- Privacy Policy
K12 Plus LLC Privacy Policy and Student Data Privacy Addendum
Empowering educational institutions with a secure, cloud-based platform for special education management. We are fully committed to protecting student data through strict compliance with FERPA, COPPA, and industry-leading SOC 2 and GovRAMP security frameworks. Your data remains your own—always protected, never sold.
Student Support
Shared Teams
Program Clarity
Privacy Policy
Effective Date: 7/10/2026
K12 Plus LLC (“K12 Plus,” “we,” “our,” or “us”) is committed to protecting the privacy and security of student, educator, and school data. This Privacy Policy and Student Data Privacy Addendum explains how we collect, use, disclose, and safeguard personal information through:
- K12 Plus Special Programs SaaS Application, a cloud-based platform used by schools and educational organizations to support special education programs.
1. Definitions
For purposes of this policy:
“Student Data” means personally identifiable information related to students that is maintained by an educational agency or institution and provided to K12 Plus in connection with the use of the Services.
“School” or “Educational Institution” refers to a school district, charter school, educational agency, or other organization that contracts with K12 Plus to use the platform.
“Authorized User” means teachers, administrators, therapists, support staff, or other personnel authorized by a School to access the platform.
“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household.
“Service Provider” means a legal entity that processes personal information on behalf of K12 Plus pursuant to a written contract that prohibits the entity from retaining, using, or disclosing the personal information for any purpose other than performing the services specified in the contract.
2. Role of K12 Plus
K12 Plus operates as a service provider and school official with legitimate educational interests under the Family Educational Rights and Privacy Act (FERPA).
Schools retain ownership and control of Student Data.
K12 Plus processes Student Data only on behalf of Schools and solely for the purpose of delivering the contracted educational services.
K12 Plus does not use Student Data for:
- targeted advertising
- building marketing profiles
- selling personal information
3. Information We Collect
Student Information Provided by Schools
Schools may provide student information necessary for delivering special education services, including:
- Student name
- Date of birth
- Grade level
- Enrollment information
- Special education eligibility data
- Individualized Education Programs (IEPs)
- Accommodation plans
- Service delivery records
- Progress monitoring data
- Behavioral or educational support data
- Parent or guardian contact information
This information is collected only through authorized school personnel.
Educator and School Staff Information
We may collect information related to educators and staff, including:
- Name
- Work email address
- Organization or school affiliation
- Job role
- Login credentials
- Platform activity logs
Website Data
When users visit www.k12plus.com, we may collect:
- IP address
- Browser type
- Device type
- Website pages visited
- Referral URLs
- Usage analytics
This information is used to maintain and improve website performance.
Support Communications
When contacting K12 Plus support, we may collect:
- Name
- Email address
- Organization
- Message content
- Technical diagnostic data
4. How We Use Information
K12 Plus uses collected information to:
- Deliver and operate the Special Programs platform
- Manage special education program documentation
- Support IEP management and service tracking
- Provide technical support
- Maintain system reliability and security
- Improve service performance
- Comply with legal obligations
Student Data is used only for educational and operational purposes authorized by Schools.
5. Student Data Privacy Commitments
No Sale of Student Data
Student Data will never be sold or rented.
No Targeted Advertising
Student Data will not be used for advertising purposes.
Limited Use
Student Data is used only to provide contracted educational services.
Data Minimization
Only the minimum necessary data is collected and processed.
School Control
Schools retain full ownership and control over Student Data.
6. FERPA Compliance
K12 Plus acts as a School Official under FERPA and:
- processes education records only for legitimate educational purposes
- maintains confidentiality of education records
- does not redisclose education records without authorization from the School.
7. COPPA Compliance
Because K12 Plus services may involve children under age 13, we rely on School consent under COPPA. Schools authorize the collection of Student Data solely for educational purposes. K12 Plus does not knowingly collect personal information directly from children outside of authorized educational contexts.
8. HIPAA Considerations
In certain situations, student information processed by the platform may relate to health services provided within an educational setting.
To the extent protected health information (PHI) is processed:
- K12 Plus applies administrative, technical, and physical safeguards aligned with HIPAA Security Rule principles
- Data access is restricted to authorized users
- Health-related data is protected under applicable education and privacy laws
However, most student health information maintained by schools remains governed primarily by FERPA rather than HIPAA.
K12 Plus acts as a School Official under FERPA and:
● processes education records only for legitimate educational purposes
● maintains confidentiality of education records
● does not redisclose education records without authorization from the School
● also complies with applicable state student data privacy laws, including the Texas Student Privacy Act (Texas Education Code Ch. 32) and Texas HB 18, where applicable.
