Privacy Policy

Overview

Eleve provides a learning management platform for action sports organizations, schools, and athletic programs (collectively, "Educational Institutions"). We are committed to protecting student privacy and complying with applicable education privacy laws.

1. Information We Collect

1.1 Student Education Records

We collect and process student education records as directed by your Educational Institution, which may include:

• Name, username, and basic profile information
• Birth year and sport/discipline information
• Athletic skills, progress assessments, and performance data
• Training videos and session records
• Coach feedback and evaluations
• Attendance and participation records

1.2 Parent/Guardian Information

When parents create accounts to view their child's progress:

• Name and email address
• Relationship to student
• Account credentials and authentication data

1.3 Coach and Administrator Information

For educational staff using the platform:

• Name, email, and professional information
• Role and permissions within the institution
• Activity logs and usage data

1.4 Technical Information

• Device information and IP address
• Browser type and operating system
• Usage patterns and feature interactions
• Error logs and diagnostic data

2. How We Use Your Information

We process information solely to provide educational services on behalf of your Educational Institution:

2.1 Educational Purposes

• Tracking and displaying student athletic progress and skill development
• Enabling coaches to assess performance and provide feedback
• Allowing parents to monitor their child's participation and achievements
• Facilitating communication between coaches, students, and families
• Generating progress reports and analytics for educational staff

2.2 Platform Operations

• Authentication and account security
• Technical support and troubleshooting
• Maintaining and improving platform performance
• Preventing fraud, abuse, and security incidents

2.3 Legal Compliance

• Complying with applicable laws and regulations
• Responding to legal processes and law enforcement requests (with notice to the institution where legally permitted)
• Enforcing our Terms of Service

3. How We Share Information

3.1 Within Your Educational Institution

Student information is shared with authorized staff at your institution based on permissions set by school administrators (coaches, administrators, and the student's authorized parent/guardian accounts).

3.2 Service Providers

We work with trusted third-party service providers who help us operate the platform:

• Amazon Web Services (AWS) – Secure cloud hosting and storage
• Clerk – Authentication and user management
• Resend – Transactional email delivery
• Neon Database – Encrypted database services

All service providers are contractually required to protect student data and use it only to provide services to us. They may not use student data for their own purposes.

3.3 Legal Requirements

We may disclose information when required by law, such as in response to a court order or subpoena. We will notify your Educational Institution unless prohibited by law.

3.4 School Transfers or Changes

If a student transfers to a different organization using Eleve, data may be transferred with proper authorization from both institutions and the parent/guardian.

4. Educational Institution Responsibilities

Your Educational Institution, as the Data Controller, is responsible for:

• Obtaining necessary consents from parents/guardians to collect and share student information
• Determining what student data should be collected and maintained in Eleve
• Managing user access and permissions within their organization
• Complying with FERPA, state privacy laws, and institutional policies
• Responding to parent/guardian requests regarding student data (access, correction, deletion)
• Notifying Eleve of any required data handling changes

If you have questions about how your institution uses Eleve or handles student data, please contact your school administrator.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data is encrypted in transit (TLS/SSL) and at rest
• Access Controls: Role-based access with principle of least privilege
• Authentication: Secure authentication via Clerk with multi-factor authentication support
• Video Security: Signed URLs with time-limited access for video content
• Infrastructure: Enterprise-grade AWS infrastructure with regular security updates
• Monitoring: Continuous security monitoring and incident response procedures
• Auditing: Regular security assessments and compliance reviews

While we implement robust security measures, no system is completely secure. We encourage users to protect their login credentials and report any suspected security incidents immediately.

6. Children's Privacy (COPPA Compliance)

Eleve is designed for use by Educational Institutions serving students of all ages, including children under 13. We comply with the Children's Online Privacy Protection Act (COPPA).

6.1 School Authorization

Educational Institutions may provide consent on behalf of parents for the collection of student information for educational purposes, as permitted under COPPA's "school official" exception.

6.2 Parental Rights

Parents have the right to:

• Review their child's personal information
• Request correction or deletion of their child's information (through the Educational Institution)
• Refuse to allow further collection or use of their child's information

To exercise these rights, please contact your Educational Institution directly.

6.3 No Behavioral Advertising

We do not use student information for targeted advertising purposes or build marketing profiles of students.

7. FERPA Compliance

For Educational Institutions subject to the Family Educational Rights and Privacy Act (FERPA), Eleve functions as a "school official" with "legitimate educational interests" in student education records.

We use student education records solely to provide services to the institution and comply with FERPA's requirements regarding confidentiality, security, and proper use of education records.

8. Data Retention and Deletion

8.1 Retention Period

We retain student information as directed by the Educational Institution and as necessary to provide services. When a student graduates, transfers, or leaves the program, data is retained according to the institution's retention policies.

8.2 Deletion Requests

Educational Institutions may request deletion of student data at any time. Upon receipt of a deletion request, we will permanently delete the data within 30 days, except where retention is required by law.

8.3 Account Termination

If an Educational Institution terminates their Eleve account, all associated student data will be made available for export for 30 days, then permanently deleted.

9. Your Privacy Rights

9.1 Access and Correction

Parents and eligible students may access and request corrections to education records through their Educational Institution or directly through their parent account on Eleve.

9.2 Opt-Out of Communications

You may opt out of non-essential email communications by following the unsubscribe link in any email or contacting your school administrator.

9.3 State-Specific Rights

Depending on your location, you may have additional privacy rights under state law (such as California's CCPA or Virginia's CDPA). Contact us for more information about exercising these rights.

10. International Users

Eleve is based in the United States, and information is processed and stored in the U.S. If you access Eleve from outside the U.S., you consent to the transfer of information to the U.S., which may have different data protection laws than your jurisdiction.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify Educational Institutions of material changes via email at least 30 days before they take effect.

The date at the top of this policy indicates when it was last updated. Your continued use of Eleve after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices:

Additional Resources