Infinite Campus, Inc., and its affiliated entities (collectively "Infinite Campus") respect your privacy and are committed to protecting it through our compliance with this Privacy Policy.
This Privacy Policy applies to the Infinite Campus websites, mobile apps, products, and services. It does not pertain to Infinite Campus product or service offerings where a separate privacy policy exists for such product or service. It also does not apply to education records maintained within the Infinite Campus Student Information System (SIS) on behalf of educational agencies, which are governed by the Family Educational Rights and Privacy Act (FERPA) and are addressed separately below and in our FERPA Compliance and Student Data Privacy Policy.
If you do not agree with our policies and practices, your choice is not to use our websites, apps, products, or services. By accessing or using this website, an app, or using a product or a service, you agree to this Privacy Policy. This policy may change from time to time. Your continued use of the website, product, or service after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.
Information We Collect
Infinite Campus does not require you, or any students, to provide personally identifiable information ("PII") to browse our websites. We collect PII about you only when you or the student's education agency ("EA") chooses to provide it, which is voluntary. When providing PII directly, you may be asked to enter your name, email address, address, phone number, job title, and other details to help assist in your experience with Infinite Campus and its apps.
As you navigate through and interact with our websites, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:
Details of your visits to our website, including traffic data, location data (inferred from IP address, not precise geolocation), logs, and other communication data and the resources that you access and use on the website; and
Information about your computer and internet connection, including your IP address, referring URL, operating system, and browser type.
We use the information we collect automatically through our website primarily in aggregate or statistical form, and we do not use it to try to identify you personally. Some of this information, such as your IP address, may be considered personal information under certain state privacy laws, and we treat it accordingly. This information helps us to improve our website and apps and to deliver a better service, including by enabling us to:
Estimate our audience size and usage patterns;
Store information about your preferences, allowing us to customize our website according to your individual interests;
Speed up your searches; and
Recognize you when you return to our website.
We collect information through numerous methods, which commonly include: signing up for an online demo or event, subscribing to a newsletter, responding to a survey, automated methods, or filling out a contact form.
Mobile Applications
Infinite Campus offers two consumer-facing mobile applications: Campus Parent (the Parent Portal app) and Campus Student (the Student Portal app). When you use these apps, we collect diagnostic, crash, and limited app-event data to monitor application stability, diagnose defects, and maintain core functionality. We use a third-party mobile analytics and crash-reporting provider to do this, acting as our service provider, as described below. We do not collect your name, student records, or other personal account information through these services, and we do not log a device identifier that would link this data back to a specific person or student record.
Crash reporting. Our crash-reporting service automatically collects crash reports, non-fatal errors, and application-not-responding events, along with associated device information (such as device model, operating system version, and device state), application logs, and an installation identifier. This installation identifier is assigned to the app instance rather than to you personally and is retained by the service for a limited period (approximately 90 days) before deletion. Clearing the app's data causes a new identifier to be generated on the next launch. Crash collection is active by default to keep the apps stable and reliable.
App-event analytics. We use an app-analytics service to record a small set of technical events that help us detect and diagnose connection and loading problems, specifically session-timeout events, webview connection errors, and HTTP errors. With these events we log technical and district-level context, including the app type and version, device brand, model, operating system version, and carrier, network connection status and type, the in-app activity associated with the event, and information identifying your school district (such as district name, district app name, district identifier, and district connection URL). In limited cases involving a connection error, we also log the URL being accessed at the time. We do not use these analytics to build advertising or marketing profiles, and they are not linked to any advertising identifier.
Push notifications and configuration. We use a messaging service to deliver push notifications and a configuration service to manage app settings. We do not use any application performance monitoring service.
Our provider processes the data collected through these services as our service provider, for the business purposes of application stability, defect diagnosis, and core app functionality, and does not use it to serve advertising to you through our apps. This data is retained only by these services and is not exported to any other analytics system or data warehouse. The provider operates on global infrastructure, and it may store and process this data in the United States or in other countries where it maintains facilities.
