Trust and Safety

We are dedicated to protecting your privacy and ensuring your safety when using the services we offer. Here are some of our practices and policies to keep students, families, educators, and schools safe.

Children’s Online Privacy
Protection Act

Students must be registered by an educator or parent in order to use Closegap Services.

Family Educational Rights and Privacy Act

We provide technology and services to districts under the School Official exception to FERPA.

Protection of Pupil Rights Amendment

Schools obtain parental consent before students use Closegap.

Student Online Personal Information Protection Act

We provide technology services specifically designed and marketed for K-12 school purposes.

Closegap is a Student Privacy Pledge Signatory.

Read more about the pledge here.

Closegap Promises

✓ We will never sell or share student, parent/guardian, or educator information with advertisers.

✓ The data you share with us is used to deliver legitimate educational tools and resources only.

✓ We use the latest security best practices to protect you at all times.

✓ We will notify you if we make any changes to our practices.

What do I need to know about student data privacy and security in order to use Closegap at my school?

Familiarize yourself with the laws governing student data privacy and the steps needed to implement Closegap.

Data Security & Privacy Practices

YOUR DATA BELONGS TO YOU

We will never sell or disclose your information to anyone, including marketers or advertisers.

YOU HAVE FULL CONTROL OF YOUR DATA

Parents and educators can review, correct, and/or delete data within the web application under the Account tab, or by emailing info@closegap.org.

12-MONTH DELETION POLICY

We delete student accounts that are inactive for over 12 months.

STORAGE AND SECURITY

Closegap maintains administrative, technical, and physical safeguards that equal industry best practices including, but not limited to, disk encryption, file encryption, firewalls, and password protection. Closegap uses encryption technology to protect data while in motion and at rest. The Closegap Service is hosted on servers within the United States within nondescript facilities that employ extensive security practices, including but not limited to, a 24/7 security system, video surveillance, intrusion detection systems, and locked cage areas. These facilities utilize ISO 27001 and are FISMA certified.

NETWORK AND APPLICATION SECURITY

We use SPI firewalls, hardened bastion hosts, and end-to-end encryption across all networks to ensure network security. We follow proven application coding practices, verified by frequent testing and code reviews.

INFOSEC PRACTICES

Closegap provides regular security and privacy training for all employees. We enforce strict policies around permissions, controls, and information access across our internal systems. We regularly review our information collection, storage, and processing practices.

For more information please read our Privacy Policy and User Agreement.