Privacy Policy

Stemplitude Inc. ("Stemplitude," "we," "us") respects your privacy. This Privacy Policy explains what information we collect, why we collect it, how we share it with service providers and optional integrations, and the choices available to families, learners, and organizations using our platform.

Stemplitude serves educational programs for children and teens. We design our data practices to support COPPA-aligned workflows, Canadian privacy expectations (PIPEDA), and responsible handling of student information.

• Account data: name, email, role, organization membership, authentication identifiers
• Learner profiles: display name, grade level, progress, assignments, and classroom participation where enabled
• Creative work: projects, lab files, uploads, and published Explore content
• Usage data: device/browser type, pages visited, feature interactions, and diagnostic logs
• Billing data: subscription status and payment metadata processed by our payment provider (we do not store full card numbers)
• Connected service data: when you opt in to an integration (Google, YouTube, Microsoft, or Zoom), we receive the data described in the integrations section below

We use personal information to:

• Provide and secure the Service
• Support instructors, parents, and program administrators
• Track learning progress and deliver assignments
• Process billing and communicate about your account
• Sync calendars and create meeting links when you connect Google, Microsoft, or Zoom
• Let instructors select YouTube videos for lessons when YouTube is connected
• Improve labs, curriculum tools, and platform reliability
• Comply with legal obligations

We do not sell personal information. We do not use student data for unrelated third-party advertising.

Student accounts are typically provisioned by a parent, guardian, or authorized organization. Where required, we rely on verifiable consent from an adult before collecting personal information from children under 13.

Optional third-party integrations (Google, YouTube, Microsoft, Zoom) are initiated by authorized staff or administrators, not by student accounts directly. Organizations can configure privacy settings including erasure holds and student self-erasure options. Authorized staff and linked parents may request deletion of student data subject to educational record retention requirements.

We use trusted vendors to host, deliver, and operate the Service. They process data on our behalf under contractual obligations consistent with this policy.

Email delivery may use SendGrid, Postmark, or Mailgun depending on platform configuration. Only the active provider for your deployment processes messages.

Integrations are opt-in. Authorized users connect accounts from Settings → Integrations. We store OAuth tokens in encrypted form to perform actions you request (for example, creating a Zoom link or syncing a calendar). We do not access connected accounts until you connect them.

Each provider's own terms and privacy policy apply when you use their services through Stemplitude. Embedded YouTube videos in lessons are served by Google/YouTube and may collect data according to their policies.

Stemplitude's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We access Google user data only to provide or improve user-facing features you enable (such as calendar sync, meeting links, or YouTube lesson selection), do not transfer Google user data to third parties except as necessary to provide or improve those features, comply with applicable law, or as part of a merger or acquisition, and do not use Google user data for serving advertisements.

Stemplitude uses YouTube API Services. By using features that connect to YouTube, you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms) and the Google Privacy Policy (https://policies.google.com/privacy).

You may revoke Stemplitude's access to your Google or YouTube data at any time through Google Account permissions, and by disconnecting the integration in Stemplitude.

We may disclose information when required by law, to protect the safety of learners and users, or in connection with a merger, acquisition, or sale of assets with notice as required by law.

Published Explore projects may display a creator display name and avatar stored in project metadata so attribution remains accurate if a profile is later anonymized.

We retain account and learning data while an account or enrollment is active and as needed for billing, security, and legal compliance. OAuth tokens are deleted when you disconnect an integration. Parents, guardians, and authorized administrators can request erasure through in-product controls or by contacting info@stemplitude.com.

• Update profile information in account settings
• Connect or disconnect Google, YouTube, Microsoft, and Zoom integrations
• Manage notification preferences where available
• Request access, correction, or deletion subject to applicable law
• Control publishing of learner creative work

We use administrative, technical, and organizational measures designed to protect personal information, including encryption of stored OAuth tokens. No online service can guarantee absolute security; please use strong passwords and report suspected incidents promptly.

Stemplitude is operated from Canada. Service providers and integration partners may process data in the United States and other countries. Where required, we rely on appropriate safeguards such as contractual protections with vendors.

Privacy questions, data requests, or processor inquiries: info@stemplitude.com

Stemplitude Inc., Vancouver, BC, Canada