Privacy Policy

minimal-hero

K12 Plus LLC Privacy Policy and Student Data Privacy Addendum

Effective Date: 3/16/2026

K12 Plus LLC (“K12 Plus,” “we,” “our,” or “us”) is committed to protecting the privacy and security of student, educator, and school data. This Privacy Policy and Student Data Privacy Addendum explains how we collect, use, disclose, and safeguard personal information through:

  • www.k12plus.com
  • K12 Plus Special Programs SaaS Application, a cloud-based platform used by schools and educational organizations to support special education programs.

This policy applies to information collected through our services, website, applications, and related communications.

1. Definitions

For purposes of this policy:

“Student Data” means personally identifiable information related to students that is maintained by an educational agency or institution and provided to K12 Plus in connection with the use of the Services.

“School” or “Educational Institution” refers to a school district, charter school, educational agency, or other organization that contracts with K12 Plus to use the platform.

“Authorized User” means teachers, administrators, therapists, support staff, or other personnel authorized by a School to access the platform.

2. Role of K12 Plus

K12 Plus operates as a service provider and school official with legitimate educational interests under the Family Educational Rights and Privacy Act (FERPA).

Schools retain ownership and control of Student Data.

K12 Plus processes Student Data only on behalf of Schools and solely for the purpose of delivering the contracted educational services.

K12 Plus does not use Student Data for:

  • targeted advertising
  • building marketing profiles
  • selling personal information

3. Information We Collect

Student Information Provided by Schools

Schools may provide student information necessary for delivering special education services, including:

  • Student name
  • Student ID numbers
  • Date of birth
  • Grade level
  • Enrollment information
  • Special education eligibility data
  • Individualized Education Programs (IEPs)
  • Accommodation plans
  • Service delivery records
  • Progress monitoring data
  • Behavioral or educational support data
  • Parent or guardian contact information

This information is collected only through authorized school personnel.

Educator and School Staff Information

We may collect information related to educators and staff, including:

  • Name
  • Work email address
  • Organization or school affiliation
  • Job role
  • Login credentials
  • Platform activity logs

Website Data

When users visit www.k12plus.com, we may collect:

  • IP address
  • Browser type
  • Device type
  • Website pages visited
  • Referral URLs
  • Usage analytics

This information is used to maintain and improve website performance.

Support Communications

When contacting K12 Plus support, we may collect:

  • Name
  • Email address
  • Organization
  • Message content
  • Technical diagnostic data

4. How We Use Information

K12 Plus uses collected information to:

  • Deliver and operate the Special Programs platform
  • Manage special education program documentation
  • Support IEP management and service tracking
  • Provide technical support
  • Maintain system reliability and security
  • Improve service performance
  • Comply with legal obligations

Student Data is used only for educational and operational purposes authorized by Schools.

5. Student Data Privacy Commitments

K12 Plus commits to the following Student Data protections:

  • No Sale of Student Data
    Student Data will never be sold or rented.
  • No Targeted Advertising
    Student Data will not be used for advertising purposes.
  • Limited Use
    Student Data is used only to provide contracted educational services.
  • Data Minimization
    Only the minimum necessary data is collected and processed.
  • School Control
    Schools retain full ownership and control over Student Data.

6. FERPA Compliance

K12 Plus acts as a School Official under FERPA and:

  • processes education records only for legitimate educational purposes
  • maintains confidentiality of education records
  • does not redisclose education records without authorization from the School.

Schools remain responsible for responding to parent or student record requests under FERPA.

7. COPPA Compliance

Because K12 Plus services may involve children under age 13, we rely on School consent under COPPA.

Schools authorize the collection of Student Data solely for educational purposes.

K12 Plus does not knowingly collect personal information directly from children outside of authorized educational contexts.

8. HIPAA Considerations

In certain situations, student information processed by the platform may relate to health services provided within an educational setting.

To the extent protected health information (PHI) is processed:

  • K12 Plus applies administrative, technical, and physical safeguards aligned with HIPAA Security Rule principles
  • Data access is restricted to authorized users
  • Health-related data is protected under applicable education and privacy laws

However, most student health information maintained by schools remains governed primarily by FERPA rather than HIPAA.

9. Security and Compliance Framework

K12 Plus maintains a comprehensive security program designed to protect student and school data.

Our security practices align with industry standards including:

SOC 2 Security Controls

K12 Plus implements controls consistent with SOC 2 Trust Service Principles, including:

  • security
  • availability
  • confidentiality
  • processing integrity

Security measures include:

  • encryption in transit and at rest
  • role-based access controls
  • authentication and identity management
  • audit logging
  • vulnerability monitoring
  • incident response procedures

GovRAMP-Aligned Security Practices

K12 Plus security practices align with government-grade cloud security frameworks, including GovRAMP-aligned practices, such as:

  • secure cloud infrastructure
  • access control monitoring
  • data encryption standards
  • system auditing
  • risk management procedures

These measures support use by public sector education institutions and government-affiliated programs.

10. Data Security Safeguards

K12 Plus employs safeguards including:

  • TLS encryption for data transmission
  • encrypted data storage
  • multi-layer access controls
  • continuous monitoring
  • secure cloud hosting environments
  • restricted employee access to sensitive information
  • incident detection and response procedures

11. Data Sharing

K12 Plus does not sell personal information.

Information may be shared only:

With Schools

Authorized school personnel can access student data through the platform.

With Trusted Service Providers

We may share limited information with vendors that support:

  • secure cloud hosting
  • infrastructure management
  • customer support
  • cybersecurity services

All vendors are contractually required to protect data confidentiality.

For Legal Requirements

Information may be disclosed when required to comply with law, legal process, or governmental request.

12. Data Retention and Deletion

K12 Plus retains data only as long as necessary to:

  • provide contracted services
  • meet legal and contractual obligations

Upon termination of a school agreement:

  • Schools may request data export
  • Data may be securely deleted according to contractual terms and retention schedules.

13. Parent and Student Rights

Because Schools control Student Data:

Parents and students should contact their School or District to:

  • access education records
  • request corrections
  • request deletion where applicable

K12 Plus will assist Schools in fulfilling such requests as required by law.

14. Cookies and Website Tracking

Our website may use cookies and analytics tools to:

  • improve functionality
  • analyze website usage
  • enhance user experience

Users can control cookies through browser settings.

15. International Access

K12 Plus services are intended for use by United States educational institutions.
Users accessing services from outside the U.S. acknowledge that information may be processed within the United States.

16. Changes to This Policy

K12 Plus may update this policy periodically.

Updates will be posted on:

https://www.k12plus.com

The “Effective Date” will reflect the most recent revision.

17. Contact Information

For questions regarding this Privacy Policy or Student Data practices, please contact:

K12 Plus LLC
Email: privacy@k12plus.com
Website: https://www.k12plus.com