Privacy Policy

Last Updated: February 12, 2025

Thank you for visiting www.saga.org, which is owned and operated by SAGA Innovations, Inc. (dba “Saga Education,” collectively “we,” “us,” “our,” “Saga” or the “Company”). This Privacy Policy (this “Policy” or “Privacy Policy”) applies to your use of this website and any and all other websites operated by or on behalf of the Company’s subsidiaries and affiliates, along with any applications associated with Saga, including but not limited to Saga Coach, Saga Connect, Saga Curriculum and Woot Math, that expressly direct you to this Privacy Policy webpage (each, a “Website” or “Application”). This Privacy Policy describes how Saga and its Websites and Applications collect, use, disclose, and otherwise manage the personal information that you provide (referred to in this policy as “you” or “your”) by engaging our services on our websites, social media, email exchanges, mobile apps, products, and other online services on which this Privacy Policy is posted (collectively the “Service” or “Services”). In addition to reviewing this Privacy Policy, please also review our Terms and Conditions, incorporated herein by reference.

Some of our Services provide School Accounts (as defined below) for school, school districts, or other licensed educational institutions or programs (each, an ”Educational Institution”). Additionally, some, but not all of our Services are directed towards children under the age of thirteen (13). We value the privacy and security of all School Accounts, children, and all of our users and are committed to maintaining compliance with relevant state and federal laws in connection with the managing, collection, and disclosure of any and all personal information obtained in the course of providing our Services. The use of our Service and any dispute over privacy is subject to this Privacy Policy and our Terms and Conditions, including its applicable limitations on damages and the resolution of disputes. Our Terms and Conditions are incorporated by reference into this Privacy Policy.

Definitions

Personal Data/Information
Personal Data/Information means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household or that is otherwise defined as personal information, personal data, or protected data under applicable laws (“Personal Information”). Personal Information does not include publicly available information; See Section, Types of Data Collected below for examples.

Usage Data
Usage Data is data collected automatically either generated by the use of the Service or from the Service infrastructure itself and may include information such as your computer’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you and/or your child visit, the time and date of the visit, the time spent on those pages, unique device identifiers and other diagnostic data.

Cookies
Cookies are small files stored on you and/or your child’s device (computer or mobile device).

Data Controller
Data Controller means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal information is, or is to be, processed. For the purpose of this Privacy Policy, we are the Data Controller of your Personal Data/Information.

Data Processors (or Service Providers)
Data Processor (or Service Provider) means any natural or legal person who processes the data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively.

Data Subject (or “User”)
Data Subject is any living individual who is using our Service and is the subject of Personal Information. Users of the Services include Child Users (any person under age eighteen (18) who uses the Services) and Adult Users (including parents and legal guardians of Child Users, teachers, school administrators, etc.), collectively referred to as Users.

Account
We currently offer the following types of Accounts through the Services: Personal Accounts and Teacher/Tutor Accounts, (collectively, “Consumer and Other Accounts”), which are described in our Terms and Conditions.
We also provide School Accounts, which are only for Educational Institutions. Consumer and Other Accounts and School Accounts are collectively referred to as Accounts, and the provisions of this Privacy Policy apply to all Accounts. Any difference in how the Consumer and Other Accounts and School Accounts are treated is identified below.

Information Collection and Use

When you visit our Website(s) and/or use our Services, we may collect, use, and disclose different types of Personal Information depending on the type of Account, the type of User, and the Service being used. Generally, this Personal Data is used to contact or identify you for the registration or use of Services and may include but not be limited to: email address, first name, last name, phone number, mailing address and cookies and other usage data.

In some instances, we collect this Personal Information only when you choose to provide it. For example, if you have yet to register for an account on one of our Services, but if you request information about our education products or ask a question to our customer support team, we will ask you to provide certain Personal Information so that we may respond to your request. This may include information such as your first and last name, occupation, school name, email address, and where relevant, the product or service you are interested in.

Note about School Accounts: We will only access, collect, record, organize, use, or disclose (collectively, “Process”) student data collected through the Services as described in our agreement(s) with the applicable Educational Institution and this Privacy Policy. Furthermore, we will process the data consistent with all applicable laws, including but not limited to the Family Educational Rights and Privacy Act (“FERPA”).

