AOPS ACADEMY PRIVACY POLICY - EFFECTIVE AUGUST 21, 2023

This Privacy Policy applies to all users. Please click here for our specific information practices with regards to children under 13 (also provided at the end of this policy).

High Performance Learning, LLC, doing business as AoPS Academy ("Academy", "we" or "us"), is committed to protecting the privacy of student records and other personal information obtained through its web site at www.aopsacademy.org and affiliated web sites associated with an AoPS Academy campus that links to this Privacy Policy (collectively, the "Sites" and individually a "Site"), and all associated products and services provided on and through the Sites, including registration for classes and workshops conducted at physical locations ("Classes"), book sales, and certain email publications prepared and delivered by us to users. The foregoing items are referred to collectively in this Privacy Policy as the "Services".

This Privacy Policy provides an overview of the terms and conditions surrounding the use of this information and discloses our information gathering and dissemination practices in connection with the Services. It does not apply to personal information that may be acquired by Academy in other ways.

AoPS Incorporated ("AoPS"), a Delaware corporation provides online educational tools, content, testing and assignments as part of the Services (the "AoPS Services"). You agree that AoPS's handling of your personal information in connection with the AoPS Services is subject to the AoPS Privacy Policy located here, and not this Privacy Policy. AoPS also provides online educational tools, content, testing and assignments via its Beast Academy Online learning system as part of the Services ("Beast Academy Services"). You agree that AoPS's handling of your personal information in connection with the Beast Academy Services is subject to the Beast Academy Privacy Policy located here, and not this Privacy Policy. You also acknowledge and agree that AoPS will provide data regarding your use of AoPS Services to us.

What information does AoPS Academy collect and how is that information used?

Information Collected

In order to apply for and use our Services, Users provide name, email address, phone number, physical address, gender, date of birth, school, test scores, course information, and other academic history. You may voluntarily provide additional personal information, or we may ask for additional personal information, in connection with the purchase and use of Services.

In some cases, users will purchase access to the Services by entering a credit card or information for another form of payment (e.g., Paypal). Academy may arrange for the collection of financial information such as your payment method (valid credit card number, type, expiration date or other financial information).

The Services may contain collaboration tools to allow for communications between the instructor and student, and between students. These tools may enable users to see other users' personal information including account/student name, and other information. Any additional personal information that you communicate with other users of the Services through collaboration or communication tools is your own choice and the privacy of such information cannot be guaranteed. Information shared through collaboration tools should be considered public information.

Cookies

A "cookie" is a small piece of data placed on your computer by the Site. Within your web browser, cookies placed by our Site can only be accessed by our Site. We use cookies to maintain session and preference information to improve the use of the Sites. You may set your web browser to decline our cookies; however this will render large portions of our Sites unusable.

We may also allow cookies to be placed on your computer by third parties for the purpose of website analytics. This allows the third parties to collect data about your use of our Sites. The data collected by these cookies may include information such as your IP address or mobile identifier, the type of computer operating system, the web browser, the frequency with which the user visits various parts of our Sites or applications, and information regarding the online or mobile service provider. We don't share the data that a third party collects with anyone besides that third party. The third parties are required to not share any personally identifiable information they may collect with anyone other than us (except as may be required by law). We use the data that is collected in the following ways:

• to report, in aggregate, how our visitors find and use our Sites;
• to understand overall visitor behavior; and
• to inform how we update and improve our Sites.

Academy also gathers information about its users collectively and automatically logs IP addresses, session sources, and other data that track access to the Site. We analyze these logs to better understand aggregate behavior and to monitor Services performance. The logs are analyzed to ascertain the overall aggregate trends they reveal about our users, but not as a means of tracking the behavior of individual users outside our Site. This information is used for the purposes of maintaining and improving the Services, and expanding its capabilities.

