LanSchool Air Privacy Statement
This statement has been archived. Please view the current privacy policy at https://lanschool.com/privacy/
This statement was last updated and made effective on April 1, 2020.
This LanSchool Air Privacy Statement applies to the LanSchool Air products and services licensed by Stoneware, Inc. (a Lenovo company) (“Stoneware” or “we”). This Privacy Statement describes how the LanSchool Air products and services collect, use and safeguard information. We will process your personal data as Data Controller. The section called “What information is collected from children, and how is it used?” below discusses Stoneware’s information practices for collection and use of information from children. Please also be sure to review the LanSchool Air Terms of Service, which can be found at found at https://www.lenovosoftware.com/legal.
LanSchool Air is a classroom device management service. It allows instructors a degree of control over classroom devices using an agent that is installed on the device.
What Information Is Collected and How Is It Used?
- Stoneware may collect the following information from instructors, schools, and corporate customers through LanSchool Air products and services. We may also collect this information through the LanSchool Air website.
- Personal Information, such as your name, e-mail addresses, contact information, and related user profile data. We collect this information when you register for LanSchool Air, create a user profile, complete a customer satisfaction survey, register for a marketing campaign or promotion and other points where the user chooses to provide such information.
- Account log-in credentials, such as usernames and passwords, which authenticate users of LanSchool Air.
- Device identifiers and related information, such as device id, serial number, IMEI, MAC address, IP address and domain names. We use this information to measure the use of our sites and to improve the content of our sites. Aggregated information is not used in such a form that would enable direct connection of any personal information to our visitors.
- Certain data on our users’ demographics, interests, and behavior based on the information provided to us when using LanSchool Air, during a promotion, from surveys and from our server log files. This information is collected to better understand and serve our users and customers, as well as to determine how we can improve our products. This research is compiled and analyzed on an aggregated basis so as to prevent identification of personal information relating to any one individual. Stoneware may share this aggregated data with our agents (service providers).
- When you use our chat functionality, we will not collect or store text generated data anywhere. It only persist during the class lesson.
Do we use cookies, web beacons, analytics and related technologies on our websites?
Cookies and tracking tools. In order to provide an effective, efficient, and customized experience, LanSchool Air and Stoneware websites may use Internet cookies, tags, web beacons, analytics and related website solutions and techniques. These solutions are usually supplied to Stoneware by third parties. Most browsers are initially set up to accept cookies. However, if you prefer not to store cookies, you can use our cookie consent tool to opt-out from cookies. Please note that essential or necessary cookies cannot be disabled. Alternatively, you can choose to:
- set your browser to notify you when you receive a cookie
- set your browser to refuse to accept cookies
- delete our cookies after visiting our site/service
- use our site/service using your browser’s anonymous usage setting (called “Incognito” in Chrome, InPrivate” for Internet Explorer, “Private Browsing” in Firefox and Safari etc.)
However, please note that certain Stoneware websites, applications, and services may not respond to Do-Not-Track signals sent by certain browsers. You should also understand that some features of LanSchool Air may not function properly if you don’t accept cookies.
If you do not know how to control or delete cookies, or would like to opt-out of receiving certain targeted ads based on your browsing history, we recommend that you visit http://www.networkadvertising.org/choices/, http://www.aboutads.info/, or www.youronlinechoices.eu for detailed guidance, including opt-out instructions.
If you would like to opt-out of Google Analytics for Display Advertisers and/or opt out of the customized Google Display Network, you may do so by visiting Google’s Ads Preferences Manager. You may also wish to utilize the Google Analytics Opt-out Browser Add-on to opt-out of Google Analytics. For information on how to do this on the browser of your product or mobile device you will need to refer to your browser’s or mobile device’s help menu or product manual.
If you are in UK or EU, we will not use non-necessary cookies unless you have opted-in first. Necessary cookies are required, and we will always store them in your equipment. They are functional cookies which are essential for ensuring that our Website functions properly. This category of cookies cannot be disabled.
Please visit our cookie declaration within our cookie tool. When the banner pops up, just click on “show details” to learn about what categories of cookies we use and why.
How Do We Communicate with You?
Please note that we will from time to time send you email or in-app notification for the purpose of communicating with you. Such communications include in-product related information such as updates or guides, announcements about new features, trainings or webinars that might be available to you, access to knowledgebase articles and/or when we are looking for candidates for product insiders group participation initiatives. We may also communicate with you when you have requested information from us or registered for a trial. You will always be able to opt-out from those communications/notifications. We will not send you marketing related communications unless we have complied with our legal obligations, which may include asking you for consent first, depending on where you live.
What Information Is Collected from Children, and How Is It Used?