We do not enable advertising or cross-context behavioral advertising features in connection with our mobile apps, and we do not sell the diagnostic, device, or app-event data collected through them. We have disabled advertising-identifier collection in both apps: the Android app does not request the Android Advertising ID, and the iOS app is configured to operate without the advertising identifier and without tracking.
Separately, the Apple App Store and Google Play provide us with reporting about our apps through their standard developer tools. Much of this is aggregate information about installs, reviews, ratings, and finances. Their crash and performance reporting also exposes individual crash and application-not-responding events (including stack traces, device model, and operating system version) at a per-event level, though not tied to your personal identity; this is the same category of information we would see in our own diagnostic console. App store reviews and ratings are authored through, and attributed to, individual store accounts. This information is generated by the app stores under their own privacy terms, and any personal information Apple or Google collects from you as the store operator is governed by their respective privacy policies rather than this policy.
How We Use Your Information
We may use the information we obtain to:
Present our website and its contents to you;
Allow you to use our products and services;
Provide better service in responding to your customer service requests;
Communicate with you regarding specific products and services;
Help improve our website and apps;
Administer a contest, promotion, survey, or other site feature;
Send out reminders for events;
Contact you about products or information requested; and/or
Fulfill any other purpose for which you provide it.
How We Disclose Your Information
We may disclose information that we collect or that you provide as described in this Privacy Policy:
To fulfill the purpose for which you provide it;
To our affiliated entities;
To contractors, service providers, channel partners, and other third parties we use to support our business and who are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them;
To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Infinite Campus, Inc.'s assets, or as part of a bankruptcy, liquidation, or similar proceeding;
For any other purpose disclosed by us when you provide the information;
With your consent;
To comply with any court order, law, or legal process, including responding to any government or regulatory request; and
If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Infinite Campus, Inc., our affiliated entities, our employees, customers, or others.
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use personal information for targeted advertising or profiling that produces legal or similarly significant effects. We do not disclose personal information to third parties for their own direct marketing purposes.
Cookies and Analytics
Cookies are small files that a site or its service provider transfers to your computer's hard drive through your web browser (if you allow it) that enable the site's or service provider's systems to recognize your browser and capture and remember certain information.
Our website uses two categories of cookies:
Necessary cookies, which enable basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
Statistics cookies, which help us understand how visitors interact with our website so we can improve the site experience. These are provided through a third-party web analytics service and, on a limited number of marketing pages, a marketing automation service. Both load only after you accept the Statistics category in our cookie preference control. The web analytics service retains visitor-level data for up to fourteen months before it is deleted or aggregated. The marketing automation service does not automatically delete this data, retaining it until we delete it, and its cookies expire approximately one year after they are set.
We do not use advertising cookies, and we do not share information about your use of our site with social media or advertising partners for their own advertising purposes.
Some pages embed third-party content, such as videos or forms hosted by outside providers. These embedded services may set their own cookies or collect usage information necessary to deliver the content to you (for example, the IP address needed to stream a video, or video playback statistics), and they may do so independently of the Statistics category described above. Where we use such providers, they act as our service providers and are contractually restricted to processing this information only to deliver the embedded content and related functionality. They are not permitted to sell or share this information, to use it for targeted or cross-context behavioral advertising, or to use it for their own purposes. We do not use this information for advertising, and we do not share it with advertising networks.
You can manage your cookie preferences at any time using the cookie preference control on our website, and you can choose to have your browser warn you each time a cookie is being sent or turn off all cookies through your browser's settings. Each browser is a little different, so look at your browser's Help menu to learn the correct way to modify your cookie preferences. If you choose to disable cookies, some features on our site might not function properly. If you withdraw consent for the Statistics category after previously accepting it, we stop loading those analytics scripts; scripts already loaded during your current visit may continue to run until you reload the page or navigate to a new one, and cookies already set may remain on your device until they expire or you clear them through your browser.
Data Security
All personal information you provide is contained behind secured networks and is only accessible by a limited number of persons who are required to keep the information confidential. In addition, any information you supply via forms on our site is encrypted in transit using Transport Layer Security (TLS).