Job Applicants

If you apply for a job with AoPS Academy via our website or a third party website, we will obtain the information you choose to provide us in your application for that purpose. For example, we collect contact information (e.g. name, email, telephone); professional and employment-related information (e.g. your resume, employment history, experience, qualifications, portfolios, work samples); education information (e.g. degrees obtained, academic records); other employment details (e.g. how you heard about the position, willingness to relocate, and other job preferences); and information provided during the hiring process (e.g. assessments, phone interviews, reference checks). We will use the information we collect to carry out our application and recruitment process; to improve our application and recruitment process, and to comply with applicable laws and regulations and create reports required under local laws or regulations. We may also optionally collect demographic information (e.g. race, ethnicity, gender, disability status) that is collected for the sole purpose of creating reports required under local laws and regulations. By submitting a job application, you agree that we may contact you using any of the contact information provided.

Use and Disclosure of Collected Information

We do not use or share your personal information with others except as indicated in this Privacy Policy.

Academy will use your personal information to provide the Services to you, alert you of new Services features and enhancements, respond to your support issues, and/or notify you of upgrade opportunities, promotions, and special offers. You agree that we may communicate with you via email and other electronic communication tools for any purpose relating to the Site or the Services. We may share your name, phone number, and email address with third parties for sending correspondence. If you opt into marketing communications, we may share that information with third party social media platforms you may use to share updates and information about our services/related services with you on those platforms. We will not share this information with any other third party, except as may be required by law.

We will share payment information with our credit card payment processor. We will store all of this information on our server, except for your credit card information; however, the credit card information may be retained by our credit card processor for the purpose of processing additional transactions, refunds, and/or chargebacks. We will not use this information for any purpose other than to process your purchase, and will not share this information with any other third party, except as described above or as may be required by law.

We may access and copy student information for the purposes of backup, internal maintenance, improvement of the Services, and technical support. We take the utmost efforts to not divulge student information to unauthorized individuals. We strive to ascertain whether authorized persons are able to access the information correctly and to inform these authorized persons how to access the information.

Academy may aggregate information to enhance our Services, perform educational research, and to develop new Services. We may disclose aggregated and statistical information to third parties that does not identify a specific user.

Academy may also disclose personal information:

• When we have your permission to do so; or
• To AoPS; or
• To companies other than AoPS who work for Academy to provide one or more parts of the Services or that provide related administrative functions (such as support Services, web analytics, and fraud detection). These third parties may have access to your personal information; if they do, this access is only so that they may perform these tasks on our behalf and they are obligated not to disclose or use it for any other purpose; or
• When we believe in good faith that disclosure is reasonably necessary to (1) comply with a legal process or law, or to respond to a government request for information, (2) enforce the terms of use or other agreements, (3) respond to claims that any content on the Site or Services violates the rights of third parties, or that otherwise arise from your use of the Services, or (4) protect the rights, property, or personal safety of Academy, its users, or the public.

In the event AoPS Academy is involved in a merger, acquisition, sale of business assets involving customer information, or similar transaction, your information may be transferred or shared as part of the transaction. We will work to require the recipient protect all personal information collected from AoPS Academy users in accordance with the terms of this Privacy Policy.

Opt-Out

We provide you the opportunity to opt-out of receiving certain communications from us by contacting customer support. In addition, all marketing emails from AoPS Academy will provide you with the opportunity to unsubscribe from future marketing mailings. Even if you opt out of such communication, however, we reserve the right to send you transactional messages, including email and other communications to provide account related information, disclose maintenance, transaction-related matters (e.g., order confirmation, shipping information, account status information, etc.) and other service-related issues.

Access to Account

If you are a registered user of the Services, you can change your account information through the account profile component of the Services. You may need to supply certain information so that we can try to verify that you have authority to modify this information.

Third-Party Sites

The Site and Services may contain links and/or other connections to other sites, web services, and information. We have no responsibility for the privacy practices of other web sites and services.