We have pledged to carry out responsible stewardship and appropriate use of student personal information that meets or exceeds all relevant state and federal laws and regulations. As such, we have publicly, and permanently, committed to:

  • Not collect, maintain, use or share student personal information beyond that needed for authorized educational/school purposes, or as authorized by the parent/student.
  • Not sell student personal information.
  • Not use or disclose student information collected through an educational/school service (whether personal information or otherwise) for behavioral targeting of advertisements to students.
  • Not build a personal profile of a student other than for supporting authorized educational/school purposes or as authorized by the parent/student.
  • Not make material changes to school service provider consumer privacy policies without first providing prominent notice to the account holder(s) (i.e., the educational institution/agency, or the parent/student when the information is collected directly from the student with student/parent consent) and allowing them choices before data is used in any manner inconsistent with terms they were initially provided; and not make material changes to other policies or practices governing the use of student personal information that are inconsistent with contractual requirements.
  • Not knowingly retain student personal information beyond the time period required to support the authorized educational/school purposes, or as authorized by the parent/student.
  • Collect, use, share, and retain student personal information only for purposes for which we were authorized by the educational institution/agency, teacher or the parent/student.
  • Support access to and correction of student personally identifiable information by the student or their authorized parent, either by assisting the educational institution in meeting its requirements or directly when the information is collected directly from the student with student/parent consent.
  • Maintain a comprehensive security program that is reasonably designed to protect the security, privacy, confidentiality, and integrity of student personal information against risks – such as unauthorized access or use, or unintended or inappropriate disclosure – through the use of administrative, technological, and physical safeguards appropriate to the sensitivity of the information.
  • Require that our vendors with whom student personal information is shared in order to deliver the educational service, if any, are obligated to implement these same commitments for the given student personal information.
  • Allow a successor entity to maintain the student personal information, in the case of our merger or acquisition by another entity, provided the successor entity is subject to these same commitments for the previously collected student personal information.

We may de-identify and aggregate student data received in connection with providing and improving the Services and use such data as described in this Privacy Policy.

Types of Data Collected

Personal Information
While using our Service, we may ask a User to provide us with certain Personal Information that can be used to contact or identify a User.

Notice For California and Other US Residents:
Certain U.S. state laws, including the laws of California, provide their residents with certain rights related to their Personal Information, as described below. We provide these rights to all US residents.

Right to Know and Access Personal Information: You may access Personal Information we maintain about you and request to receive it in a machine-readable copy that is readily available to you by using the methods below under Sections, Parental Access and Your Rights to Review, Delete, and Control Our Use of Personal Data/Information. If we grant your request, we will provide you with a copy of the Personal Information we maintain about you in the ordinary course of business. We may not fulfill some or all of your request to access as permitted by applicable law.

Right of Correction: You have the right to correct inaccuracies in the Personal Information we maintain about you.

Deletion of Personal Information: You may ask us to delete the Personal Information we maintain about you by using the methods below.

Please note that before we are able to fulfill your requests regarding certain rights, we are required by law to verify your identity in order to help prevent unauthorized access to your data. In addition, please note that the rights listed above are subject to certain exemptions to safeguard the public interest (for example, to prevent or detect a crime) and our interests (for example, to maintain legal privilege). As a result, requests to exercise these rights may be granted in whole, in part, or not at all, depending on the scope and nature of the request and applicable law. Where required by applicable law, we will notify you if we are unable to fulfill your request and of any reasons why we are unable to honor your request.

Authorized Agent: When authorized by your state law, you may be allowed to use an authorized agent to exercise any of these privacy rights on your behalf. If you are an authorized agent acting on behalf of a US resident as permitted under applicable state law to communicate with us or to exercise a privacy right, you must be able to demonstrate that you have the necessary authorization and access to act on behalf of the resident. If you are an authorized agent trying to exercise rights on behalf of a Company User, please contact us at the contact information below with supporting verification information required under applicable state law.

To Exercise Your Rights
Please contact us using the information below in order to exercise the rights described in this section. If you have any questions or concerns regarding your rights or this Privacy Policy, you may contact us at:

Saga Education, Inc.
Attn: Privacy Manager
10 Laudholm Road
Newton, MA 02458
privacy@saga.org

We will comply with your rights within the time frame required by applicable law.