Retention
We retain personal information collected through our websites and services for as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations, to resolve disputes, and to enforce our agreements. Contact information provided through forms is retained for as long as we have an ongoing business relationship with you or your organization, plus any period required by applicable law. Automatically collected website data (such as analytics and log data) is retained in identifiable form according to each analytics provider's retention practices: our web analytics data is retained for up to fourteen months before deletion or aggregation, while data held in our marketing automation service is retained until we delete it. Data collected by embedded third-party services (such as video or form providers) acting as our service providers is retained only as needed to deliver the embedded content and related functionality. Crash, diagnostic, and app-event data collected through our mobile apps is retained by our third-party mobile analytics and crash-reporting provider for the limited periods those services apply, as described in "Mobile Applications" above.
Children's Information
We do not knowingly collect any information from children under the age of 13 unless an EA has provided authorization and consent for a student under age 13 to use our products or services. If an EA requests that students use our software (such as for the submission of homework), we collect, process, and retain such information solely to provide educational services to the EA and for the purposes set forth in our agreement with the EA. The EA has complete control over the data. The EA may access the data, delete the data, or withdraw consent regarding the student's information at any time. This section only applies to children under the age of 13 and supplements the other provisions of this Privacy Policy.
Our Campus Parent and Campus Student apps collect crash, diagnostic, and limited app-event data as described in "Mobile Applications" above; this data is used solely to maintain app stability and functionality and is not education records.
If you would like to review, modify, or delete personal information of a student under the age of 13, please contact your EA directly. If you believe we have inadvertently collected personal information from a student under age 13 without proper consent, you may contact us at privacy@infinitecampus.com.
We do not sell the personal information of consumers we know to be under the age of 16.
FERPA and Student Education Records
Personal information provided by your EA is governed by the Family Educational Rights and Privacy Act (FERPA) and is not subject to state consumer privacy laws or to the Washington My Health My Data Act (WMHMDA). Infinite Campus does not collect consumer health data through its websites or mobile apps subject to WMHMDA. For information about how Infinite Campus handles student education records, see our FERPA Compliance and Student Data Privacy Policy.
Your State Privacy Rights
Depending on your state of residence, you may have some or all of the following rights regarding the personal information we collect directly from you through our websites, mobile apps, and services. These rights do not apply to education records maintained on behalf of educational agencies under FERPA, which are exempt from state consumer privacy laws.
Because we do not sell or share personal information for advertising, many of the opt-out rights described below will not require action on your part. We include them here for transparency and to comply with disclosure obligations.
Right to Know / Confirm. You may request confirmation of whether we process your personal information and, if so, request access to that information, including the categories and specific pieces of personal information we have collected, the categories of sources, the purposes for processing, and the categories of third parties to whom we have disclosed it.
Right to Access and Portability. You may request a copy of the personal information we hold about you in a portable, readily usable format.
Right to Correct. You may request that we correct inaccurate personal information we hold about you.
Right to Delete. You may request that we delete personal information we have collected from you, subject to certain exceptions permitted by law (such as completing a transaction, detecting security incidents, complying with legal obligations, or exercising legal rights). Infinite Campus cannot delete education records independently; please contact your school or district directly to request deletion of education data.
Right to Opt Out of Sale or Sharing. You have the right to opt out of the sale of your personal information or the sharing of your personal information for targeted advertising. Infinite Campus does not sell personal information and does not share personal information for targeted advertising.
Opt-Out Preference Signals. Some browsers and extensions can send an opt-out preference signal, such as the Global Privacy Control (GPC), that communicates a choice to opt out of the sale or sharing of personal information. Infinite Campus does not sell personal information and does not share personal information for targeted advertising or other cross-context behavioral advertising, so there is no such processing to which an opt-out preference signal would apply. Our website does not currently detect the GPC signal or the older Do Not Track signal; if we later begin any processing for which such a signal is required to be honored, we will recognize a supported signal as a valid opt-out request for the browser or device that sends it. You may also exercise your choices directly at any time using the methods described in this policy.