The fact that we may link to a website is not an endorsement, authorization or representation of our affiliation with that third party, nor is it an endorsement of their privacy or information security policies or practices. We do not exercise control over third party websites or services. These other websites or services may place their own cookies or other files on your computer, collect data or solicit personal information from you. Other websites and services follow different rules regarding the use or disclosure of the personal information you submit to them. We encourage you to read the privacy policies or statements of the other websites you visit and services you use.

Legal Requirements

We intend to protect your privacy to the fullest extent possible as described in this policy while also fulfilling our responsibility to uphold all applicable laws and regulations. Due to potential legal requirements and other possible circumstances, we cannot ensure that all of your private communications and other personally identifiable information will never be disclosed or accessed in ways not otherwise described in this policy. We may be compelled under law to disclose information to government or third parties under certain circumstances or third parties may unlawfully intercept or access transmissions or private communications. Further, we can, and you hereby authorize us to, disclose any information to law enforcement or other government officials that we, in our sole discretion, believe necessary or appropriate in compliance with the law and/or government requests.

United States

The Services are hosted in the United States. If you are accessing the Site or Services from outside the United States, please be advised that through your continued use of the Site or Services, which is governed by U.S. law and this Privacy Policy, you are transferring your personal information to the United States and you consent to that transfer.

Security

We implement commercially reasonable security methods to protect the information we collect from you. We maintain internal data management policies and procedures, system monitoring, and incident response plans. While the security of your personal information is of the utmost importance to us, we cannot absolutely guarantee the security of any information you choose to disclose.

Data Retention

The following describes Art of Problem Solving’s data retention policies for categories of personal information that are collected:

Category	Purpose	Third Parties Shared	Retention Period
Identifiers	(a) Performance of a contract (b) Necessary for our legitimate interests (c) Necessary to comply with a legal obligation	(a) Billing, marketing, hosting, analytics and similar service providers (b) Subsidiaries and affiliates	We will retain information about you for so long as we have a legal or business purpose for it or a legal requirement to maintain it. Once we no longer have a legal or business purpose for the information and no legal requirement to maintain the information, we will promptly purge the information.
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e))	(a) Performance of a contract (b) Necessary for our legitimate interests (c) Necessary to comply with a legal obligation	(a) Billing, marketing, hosting, analytics and similar service providers (b) Subsidiaries and affiliates	We will retain information about you for so long as we have a legal or business purpose for it or a legal requirement to maintain it. Once we no longer have a legal or business purpose for the information and no legal requirement to maintain the information, we will promptly purge the information.
Protected classification characteristics under California or federal law	(a) Necessary for our legitimate interests	(a) Hosting and similar service providers (b) Subsidiaries and affiliates	We will retain information about you for so long as we have a legal or business purpose for it or a legal requirement to maintain it. Once we no longer have a legal or business purpose for the information and no legal requirement to maintain the information, we will promptly purge the information.
Commercial information	(a) Performance of a contract (b) Necessary for our legitimate interests (c) Necessary to comply with a legal obligation	(a) Billing, marketing, hosting, analytics and similar service providers (b) Subsidiaries and affiliates	We will retain information about you for so long as we have a legal or business purpose for it or a legal requirement to maintain it. Once we no longer have a legal or business purpose for the information and no legal requirement to maintain the information, we will promptly purge the information.
Internet or other similar network activity	(a) Necessary for our legitimate interests	(a) Hosting, marketing, analytics, security and similar service providers (b) Subsidiaries and affiliates	We will retain information about you for so long as we have a legal or business purpose for it or a legal requirement to maintain it. Once we no longer have a legal or business purpose for the information and no legal requirement to maintain the information, we will promptly purge the information.
Geolocation data	(a) Performance of a contract (b) Necessary for our legitimate interests (c) Necessary to comply with a legal obligation	(a) Billing, marketing, shipping, hosting, analytics and similar service providers (b) Subsidiaries and affiliates	We will retain information about you for so long as we have a legal or business purpose for it or a legal requirement to maintain it. Once we no longer have a legal or business purpose for the information and no legal requirement to maintain the information, we will promptly purge the information.
Professional or employment-related information	(a) Necessary for our legitimate interests	(a) Human resources information and similar service providers (b) Subsidiaries and affiliates	We will retain information about you for so long as we have a legal or business purpose for it or a legal requirement to maintain it. Once we no longer have a legal or business purpose for the information and no legal requirement to maintain the information, we will promptly purge the information.
Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99))	(a) Performance of a contract (b) Necessary for our legitimate interests (c) Necessary to comply with a legal obligation	(a) Hosting, analytics and similar service providers (b) Subsidiaries and affiliates	We will retain information about you for so long as we have a legal or business purpose for it or a legal requirement to maintain it. Once we no longer have a legal or business purpose for the information and no legal requirement to maintain the information, we will promptly purge the information.
Sensitive personal information	(a) Performance of a contract (b) Necessary for our legitimate interests	(a) Hosting, analytics and similar service providers (b) Subsidiaries and affiliates	We will retain information about you for so long as we have a legal or business purpose for it or a legal requirement to maintain it. Once we no longer have a legal or business purpose for the information and no legal requirement to maintain the information, we will promptly purge the information.

