Your Privacy Matters

1. Overview

EduNest ("we," "us," or "our") is a K-12 education platform operated by Polsia, Inc. This Privacy Policy describes how we collect, use, store, and protect information when you use our platform at edunest-h0c1.polsia.app.

2. What Data We Collect

2.1 Demo Request Information

When a school administrator or district official submits a demo request, we collect:

• Full name and professional title
• Work email address
• School or district name
• District size (number of students)
• Specific areas of interest (optional)

This information is used solely to schedule and conduct product demonstrations and to communicate about EduNest's features.

2.2 Platform User Data (Pilot Accounts)

For schools operating under a signed Data Processing Agreement (DPA), the platform collects parent/guardian accounts including email address and name. Student data is only processed as directed by the district and subject to the terms of the executed DPA.

2.3 Automatically Collected Data

Like most web services, we automatically collect certain technical information:

• Hashed IP addresses (rotated daily — not used to identify individuals)
• Browser type and operating system
• Pages visited and time spent on pages
• Referring website URL

This data is used exclusively for platform performance and security monitoring.

2.4 What We Do NOT Collect

• Student Personally Identifiable Information (PII) without a signed DPA
• Social Security numbers or government IDs
• Financial information (no payment processing on this platform)
• Biometric data of any kind
• Data from children under 13 outside of a district-authorized context

3. How We Use Your Information

We use collected information only for the following purposes:

• To respond to and fulfill demo requests
• To communicate about platform updates and features relevant to K-12 education
• To operate and improve the EduNest platform
• To ensure security and prevent fraud
• To comply with applicable laws and regulations

We do not use any data for advertising, profiling, or sale to third parties.

4. Data Storage and Security

EduNest employs industry-standard security practices to protect your information:

• Encryption in transit: All data transmitted to and from EduNest is encrypted using TLS 1.2 or higher (HTTPS)
• Encryption at rest: Sensitive data fields stored in our PostgreSQL database are encrypted using AES-256-GCM
• Access controls: Role-based access ensures only authorized personnel can access specific data categories
• Session security: User sessions use signed, secure cookies with appropriate expiration
• Infrastructure: Hosted on Render (SOC 2 compliant) with Neon PostgreSQL (isolated per-tenant)

5. No Third-Party Data Sharing

EduNest does not sell, rent, or share your personal information with third parties for their own marketing or commercial purposes.

We may share information only in the following limited circumstances:

• Service providers: Infrastructure providers (hosting, database) who are bound by confidentiality obligations and process data only as directed by us
• Legal requirements: When required by law, court order, or valid legal process
• Safety: When necessary to protect the safety of students, families, or the public

Any vendor with access to school or student data is required to execute a Data Processing Agreement before receiving any access.

6. Data Retention

Demo request information is retained for up to 24 months to support ongoing sales conversations. You may request deletion at any time by contacting us.

For district pilot accounts, data retention follows the terms of the applicable DPA and Nevada law. Upon contract termination or district request, data is deleted within 30 days.

7. Your Rights

You have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information (subject to legal retention obligations)
• Opt out of non-essential communications
• Lodge a complaint with applicable data protection authorities

To exercise any of these rights, contact us at edunest@polsia.app.

8. Children's Privacy

EduNest is a school-facing and parent-facing platform. We do not knowingly collect personal information directly from children under 13 outside of a district-authorized context.

When student data is processed as part of a district agreement, it is done under the school official exception (FERPA) or with proper parental consent as required by COPPA, and is subject to the district's DPA with EduNest.

9. Updates to This Policy

We may update this Privacy Policy as our platform evolves. Material changes will be communicated to active users via email. Continued use of EduNest after a policy update constitutes acceptance of the revised terms.