For educational institutions, schools, or school districts (“schools”): Schools may choose to use LanSchool Air products for classroom management in an educational setting. Where a school elects to use LanSchool Air, we provide LanSchool Air as a service provider to that school. The account, information, and content associated with LanSchool Air are controlled by the school – not by Stoneware.
Stoneware may collect the following information from students through LanSchool Air:
- Name
- Email address
- School or system identifier
- Username
This information is used to match students using classroom devices with a classroom list created by an instructor or school administrator.
Stoneware collects personal information from students through LanSchool Air products for the use and benefit of the school, and for no other commercial purpose. To the extent that a school determines consent from a student’s parent or legal guardian is required, Stoneware relies on the school to obtain such consent (including, where applicable, relying on the school to act as the parent’s agent and consent to the collection of information from children on the parent’s behalf). If you are a parent or guardian, and you have questions about any of the above, please contact your school.
For other customers and entities: LanSchool Air may only be used with children under 13 by schools (as defined in this Privacy Statement). Customers and companies that are not schools may not use LanSchool Air with children under 13. LanSchool Air is not intended or designed for such use.
For users of Stoneware websites: Websites operated by Stoneware (including www.lanschoolair.com) are intended for use by adults. They are not intended for use by children under 13. No information should be submitted to or posted on Stoneware websites by children under 13.
If you believe your child under 13 has provided personal information via LanSchool Air outside of an educational context, please contact Stoneware using the contact information provided below:
Is Information Shared with Third Parties?
Yes – Stoneware contracts with other companies who act as our suppliers to perform services for Stoneware, such as data hosting, processing, product development and analytics. Such services may require Stoneware to share your information with our agents. In such cases, we take steps to ensure that these suppliers to Stoneware are adhering to Stoneware’s standards for privacy and security.
The LanSchool Air service may also contain various links to third-party websites or services that may provide additional information, services or promotions. These sites and services may be operated independently of Stoneware and have their own separate privacy and data collection practices. Any information you provide to these websites and services will be governed under the terms of their privacy policy, if any. Stoneware has no responsibility or liability for the actions or policies of these independent sites and services and is not responsible for the content or privacy practices of such sites.
Additional details regarding specific third parties who receive information can be found below:
- Clever: LanSchool Air can integrate with Clever Secure Sync to import class rosters from a school’s student information system (SIS), if a school chooses to activate this feature. This integration is optional and is only available to teachers after the school explicitly approves the connection from within the Clever service. Use of the Clever service is governed by Clever’s Terms of Service (https://clever.com/about/terms). Once enabled by the district, LanSchool may collect and store class rosters that have been explicitly shared with LanSchool by the district. Class rosters may include personally identifiable information about students such as their name, email address, and district ID. This information is stored in cloud servers operated by Stoneware, which use certain security measures, such as authentication techniques, access controls, and encryption, where appropriate.
- Google API Service: Google APIs is an application programming interface which allows interaction between Google products and services and non-Google products. LanSchool Air utilizes Google sign-in’s API to authenticate, authorize and admit the user into the LanSchool Air product. Google end-users who agree to use the API service submit their Google user credentials to Google sign-in to establish a secure connection to his or her Google data. While LanSchool Air does store the instructor’s first name, last name, email addresses and Google IDs, LanSchool Air does not store any of the user’s Google data. Google’s Privacy Policy can be accessed at https://www.google.com/policies/privacy/.
We may also disclose personal or other information to regulatory or government bodies, courts of law, tribunals, and law enforcement bodies to protect our rights, protect your safety or the safety of others, investigate or otherwise address fraud, or respond to a government request.
How Is Information Secured?
We use certain security measures, such as authentication techniques, access controls and encryption, where appropriate. However, no data transmission over the Internet can be guaranteed to be completely invulnerable. As a result, while we have taken appropriate steps to protect personal information, Stoneware cannot ensure or otherwise warrant the security of any information provided to us.
Does Stoneware Transmit Information Internationally?
Stoneware and Lenovo are global organizations, with legal entities, business processes, management structures, and technical systems that cross borders. Therefore, where permitted by law, we may host or process information on servers located in other countries in the world where we do business. Regardless of where your information is transferred to and resides, our privacy and security practices are designed to provide protection globally. Please note that some countries have privacy laws that are not equivalent to privacy laws in your own country. In such countries, Stoneware and Lenovo will still handle information in the manner we describe here and will take such measures as are necessary to comply with applicable data protection laws when transferring and processing your information. Where required, Stoneware and Lenovo will also maintain agreements between Lenovo group companies or with Lenovo partners or suppliers to govern the transferring, processing and protection of personal information.
How Long Will Information Be Retained?