The criteria used to determine our retention periods include:

• The length of time we have an ongoing relationship with you (for example, for as long as you are a customer or prospective customer) and the length of time thereafter during which we may have a legitimate need to reference your personal information to address issues that may arise;
• Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records for a certain period of time before we can delete them); or
• Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).

Notice of Consumer Rights

You may have rights with respect to personal information that has been collected in the last twelve (12) months, including:

• The right to know what personal information a business has about them and what that business does with that information
• The right to know whether their data is sold or disclosed, and to whom
• The right to opt-out (prevent) the sale of their data
• The right to opt-out of sharing personal information for cross-context or targeted behavioral advertising purposes
• The right to correct inaccurate personal information
• The right to restrict the processing of sensitive personal information
• The right to delete their personal information, subject to certain exceptions
• The right to appeal a refusal to take action on a consumer rights request

For information on what personal information we collect and how it is used, please refer to the “What information does AoPS Academy collect and how is that information used?” section above.

We will never sell users’ personal information. For information on what personal information we collect and how it is used, please refer to the “What information does AoPS Academy collect and how is that information used?” section above.

Only you, or someone legally authorized to act on your behalf, may make a request to know or delete related to your personal information. To designate an authorized agent, you must provide a signed, written authorization or a valid power of attorney issued pursuant to California Probate Code sections 4000 to 4465. You may also make a request on behalf of your child by contacting us through the email associated with the parent account for that child.

To exercise any of these rights, please submit a request by emailing privacy@aopsacademy.org with the subject line, "Consumer Rights Request" or calling (858) 675-4555. We will need to verify your identity before processing your request, which may require us to request additional personal information from you or require you to log into your account, if you have one. In certain circumstances, we may decline or limit your request, particularly where we are unable to verify your identity or locate your information in our systems, or as permitted by law.

We will not discriminate against you for exercising any of these rights, including denying you goods or services, charging you different prices or rates for goods or services, or providing you a different level or quality of goods or services.

Changes

Academy posts any changes to this Privacy Policy on the Site. Your continued use of the Site and Services constitutes your agreement to this Privacy Policy and any future revisions.

Contact Information

Questions or comments about this Privacy Policy may be sent to:
High Performance Learning, LLC dba AoPS Academy
15330 Avenue of Science
San Diego, CA 92128
privacy@aopsacademy.org

Effective date and notice of future changes

This Privacy Policy is effective August 21, 2023. This Privacy Policy may be updated from time to time as necessary.

COPPA Policy

The federal Children's Online Privacy Protection Act (COPPA) requires that we inform you of our practices with regards to our collection, use, or disclosure of personal information from children under the age of 13, and to obtain verifiable parental consent prior to collecting, using, or disclosing any such information. If we discover we have collected information from a child in a manner inconsistent with COPPA's requirements, we will either seek the parent's consent for that collection or delete the information. We won't require a child to disclose more information than is reasonably necessary to participate in an activity.