Non-discrimination: We don’t discriminate or otherwise penalize anyone for exercising their rights under this Privacy Policy.

The chart below reflects our current practices and our practices regarding Personal Information.

Categories of Personal Information we Collect

Adult Users

  • Adult Users are asked to provide certain Personal Information about themselves when registering for any Account including first and last name, email address, mailing address and phone number (which is optional). The other information provided at registration depends on the type of Account or Adult User. For example:
    • Payment information is collected from Adult Users who make a purchase or donation. For your security, we utilize secure, third-party payment services and do not store your payment information in our databases.
    • The email address of an Adult User is also collected when the Adult User registering a Personal Account or states that he or she is not the legal guardian, or if a teacher or school administrator provides such addresses in order for parents or legal guardians to connect to the Teacher or School Account.
    • The school and address (state and ZIP code only) are collected from Adult Users who register for a Teacher, or School Administrator Account.
      • Student information: Once registered, a School may provide information about its students, such as student names or other identifiers, email addresses for the student’s parent or legal guardian, and educational level and class. The School may elect to provide user names or identifiers which are not readily identifiable to anyone outside of the School community in lieu of a full student name, at its discretion.
  • Parent and Child information is collected when a parent or guardian registers for an account on our Service or corresponds with us; we may collect Personal Information such as the parent’s name, email address, and payment information. We may also collect information about the child(ren) authorized by the parent to use the Service through the parent’s Account, including a profile name for the Child User. Each Child User profile must be associated with an Adult Account, and children cannot access the Service without the parent intervention.
  • If you submit any information relating to other people in connection with the Services, you represent that you have the authority to do so and permit us to use the information in accordance with this Privacy Policy.

All Users

  • Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding a User’s interaction with our website site, application, or advertisement, if any;
  • Geolocation data;
  • Identifiers such as a User’s IP address.

Categories of sources from which the Personal Information is collected

We collect the Personal Information directly from the User or in the case of a School Account, directly from the Teacher, School Administrator, or the like;

Business or commercial purpose for sharing and/or using Personal Information

We collect a User’s Personal Information to maintain the website and for the following purposes:

  • Detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity;
  • Debugging to identify and repair errors that impair existing intended functionality;
  • Sending you marketing information regarding Saga products or services; Note: You may opt out of receiving any, or all, of these communications, please refer to our Marketing Opt-Out Policy below.
  • Providing customer service;
  • Maintaining the quality of our service and to improve, upgrade, or enhance our service;
  • To notify you about changes to our Service
  • To allow you to participate in interactive features of our Service when you choose to do so
  • To provide customer support
  • To monitor the usage of our Service
  • To detect, prevent, and address technical issues

Specific pieces of Personal Information we have collected

  • We may also collect information on how the Service is accessed and used. This Usage Data may include information such as your computer’s Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages, unique device identifiers and other diagnostic data.
  • Internet Protocol address, device ID; browser type, browser language, internet service provider
  • Geolocation data
  • Whether you access the Service(s) from multiple devices
  • We may collect analytics data, or use third-party analytics tools, such as Google Analytics, to help us measure traffic and usage trends for the Service and to understand more about the demographics and behaviors of our users. You can learn more about Google’s practices at http://www.google.com/policies/privacy/partners.
  • We may also work with third party partners to employ technologies, including the application of statistical modeling tools, which permit us to recognize and contact you across multiple devices. Although we do our best to honor the privacy preferences of our users, we are unable to respond to Do Not Track signals set by your browser at this time.

Information collected from Child Users may be used

  • To measure a Child User’s performance in activities and to adapt a Child User’s learning experience to the Child User’s learning needs.
  • To analyze, provide progress reports on, or provide an assessment of a Child User’s performance to the Adult/Teacher/School User on the Account

California “Shine the Light” Rights: Though Saga does not transfer or “sell” Personal Information to 3rd parties for marketing purposes, California residents may obtain from us once a year, free of charge, a list of third parties to whom we have disclosed Personal Information (if any) for direct marketing purposes in the preceding calendar year. If you are a California resident and you wish to make such a request, please send an e-mail with “California Privacy Rights” in the subject line to us at privacy@saga.org.