Right to Opt Out of Profiling. You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects. Infinite Campus does not engage in such profiling of website visitors or direct contacts.
Right to Limit Use of Sensitive Personal Information. Where applicable, you may request that we limit our use of sensitive personal information to purposes necessary to provide our services. We do not use sensitive personal information for purposes beyond what is necessary to provide the service you requested.
Right to Non-Discrimination. We will not discriminate against you for exercising any of your privacy rights.
Right to Appeal. If we deny your request, you may appeal our decision by contacting us at the address below. We will respond to your appeal within the time required by applicable law.
How to Exercise Your Rights
To submit a request to know, access, correct, or delete your personal information, or to exercise any other right described above, contact us at privacy@infinitecampus.com or at the address in "Contact Us" below.
We will verify your identity before fulfilling your request. Verification may require you to provide information that matches information we already hold. You may designate an authorized agent to submit requests on your behalf. If you use an authorized agent, we may require proof of your written authorization and verify your identity directly.
We will respond to verifiable requests within the time frame required by your state's law (generally 45 days, with extensions as permitted).
Categories of Personal Information Disclosed
In the preceding twelve months, we may have disclosed the following categories of personal information to service providers for business purposes. For each category, we identify the types of recipients and the purpose of the disclosure:
Identifiers (such as name, email address, and IP address). Disclosed to hosting providers, email service providers, and analytics providers, for website operation, communications, and analytics.
Internet or network activity (such as browsing data and device information). Disclosed to analytics providers and providers of embedded third-party content (such as video and form services), for website improvement, performance monitoring, and delivery of embedded content.
Mobile diagnostic, crash, and app-event data (such as crash reports, error and connection events, device and network information, application logs, district identifiers, and an app installation identifier). Disclosed to third-party mobile analytics, crash-reporting, and messaging services, for monitoring and improving mobile app stability, diagnosing defects, delivering notifications, and maintaining app functionality.
Professional information (such as job title and organization). Disclosed to customer relationship management and marketing platforms, for responding to inquiries and communicating about products.
We do not sell any categories of personal information. We do not share any categories of personal information for cross-context behavioral advertising.
State-Specific Disclosures
Residents of states with comprehensive consumer privacy laws have the rights described in "Your State Privacy Rights" above. To exercise a right or appeal a denied request, contact us using the information in "Contact Us" below. If you are unsatisfied with our response to an appeal, you may contact your state attorney general. The list at the end of this section contains the applicable law and attorney general contact for each state. A few states impose distinct requirements, which we address individually first.
California
Under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (Cal. Civ. Code § 1798.100 et seq.), California residents have the rights described above, including the right to know, access, correct, delete, and opt out of sale or sharing. California residents also have the right to limit the use of sensitive personal information and to opt out of automated decision-making technology.
California's "Shine the Light" law (Cal. Civ. Code § 1798.83) permits California residents to request information about disclosures of personal information to third parties for direct marketing purposes. We do not disclose personal information to third parties for their direct marketing purposes. California residents may contact the California Privacy Protection Agency at cppa.ca.gov if they have concerns about our privacy practices.
Connecticut
Under the Connecticut Data Privacy Act (Conn. Gen. Stat. § 42-515 et seq.), Connecticut residents have the rights described above, including the right to opt out of the processing of personal data for profiling that produces legal or similarly significant effects. Connecticut residents may appeal a denied request by contacting us. If unsatisfied, you may contact the Connecticut Attorney General at portal.ct.gov/ag.
Delaware, Minnesota, and Oregon
Under the Delaware Personal Data Privacy Act (Del. Code tit. 6, Ch. 12D), the Minnesota Consumer Data Privacy Act (Minn. Stat. § 325O.01 et seq.), and the Oregon Consumer Privacy Act (ORS § 646A.570 et seq.), residents have the rights described above and, in addition, the right to obtain a list of the specific third parties to whom we have disclosed personal data. Minnesota residents also have the right to question the result of profiling. Residents may appeal a denied request by contacting us, and if unsatisfied may contact their state attorney general (Delaware: attorneygeneral.delaware.gov; Minnesota: ag.state.mn.us; Oregon: doj.state.or.us).