We will retain information for as long as your account is active or as needed to provide you with services and may be archived for a short time period thereafter prior to being permanently purged. We will also retain information as necessary to comply with applicable legal obligations, to resolve disputes, and to enforce our agreements.
| Type of data | Retention Period |
|---|---|
| Student Interface related data: • The auto-generated unique GUID of the student • The student ID as provided. • The first name of the student. • The last name of the student. • The e-mail address of the student. • The student’s login name. • The date that this student object was created. • The date that this student object was updated. | Upon user´s request for deletion of after 1 year of not having an active license or trial, data will be archived. Archived data is purged after 90 days. |
| Teacher Interface related data: • The auto-generated unique GUID of the teacher • The teacher ID. • The MongoDB ID of the cloud user that corresponds to this teacher object. • Access tokens • The date that this teacher object was created. • The date that this teacher object was updated. | Upon user´s request for deletion of after 1 year of not having an active license or trial, data will be archived. Archived data is purged after 90 days. |
| Teacher Interface related data: • The auto-generated unique GUID of the client • The login name of the current student. It could be an e-mail address or a username. • The MongoDB ID of the corresponding device from the core database. • The date that this client object was created. • The date that this client object was updated. | Upon user´s request for deletion of after 1 year of not having an active license or trial, data will be archived. Archived data is purged after 90 days. |
| Class list related data • The auto-generated unique GUID of the class • The name of this class. This is required. • The class ID as provided by the Student Information System. • The school ID as provided by the Student Information System. • The class period or other designation that distinguishes this class from other classes of the same type. • The owner of this class list. • The teacher objects for the teachers that have access to this class list. The TeacherInterface is defined below. • The student objects for the students that belong to this class list. • The client objects for the devices that belong to this class list. • The ID of the user that last changed this class list. • The date that this class list was created. • The date that this class list was updated. | Upon user´s request for deletion of after 1 year of not having an active license or trial, data will be archived. Archived data is purged after 90 days. |
| Organization related data • The auto-generated unique GUID of the organization • The name of the organization. • The ID assigned to this organization.. • The primary street address. • The secondary street address information. • The city of the organization. • The state or province of the organization. • The postal code of the organization. • The country of the organization. • The administrative contact information. • The technical contact information. • The billing contact information. • A flag indicating if this organization has a site agent. • The date that this organization was created. • The default security policy for the organization. • Organization´s contact data: first name, last name, phone number, e-mail address. | Upon user´s request for deletion of after 1 year of not having an active license or trial, data will be archived. Archived data is purged after 90 days. |
| User data • The auto-generated unique GUID of the user • A set of key-value pairs of all current IDs of user, • The first name of the user. • The last name of the user. • Permissions directly assigned to this user. • A reference to the organization of which this user belongs. • A subset of user IDs that a user is allowed to use for a login. • A timestamp of the last time the user successfully logged into the system. • A timestamp of the first time the user failed authentication within the past hour. • The IP address of where the last successful login took place. • The IP address of where the last failed login took place. • The timestamp of the last failed login attempt. • A counter for the number of consecutive failed login attempts. • The permissions granted to the user. Generated by combining all permissions from the user’s groups. • The date that this user was created. • The date that this user was updated. | Upon user´s request for deletion of after 1 year of not having an active license or trial, data will be archived. Archived data is purged after 90 days. |
| License data (Excludes personal data) | This data is kept as long as necessary to comply with legal obligations, to enforce our agreements, etc. This data retention policy does not include personal data. |
What Are My Data Protection Rights?
Applicable data protection laws may give you the right to control our use and processing of your personal information. These may include the right (i) to request access to and a copy of your personal information, (ii) to object to processing of your personal information, or to request rectification or erasure of your personal information; (iii) to restrict processing of your personal information; and (iv) to data portability. Where we are using your personal information with your consent, you also have the right to withdraw your consent at any time, though this will not affect our uses of your personal information prior to the withdrawal of your consent. If you are an instructor or a school administrator, you have the right to request access to, review, and receive a copy of your personal information or a student’s personal information. You may have the right to request that a child’s personal information be deleted, or to prevent further use or online collection of a child’s personal information. If you wish to exercise any of these rights, please contact us using the contact information provided below. If you are a parent or a student, and you wish to exercise rights to review, access, delete, or prevent further use of a child’s personal information, please contact your school.
Changes to This Privacy Statement
If we make any material changes to this statement, we will provide notice on this page and/or as otherwise required by law. Where we are required by applicable data protection laws, we will also seek your consent to any material changes that affect how we use personal information. We encourage you to review this page periodically for the latest information on our privacy practices.
How May I Contact the Lenovo Privacy Program?
If you have a question about this privacy statement, email us at privacy@lanschoolair.com or write to us at:
Mailing Address: Stoneware, Inc.
Attn: Privacy Department 1
1555 N Meridian St
Suite 150
Carmel, IN 46032