How we use Student Information ?
You-Me uses Student Information for the sole purpose of providing user access to and operation of You-Me Global Education. Student Information shall mean personally identifiable information of a student and their “education records” as defined in the Family Educational Rights and Privacy and Personally Identifiable Information as defined in the Children’s Online Privacy Protection. Student Information shall not include anonymous information which does not enable identification of an individual student, or de-identified information for which all personally identifiable information has been removed and an individual student is not identifiable.
What is Information accountability?
- Not sell student information
- Use data for authorized education purposes only
- Not change privacy policies without notice or choice
- Enforce strict limits on data retention
- Support parental access to, and correction of errors in, their children’s information
- Provide comprehensive security standards
- Be transparent about collection and use of data
You-Me Global Education takes numerous measures to maintain the security and confidentiality of all student records and comply with requirements of the Family Educational Record Privacy applicable to the educational records of students. We will not use any information provided for the creation and maintenance of students’ Backpack accounts for any purpose other than preserving seamless access to licensed materials, and we will not disclose such information to any third party unless required by law. Any Student Information collected online or otherwise is used solely for the contracted purposes of the You-Me Global Education system.
Storage of Student Information
Student Information is stored, encrypted, and served from You-Me’s on-premise data center, which has comprehensive monitoring systems in place using tools such as Servers Alive, Spiceworks, PRTG Network Monitor, Temperature Alert, Nagios, and LibreNMS. Additionally, a standby diesel generator provides uninterrupted power during outages. Backup cloud, and data backups are encrypted using AES 256-bit keys.
Intra-school, college, university Sharing of Student Information
Frequently, schools members requests You-Me’s assistance with this step. The information may be shared by automation through LDAP, SIP2, LTI, or SSO; by sending a CSV file of Student Information through You-Me’s self import tool or automated FTP import capabilities; or by sending it in a variety of file formats. Once account setup is complete, any files containing Student Information (not automated) sent to You-Me Global may be returned to the district, but all copies in You-Me’s possession will be destroyed. Automated Student Information uploads are not visible to You-Me Global employees and are protected by TLS encryption.
User passwords are not visible to You-Me Global administrators or You-Me Global employees. For external authentication schemes, users enter passwords on an TLS-protected login page and their passwords are not stored. In all other cases, stored passwords are protected using salted hashes and You-me Global user authentication is protected by TLS/HTTPS encryption.
You-Me Global collects anonymous information which does not enable identification of an individual student, or de-identified information for which all personally identifiable information has been removed and an individual student is not identifiable. This type of information is collected as part of the standard operation of the platform. This may include browser type, operating system, IP address, and the domain name from which the application was accessed. In addition, You-Me Global may collect information about browsing behavior, such as the date and time of access, the areas or pages visited, the amount of time spent viewing each page, the number of times returned to the application, the referring web page, pages visited, location, mobile carrier, device, and application IDs. You-Me Global Education analyzes de-identified, non-personal information and/or aggregated data solely for the purpose of improving service. No information at any point will be transferred or sold.
You-Me Global Education has implemented administrative, physical, and technical infrastructure, as well as procedural safeguards, to protect and maintain the integrity of Student Information. Operating systems and commercial applications are patched to current levels. Critical security patches are deployed within one week of release. Anti-virus software is deployed to all desktops and servers in the You-Me Global Education facility and kept up-to-date with the latest definitions. The firewall and DMZ configuration is deployed to prevent public access to Student Information and to segregate that environment from the Internet using a WatchGuard M300 firewall appliance. Only HTTP/HTTPS ports 80 and 443 are allowed through from the Internet to the web server. Third party audits of security operations are conducted quarterly by ControlScan for compliance with PCI-DSS standards. You-Me Global Education is PCI-DSS compliant. For district-initiated security audits, requests may be submitted in writing to You-Me Global Education’s point of contact.