Illinois
Infinite Campus does not collect biometric identifiers (fingerprints, voiceprints, retina or iris scans, face geometry, or hand scans) from users of its websites or services. To the extent any biometric functionality exists within the student information system, it is deployed and controlled by the educational agency under its own BIPA compliance obligations.
Washington
Infinite Campus does not collect consumer health data through its websites or mobile apps subject to the Washington My Health My Data Act (RCW § 19.373 et seq.). Personal information collected by educational agencies and maintained as education records under FERPA is not consumer health data under this law.
Other States
Residents of the following states have the rights described above under the laws listed. Where a law is not yet in effect, its effective date is noted; those rights become available on that date. Residents may appeal a denied request by contacting us and, if unsatisfied, may contact the attorney general listed for their state.
Alabama. Alabama Personal Data Protection Act (Ala. HB 351); alabamaag.gov. Effective May 1, 2027.
Colorado. Colorado Privacy Act (C.R.S. § 6-1-1301 et seq.); coag.gov/file-complaint.
Florida. Florida Digital Bill of Rights (Fla. Stat. § 501.701 et seq.); myfloridalegal.com.
Indiana. Indiana Consumer Data Protection Act (Ind. Code § 24-15-1 et seq.); in.gov/attorneygeneral.
Iowa. Iowa Consumer Data Protection Act (Iowa Code § 715D.1 et seq.); ag.iowa.gov. Rights: know, access, delete, obtain a copy, and opt out of sale and targeted advertising.
Kentucky. Kentucky Consumer Data Protection Act (KRS § 367.470 et seq.); ag.ky.gov.
Louisiana. Louisiana Data Privacy Act (La. R.S. § 51:1780.1 et seq.); ag.louisiana.gov. Effective January 1, 2027.
Maryland. Maryland Online Data Privacy Act (Md. Code, Com. Law § 14-4601 et seq.); marylandattorneygeneral.gov. We do not collect personal data beyond what is reasonably necessary to provide the services you request.
Montana. Montana Consumer Data Privacy Act (Mont. Code Ann. § 30-14-2801 et seq.); doj.mt.gov.
Nebraska. Nebraska Data Privacy Act (Neb. Rev. Stat. § 87-1101 et seq.); ago.nebraska.gov.
New Hampshire. New Hampshire Data Privacy Act (N.H. RSA § 507-H:1 et seq.); doj.nh.gov.
New Jersey. New Jersey Data Privacy Act (N.J. Stat. § 56:8-166 et seq.); njconsumeraffairs.gov.
Oklahoma. Oklahoma Data Privacy Act (Okla. SB 546); oag.ok.gov. Effective January 1, 2027.
Rhode Island. Rhode Island Data Transparency and Privacy Protection Act (R.I. Gen. Laws § 6-48.1-1 et seq.); riag.ri.gov.
Tennessee. Tennessee Information Protection Act (Tenn. Code Ann. § 47-18-3201 et seq.); tn.gov/attorneygeneral.
Texas. Texas Data Privacy and Security Act (Tex. Bus. & Com. Code § 541.001 et seq.); texasattorneygeneral.gov.
Utah. Utah Consumer Privacy Act (Utah Code § 13-61-101 et seq.); consumerprotection.utah.gov. Rights: know, access, delete, and opt out of sale and targeted advertising.
Vermont. Vermont Data Privacy and Online Surveillance Act (Vt. S.71); ago.vermont.gov. Effective January 1, 2028.
Virginia. Virginia Consumer Data Protection Act (Va. Code § 59.1-575 et seq.); oag.state.va.us.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The date this Privacy Policy was last revised is identified at the top of the page. You are responsible for periodically visiting our website and this Privacy Policy to check for any changes.
Contact Us
If there are any questions regarding this Privacy Policy, or if you wish to exercise your privacy rights, you may contact us using the information below:
Email: privacy@infinitecampus.com
Infinite Campus, Inc.
Attn: Legal Department
4321 109th Ave NE
Blaine, MN 55449