channel, and support the school in fulfilling applicable parent or eligible-student rights. We will not discriminate for exercising an applicable privacy right.

Changes and contact

We will post material changes and provide additional notice when required. Contact MasteryCue support for privacy questions, authorized school requests, or Nevada privacy requests.