Student Information Security Breach Response
In the event that an unauthorized disclosure of Student Information, unauthorized access, or other incident that threatens the security of Student Information comes to You-Me Global Education’s attention, the Head Quarter will be notified immediately. You-Me Global Education’s Computer Security Incident Response Team (CSIRT) deals with security incidents as recommended by the Handbook for Computer Security Incident Response Teams (CSIRTs), In the case of a security breach, Mackin’s CSIRT is trained to:
- Make an initial assessment
- Communicate the incident
- Contain the damage and minimize the risk
- Identify the type and severity of the compromise
- Protect evidence
- Notify external agencies if appropriate
- Recover systems
- Compile and organize incident documentation
- Assess incident damage and cost
- Review the response
- Update policies
By submitting a written request to You-Me Global Education’s point of contact, in regards to incident investigation, schools may request log data for end user, administrative, and maintenance activity. You-Me Global Education carries cyber liability insurance of $1,000,000 to cover Crisis Management and Computer System Extortion, Media and Content Liability, and Security and Privacy Liability.
Disposal of Student Information
You-Me Global Education does not routinely delete stored Student Information unless specifically requested by the district or managing agency. However, You-Me Global Education will dispose of or return any Student Information to the district upon request at contract end.
Disclosure of Student Information
You-Me Global Education does not disclose information collected from children or administrators for account creation to any third party unless required by law or court order.
All licensed activity on the website should be for educational purposes only, including copying, downloading, storing, sharing, transmitting, transferring, distributing or modifying software or content. All activities are subject to copyright, trademark, and other intellectual property rights under United States and foreign laws and international conventions. Customer will not interfere with the website in any way and will not use its access for any illegal or improper purpose. Except for data uploaded by Customer, sites linked to the website, or otherwise expressly excepted on the website, all right, title and interest in anything on the Website, including all copyrights throughout the world, are the property of You-Me Global Education and it reserves all rights therein. You-Me Global Education may change the features on the website at any time in its sole discretion. The products on our website are protected by the United States Copyright laws. All intellectual property rights of the content on the You-Me Global Education platform provided by publishers are reserved to the owner of such intellectual property, and the Customer irrevocably acknowledges and agrees that licensed access to such content through our website shall not transfer such rights.
Responsibility for Access
Customer is responsible for all access to the Website by Customer and its staff, students, employees, agents or other individuals at any location or by using Customer’s equipment, or by using Customer’s password, even if Customer did not authorize such use. As permitted by law, customer agrees to defend and indemnify You-Me Global Education from any claims or damages relating to or arising out of any such access.
Education may share Customer Content in order to respond to claims that any content violates the rights of third-parties; or if such content threatens the security or viability of You-Me Global Education, its Customers and the public. Customer acknowledges that it is not feasible for You-Me Global Education to review Customer Content, nor to review all third-party content and postings on the website or which are linked to the website. Accordingly, You-Me Global Education cannot ensure accuracy or educational value of such information, content, linked websites or postings and Customer must exercise a reasonable degree of caution in dealing with such information, content, linked websites or postings and other Customers on the Website.
Access to Digital Content Hosted on Mackin’s Proprietary Platform
Many digital resources in You-Me Global Education will be hosted on our proprietary platform. This means You-Me Global Education has files from publishers on our servers. In the event you decide to cease using You-Me Global Education for access to your digital resources, we pledge to make a good faith effort to 1) represent your interests to our publishing partners in finding an alternative hosting solution, or 2) provide you with a viable portability mechanism while observing the terms of all material license agreements.
Digital Millennium Copyright Act
We respect the intellectual property of others. If you believe that your copyrighted materials have been copied in a way that constitutes copyright infringement.
Disclaimer of Warranties and Limitation of Liability
In no event shall You-Me Global Education or its business partners be liable to any person or entity for any direct, indirect, special, exemplary or consequential damages arising from use of the website. As permitted by law, users shall also indemnify and hold harmless You-Me Global Education against any claim, damage, loss, liability or expense, including attorney fees, arising out of the use of the products in any way contrary to this agreement.