Additional Information for Users from the European Economic Area (EEA), Switzerland, and the United Kingdom (UK)

When you access our Website(s) or Services, we function as a “data controller” under the General Data Protection Regulation (“GDPR”). In some cases, we will ask for your consent so that we may process your Personal Information. In other circumstances, we may rely on a different lawful basis, as explained above.

If you are located outside of the US, please be aware that your Personal Information will be transferred to, processed and stored in the US. By submitting your Personal Information, you understand that we may transfer, process and store your information in this way.

Wherever the Personal Information is, it will be treated in accordance with this Privacy Policy and applicable privacy laws of the United States. These laws may be different from the privacy laws in your country. However, this does not change our commitments to safeguard your privacy. In addition, we will comply with applicable laws relating to the cross-border disclosure of your Personal Information. Where required, we will implement Standard Contractual Clauses with our third parties or rely on another appropriate transfer mechanism to ensure that the transfer of your Personal Information outside of your country is lawful. You may request details of the transfer mechanisms that we rely on to transfer Personal Information outside of your country by emailing us at privacy@saga.org.

Parental Access
Regarding Personal Information of children under the age of thirteen (13), your parental rights include the right to review the information we have collected about you or your children, respectively, and to delete it, and refuse to allow any further collection of Personal Information. You can agree to the collection and use of your child’s Personal Information, but still not allow disclosure to third parties unless necessary. To exercise these rights, you may contact us at privacy@saga.org.

You will be required to authenticate yourself to receive information. Please note that copies of information may remain in cached or archived form on our systems after you request us to delete it.

If you are using the Services through a School Account and the Educational Institution is not integrating its student information system with the Services, unless otherwise required by law, any request to access, make changes to, or delete Personal Information including Student Data must be made by the Educational Institution’s designated administrator for the School Account. The administrators will be provided access to the School Account User Profile pages to update, correct, or delete the information contained therein.

For information about when we automatically delete Personal Information due to Account cancellation or inactive please see below Section, Account Cancellation and Reactivation; Data Deletion.

Tracking Cookies Data
We use cookies and similar tracking technologies to track the activity on our Service and we hold certain information.

Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Other tracking technologies are also used such as beacons, tags and scripts to collect and track information and to improve and analyze our Service.
You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Examples of Cookies we use:

  • Session Cookies. We use Session Cookies to operate our Service.
  • Preference Cookies. We use Preference Cookies to remember your preferences and various settings.
  • Security Cookies. We use Security Cookies for security purposes.
  • Analytics Cookies. We use Google Analytics cookies for page visits and statistical data.

School Accounts
If you have access to the Services through a School Account, additional privacy protections apply because your Educational Institution may provide us with student Personal Information as defined by the Family Educational Rights and Privacy Act (20 U.S.C. § 1232g) and its implementing regulations (34 CFR Part 99) (collectively, FERPA) along with other applicable state laws. The Educational Institution is responsible for obtaining parental consent and/or ensuring that an exception applies prior to transferring student data to the Company, which acts as a third-party vendor school official in this context.

Your Rights to Review, Delete, and Control Our Use of Personal Data/Information

If you would like to review, correct, update or request that we delete Personal Information you have provided to us, please contact us at privacy@saga.org.

You will be required to authenticate yourself to receive information.

Retention of Data

Saga will retain your Personal Information only for as long as is reasonably necessary for the purposes set out in this Privacy Policy and for the provision of Services. We will retain and use your Personal Information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes and enforce our legal agreements and policies.

Saga will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer periods.

Transfer of Data

Your information, including Personal Information, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside the United States and choose to provide information to us, please note that we transfer the data, including Personal Information, to the United States and process it there.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

Saga will take all the steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and no transfer of your Personal Information will take place to an organization or a country unless there are adequate controls in place including the security of your data and other personal information.

Disclosure of Data

Business Transaction
If Saga is involved in a merger, acquisition or asset sale, any User Personal Information may be transferred. We will provide notice before any User Personal Information is transferred and becomes subject to a different Privacy Policy.