Schools remain responsible for responding to parent or student record requests under FERPA.
9. Security and Compliance Framework
K12 Plus maintains a comprehensive security program designed to protect student and school data.
Our security practices align with industry standards including:
SOC 2 Security Controls
K12 Plus implements controls consistent with SOC 2 Trust Service Principles, including: Security.
Security measures include:
- encryption in transit and at rest
- role-based access controls
- authentication and identity management
- audit logging
- vulnerability monitoring
- incident response procedures
GovRAMP-Aligned Security Practices
K12 Plus security practices align with government-grade cloud security frameworks, including GovRAMP-aligned practices, such as:
- secure cloud infrastructure
- access control monitoring
- data encryption standards
- system auditing
- risk management procedures
These measures support use by public sector education institutions and government-affiliated programs.
10. Data Security Safeguards
K12 Plus employs safeguards including:
- TLS encryption for data transmission
- encrypted data storage
- multi-layer access controls
- continuous monitoring
- secure cloud hosting environments
- restricted employee access to sensitive information
- incident detection and response procedures
11. Data Sharing
K12 Plus does not sell personal information.
Information may be shared only:
With Schools
Authorized school personnel can access student data through the platform.
With Trusted Service Providers
We may share limited information with vendors that support:
- secure cloud hosting
- infrastructure management
- customer support
- cybersecurity services
All vendors are contractually required to protect data confidentiality.
For Legal Requirements
Information may be disclosed when required to comply with law, legal process, or governmental request.
12. Data Retention and Deletion
K12 Plus retains data only as long as necessary to:
- provide contracted services
- meet legal and contractual obligations
Upon termination of a school agreement:
- Schools may request data export
- Data may be securely deleted according to contractual terms and retention schedules.
13. Parent and Student Rights
Because Schools control Student Data:
Parents and students should contact their School or District to:
- access education records
- request corrections
- request deletion where applicable
K12 Plus will assist Schools in fulfilling such requests as required by law.
14. Cookies and Website Tracking
Our website may use cookies and analytics tools to:
- improve functionality
- analyze website usage
- enhance user experience
Users can control cookies through browser settings.
15. International Access
K12 Plus services are intended for use by United States educational institutions.
Users accessing services from outside the U.S. acknowledge that information may be processed within the United States.
K12 Plus does not market or offer services to individuals located in the European Union, European Economic Area, or United Kingdom and does not consider itself subject to the General Data Protection Regulation (GDPR). However, K12 Plus applies security, data minimization, and purpose limitation practices consistent with internationally recognized privacy principles.
16. Changes to This Policy
K12 Plus may update this policy periodically.
Updates will be posted on:
The “Effective Date” will reflect the most recent revision.
17. Privacy Rights and Commitments
K12 Plus voluntarily extends the following privacy commitments to all users of its website and platform, regardless of US state of residence. Student Data processed by K12 Plus on behalf of Schools is generally exempt from the California Consumer Privacy Act (CCPA) because K12 Plus acts as a service provider processing data on behalf of educational institutions, and because education records governed by FERPA are exempt from the CCPA. Regardless of whether the CCPA applies, K12 Plus voluntarily extends the following commitments as a matter of privacy best practice:
● No Sale of Personal Information. K12 Plus does not sell personal information of any individual to any third party for any purpose.
● No Targeted Advertising. K12 Plus does not use personal information or student data for targeted advertising, behavioral profiling, or building marketing profiles.
● Data Minimization, Transparency, and Security commitments as described throughout this policy.
For student data and education records, parents and students should contact their School or District. For all other privacy requests, contact: privacy@k12plus.com.
18. Data Breach Notification
K12 Plus maintains an incident response plan designed to detect, contain, and remediate security incidents that may involve unauthorized access to, or disclosure of, personal information or student data.
In the event K12 Plus becomes aware of a confirmed security breach involving student data or education records, K12 Plus will:
● Notify the affected School or Educational Institution without unreasonable delay after confirmation of the breach.
● Provide a written description of the nature of the breach, including the categories of data affected, the approximate number of records involved, and the date or estimated date of the incident.
● Describe the measures taken or proposed to contain and remediate the breach.
● Identify a point of contact at K12 Plus for ongoing communication regarding the breach.
● Cooperate with the School’s own notification obligations under applicable federal and state law.
K12 Plus may delay notification if a law enforcement agency determines that notification would impede a criminal investigation, provided such delay is requested in writing.
19. Contact Information
For questions regarding this Privacy Policy or Student Data practices, please contact:
K12 Plus LLC
Email: privacy@k12plus.com
Website: https://www.k12plus.com