1. Information we collect and share

When we use the term "children" or "child", it refers to individuals under the age of 13. We may collect and share the following personal information with verifiable parental consent (where necessary under COPPA) from children:

(a) Children may provide us their email address during registration or as part of receiving our services. We may use this email address to communicate directly with the child. If the child joins one of our email lists, their email address will be shared with the third party we use to manage our email lists. We will not otherwise share an email address with a third party except when required by law.

(b) A username used to uniquely identify each child is created during registration. This username may be disclosed on our Sites, for example in our message boards or any other part of the Sites on which the child may participate. Other members of the Sites may use the child's username to directly contact the child (for example, by private message).

(c) The child's real name will only be used for internal purposes, or will be disclosed only to third parties to whom the child's parent has given specific authorization.

(d) Other non-identifying data may be collected in the course of a child's participation on the Sites; for example, online homework submissions, etc. These data may be combined or associated with the child's username, and may be publicly available on the Sites, at the child's or parent's discretion.

(e) Children using our Sites may have the opportunity to post personal information about themselves (for example, in a message board post or on a blog). Such information may be publicly displayed on the Site alongside the child's username. We strongly discourage users from sharing personal information, but we cannot prevent it in every instance. This policy addresses how parents can delete information posted by their children in item #2 below.

(f) Children using our Sites may take video-based classes. In video-based classes, video and audio of students are streamed to class participants via a third party, Zoom Video Communications, Inc. Zoom Video Communications, Inc. only collects user data required to provide its services and has a privacy policy available here. We create recordings of each video-based class that contain audio from student participants. Consent to gather audio recording is gathered before a student enters a video-based class. Recordings are only made available to students enrolled in the class and employees of AoPS Academy and AoPS Incorporated. Recordings are automatically deleted 7 days after the class.

(g) When children use our Sites, certain information may automatically be collected by third parties: IP address or mobile identifier, the type of computer operating system, the web browser, the frequency with which the user visits various parts of our Sites or applications, and information regarding the online or mobile service provider. This information is collected using technologies such as cookies, which are described above.

This data is primarily collected and shared with third parties for internal purposes, in order to:

• report, in aggregate, how our visitors find and use our Sites;
• understand overall visitor behavior; and
• inform how we update and improve our Sites.

This information is not used to target advertising to specific users. For any questions about how we or any third-party uses your data, please do not hesitate to contact us. Our contact information is provided below in item #3.

(h) We may disclose a child’s personal information if permitted or required by law, for example, in response to a court order or a subpoena.

(i) We generally do not collect personal information from a child until we have received verifiable parental consent in accordance with COPPA. There are limited instances where we may collect information without parental consent in compliance with COPPA, including:

• An email address is collected from a child at the time of registration, solely to contact the child's parent in order to obtain the necessary parental consent;
• To protect the security or integrity of our Sites, applications, and other technology; and
• A username is selected by the child; however, this username cannot be used to contact the child, nor be used for the purposes listed in sections (c) and (d) of above, unless and until we receive verifiable parental consent.

2. Parental rights and responsibilities

1. At any time, a parent can review or ask us to delete a child's personal information, or can refuse to permit its further collection or use, by contacting us by any of the means listed in item #3 below.
2. Parents may also access their child’s personal information by logging onto their account and can delete their child’s personal information. Parents will need their child’s username and password, and our login page explains how parents can recover a username or password if they cannot recall this information.

3. Contact information

Questions or comments about this policy, or requests pursuant to item #2 above, may be sent to:

High Performance Learning, LLC dba AoPS Academy
15330 Avenue of Science
San Diego, CA 92128
privacy@aopsacademy.org

This COPPA Policy is current as of August 21, 2023. We may change this COPPA Policy from time to time, so please be sure to review periodically. This policy will be available at our website at https://aopsacademy.org/legal/privacy.