Disclosure for Law Enforcement
Under certain circumstances, Saga may be required to disclose your Personal Information if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Legal Requirements
Saga may disclose your Personal Information in the good faith belief that such action is necessary to:

  • To comply with a legal obligation
  • To protect and defend the rights or property of the Company
  • To prevent or investigate possible wrongdoing in connection with the Service(s)
  • To protect the personal safety of users of the Service(s) or the public
  • To protect against legal liability

Security of Data

The security of your data is important to us and we implement physical, administrative, and technical safeguards to help protect the confidentiality, integrity and availability of your Personal Information. We host Personal Information in secure, cloud-based environments that use firewalls, encryption and other industry-standard technologies in an effort to prevent interference or access from outside intruders. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.

Marketing Opt-Out Policy

We may send you emails with information about our products that we believe may be of interest. You may opt-out of receiving these email messages from us by clicking on the “unsubscribe” link found at the bottom of every email that we send or by contacting us generally at privacy@saga.org.

We do not send email messages on behalf of third parties.

Service Providers

We may employ third-party companies and individuals to facilitate our Service (“Service Providers”), provide the Service on our behalf, perform Service-related services or assist us in analyzing how our Service is used.

These third parties have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. Each such service provider has agreed, in writing, to adhere to the provisions of this Privacy Policy in the receipt and processing of any data received in the facilitation and delivery of Saga services.

Analytics

We may use third-party Service Providers to monitor and analyze the use of our Service.

Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.

You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. For more information on the privacy practices of Google, please visit the Google Privacy Terms web page: https://policies.google.com/privacy?hl=en

Links to Other Sites

Our Service may contain links to other sites that are not operated by us. If you click a third-party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy of every site you visit.
We have no control over and assume no responsibility for the content, privacy policies or practices of any third-party sites or services.

Account Cancellation and Reactivation; Data Deletion

At any time, any Users except for Users associated with a School Account, may cancel their Accounts by contacting us at privacy@saga.org.

For Accounts that have been canceled, if the Account remains inactive for twelve (12) months, we will delete all User Personal Information in our active databases associated with the Account (Account Information), unless otherwise stated in this Privacy Policy. The twelve (12) months is provided so that you have the ability, following cancellation of an Account or inactivity, to reactivate your Account and potentially recover previous information and resume where the User left off. We will not use User Personal Information for any other purpose other than for reactivation of the Account. However, we provide no guarantee, and shall have no liability or obligation to ensure that all Account Information and Services-related progress will be available or accessible or all learning or personalization features will be able to be recovered or resumed. If a User requests that Personal Information be deleted prior to the end of the twelve (12) month period of inactivity, we will take commercially reasonable steps to satisfy that request. However, if the User is a resident of a state where additional privacy protections are required by law, we will make every effort to abide by those requirements.

For School Accounts, if an Adult User initially contacts us, we will first inform the applicable Educational Institution prior to taking any requested action by the Adult User, and subject to applicable law, we will wait for the Educational Institution’s instructions. If an Educational Institutional terminates its agreement with us, we will delete, or if requested by the Educational Institution, we will transfer to the Educational Institution all Student Data within ninety (90) days (or a shorter time frame if required by applicable law or the terms of our agreement with the Educational Institution) following the termination of the agreement with the applicable Educational Institution.

Upon Account cancellation, de-identified Adult and Child User information may nonetheless persist internally in our archive files or similar databases, and may still be used, on a de-identified basis, for our internal support, administrative, and record-keeping purposes including but not limited to allowing us to improve the Services and other services we provide through evaluation, and analytics as permitted by applicable law.

Please note that following a request to delete information or cancel your Account, information including Personal Information may remain in backup or archive records, and we may retain certain data if required by law, relevant to preventing fraud or future abuse, or for legitimate business purposes, such as account recovery and customer support, and all are subject to our internal records retention periods. All retained data will continue to be subject to the Privacy Policy in effect at that time and applicable law.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

We will let you know via email and/or a prominent notice on our Service, prior to the change becoming effective and update the “effective date” at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Note for any School Accounts, any material changes to this Privacy Policy will be promptly communicated and will not be effective until either (a) the School Account affirmatively accepts the changes, either electronically or in a signed writing, or (b) upon the renewal of the School’s agreement at the end of the current term.

Contact Us

If you have any questions about this Privacy Policy, please contact us by email at privacy@saga.org.