updated: September, 2023
Mosa Mack Science Privacy and Data Security Policy
What is considered personal information that is collected by Mosa Mack?
Mosa Mack Science is used by and designed for teachers and students of grades 4-8. If a teacher chooses to invite a student into Mosa Mack Science, the student must create an account. Personal information is that information that personally identifies a student, such as your name, address, and email address. We collect only students’ first and last names, and email addresses. The student email address is used by the student as their unique login ID. The student first and last name are used by the teacher to identify the students. Mosa Mack Science does not market to, emails, or provide any promotional material to any student. Therefore, the collection of data is limited to the program requirements.
If students choose to complete assessments and upload projects, Mosa Mack Science will store and maintain those records on the site. The data pieces identified in this paragraph are the only pieces of personally identifiable, or confidential, student information that we collect and maintain.
What does Mosa Mack do with the confidential information it collects?
We do not share, disclose, rent, sell or market confidential student information to any third parties. We use it solely for the purposes of our users and for our own internal analysis purposes so that we can continually improve the product. We do not use or disclose the student information for any advertising purposes. We use this data only for the purposes for which we are authorized to do so, based on our agreements with our educational agencies, teachers, parents and/or students. Access to this data is limited to only those employees authorized to use it for the purposes listed above. We do not display personal information publicly nor is it publicly visible.
How does Mosa Mack protect and secure my information?
The security of your personal information is important to us. We work hard to protect our community, and we maintain administrative, technical and physical safeguards designed to protect against unauthorized use, disclosure of or access to personal information. In particular:
- Our engineering team is dedicated to keeping your personal information secure
- We use industry-trusted solutions and best practices in our infrastructure to maintain a high level of security. Safeguards include, but not limited to, a firewall on our servers to prevent undesired inbound connections. These safeguards meet industry standards and best practices.
- We periodically review our information collection, storage and processing practices, including physical security measures, to guard against unauthorized access to systems
- We continually develop and implement features to keep your personal information safe - for example, when you enter any information anywhere on the Service, we encrypt the transmission of that information using secure socket layer technology (SSL/TLS) by default
- We encrypt all data at rest and in transit.
- We ensure passwords are stored and transferred securely using encryption and salted hashing
- Employees with access to PII receive mandatory online training on data privacy and security as well as the federal and state laws governing confidentiality. Training is received both prior to receiving access to the data, and annually thereafter. Training completion is confirmed via signature collections.
Mosa Mack Science supports interactions between teachers and students. Students can only access Mosa Mack Science with a teacher invitation. We do not require parental notice and consent, but the school may do so.
Your Mosa Mack account is protected by a strong password. You can help us protect against unauthorized access to your account by using a unique password and keeping your password secret at all times. The only social or federated login that Mosa Mack Science supports is an optional Google Single Sign-On.
What happens if there is a breach?
Although we make concerted good faith efforts to maintain the security of personal information, and we work hard to ensure the integrity and security of our systems, no practices are 100% immune, and we can’t guarantee the security of information. Outages, attacks, human error, system failure, unauthorized use or other factors may compromise the security of user information at any time. If we learn of a security breach, we will notify you electronically through email and/or through an electronic notice on our homepage (www.mosamack.com). Depending on where you live, you may have a legal right to receive notice of a security breach in writing. You have the right to make complaints about possible breaches of student data and to have such complaints addressed. Complaints should be directed in writing to the Chief Privacy Officer of your state and local education agency.
For how long does Mosa Mack maintain the student data?
We maintain student data for sixty days following the deactivation of a teacher’s or education agency’s use of Mosa Mack, unless required by law or contract to maintain it for a different period of time. If requested, we transfer an educational agency’s data to the educational agency. At any time during the life of the contract, a teacher can download their own data. At the conclusion of these sixty days, we delete the data along with the backups.
Can a parent access his/her child’s personal information that Mosa Mack has collected?
We encourage schools and districts using Mosa Mack to notify parents that the product is used in their school. Parents can log into their children's accounts and access their records. If you are a parent or guardian of a student using Mosa Mack with his or her school, you can request the login information from your child or their teacher. You are encouraged to use the student's login information and view all their activities and progress on the account at any time. Parents have a right to request the student's Personally Identifiable Information be deleted or request changes in his or her records if it is inaccurate or misleading. Parents have additional rights, including additional privacy rights under federal and applicable state laws.
Is third party advertising permitted on Mosa Mack?
No. No advertising is permitted or displayed on Mosa Mack Science. Traditional, contextual, behavioral and/or targeted advertising are not displayed. Data is not sold, rented, shared for and/or collected by third-party advertising, marketing, tracking services, or service providers. Data is not used to track or target advertisements for other third-party websites or services. Moreover, data profiles are not created and therefore not used for targeted advertisements.
FERPA & COPPA
Mosa Mack will protect the confidentiality of student information consistent with the Family Educational Rights and Privacy Act (FERPA) and comparable state student privacy and student data policies, laws and regulations as applicable. We also comply with Children's Online Privacy Protection Act (COPPA).
We have signed the K-12 School Service Provider Pledge to Safeguard Student Privacy.
Any questions about the collection, maintenance and use of student data can be directed to [email protected].