Privacy Policy for Corgi

CAST is committed to safeguarding and preserving the privacy of Corgi users. This Privacy Policy explains what happens to personal data that is provided to us or that we collect from you while you use our application.

Data Collected for Research Purposes

Corgi was initially developed as part of a research study funded by an Investing in Innovation Fund grant from the U.S. Department of Education. As part of CAST’s ongoing research into how Corgi is used by students and teachers, certain data is collected about your use of the tool. This data is collected with an anonymous identifier and is never connected to your name, email, or other personal information.

Below is the list of data that is collected about your use of Corgi and the reason each data type is collected:

IP address:
To understand where Corgi is being used in the world
Browser and operating system:
To ensure that we understand what browsers and operating systems are being used to access Corgi so we can provide better support for those system
Device type:
To ensure that we understand what devices are being used to access Corgi so we can provide better support for those devices
Screen resolution:
To understand what screen resolutions visitors are using when they visit Corgi so we can better optimize for visitors’ resolution
What page a user visits (including the page title, such as Home, Cause & Effect Guide, Comparison, etc.):
To understand what the most popular aspects of Corgi are
How long a user is on a page:
To understand what the most popular aspects of Corgi are and how it is used
Inbound and outbound links (when they can be determined, for example linking to or from a Google Classroom page):
To understand what context visitors are using Corgi in
Actions such as creating, copying, and sharing a guide in Corgi:
To understand how visitors make use of the guides in Corgi
Use of supports such as text to speech, dictionary lookups, language translation, more information button, and support video:
To understand how supports are being used and what supports are most popular.

These data are collected to support ongoing research activities about how Corgi is used. Additionally, researchers may view documents created by Corgi users to further aid research activities. This involves viewing any text entered by a de-identified user into a Corgi guide.

CAST may share (but not sell) de-identified usage data and completed Corgi guide data with its research partners, such as the University of Kansas. Other research partners may be added in the future. Please contact CAST at corgi@cast.org for a current list of research partners. De-identified, aggregated data may be used in research articles, conference presentations, grant applications, or marketing materials on behalf of CAST.

Your Google account and personal information

Your Google account email address is used to make your Corgi account. However, we do not collect your name or email address when tracking data about your use of Corgi. Rather, an anonymous identifier is created for every user to associate information from all of your uses of Corgi. This information is used for research purposes.

Students and Personally Identifiable Information

The only personally identifiable information (PII) about students that we store is the student’s email and IP addresses. We need to store the email address so students can access their account. You are uniquely identified by your email address to authorize your use of Corgi. Your email address is not stored with any of your data about use of Corgi nor the work you produced in Corgi. This information is stored with an anonymized identifier. We may keep this de-identified data indefinitely.

Your Data Rights

You may request that we provide you with a copy of any personally identifiable information (PII) about you in our possession; that we correct any errors in that data and that we delete any PII that you no longer wish us to retain. However, the only PII that we retain are your email and IP addresses; and the email address is the way we authenticate users and let them use the service. So if you ask us to delete your PII, your use of Corgi will terminate.

Rights of European Economic Area Residents

If you are a natural person residing within the European Economic Area, the following additional rights under the General Data Protection Regulations (“GDPR”) are applicable to you:

  1. Basis for Processing Data: CAST generally relies on your consent to process PII. You must be at least the age of 16 to consent to the processing of your PII. If you are under the age of 16, you must obtain your parent’s or legal guardian’s permission to consent to the processing.
  2. Object, Restrict, or Withdraw Consent: You may withdraw the consent you provide to CAST or otherwise object to or restrict our processing of your PII by contacting our Data Protection Officer as described below. Please note that Corgi will become inaccessible if you withdraw your consent or otherwise object to the processing of your PII.
  3. International Transfers: CAST is located in the USA and that is where we process and store information. The European Commission has not recognized the USA as providing adequate protection under the Commission’s adequacy decisions. We do not transfer your PII to third parties. Given our policy of not transferring your PII to any third party, we are not aware of any additional risks associated with allowing us to store your PII in the USA.
  4. Supervisory Authority: If you wish to raise a concern about our use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local supervisory authority.

Required Permissions

Applications that integrate with a Google account must declare their intent by requesting permissions. These permissions to your browser and account must be granted in order to integrate with your Google account. Below is a list of these permissions and why they are required. At no time will CAST request or have access to your Google account password.

Permissions Required:

Connect itself to Google Drive:
This allows Corgi to add itself to the Google Drive “Open With” menu, and allows Corgi to show up in the "+ New" menu on Drive.
See and download all your Google Drive files:
Required in order to allow Corgi to access the template for creating a Google Slides presentation. Corgi will not access your other files.
See, edit, create, and delete only the specific Google Drive files you use with this app:
Corgi will be able to make changes to the documents in your Google Drive that were generated by Corgi only so you can reopen, edit, and manage your Corgi guides.

Data Use Disclosure

Corgi's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Data Privacy

CAST employees will only access data and user content for research purposes. CAST employees will have access to personally identifying information including names, emails, and Google account photo, but will never use this data for any purpose. CAST employees and CAST research partners, such as the University of Kansas, will access de-identified data as described in the “Data Collected for Research Purposes” section above. Only CAST employees will be able to access data directly from CAST’s servers. Research partners will only be able to access de-identified data that has been downloaded from the server and shared with them through a secure channel.

Disclosing your Information

We will not disclose your personal information to any other party other than in accordance with this Privacy Policy and in the circumstances detailed below:

We don’t share your personal data with other companies.

The only personally identifiable information (data) that we collect is: name, email, and google photo. We do not share any personal data (such as name, address, email, or phone) with other companies.

No ad companies collect data through our service.

We do not display advertising, and no data is collected through our software for ad targeting. We do not operate any referral program and do not display any sponsored links.

We take steps to protect personal information.

We take reasonable steps to secure your personally identifiable information against unauthorized access or disclosure. We encrypt transmission of data on pages where you provide payment information. However, no security or encryption method can be guaranteed to protect information from hackers or human error.

Enforcement

We regularly review our compliance with our Privacy Policy. If we receive a formal written complaint, we will follow up and contact the person who made the complaint.

Changes

We do update this Policy from time to time, so please review this Policy regularly.

Last updated: November 7, 2023

Contact Information

For user account related inquiries, please contact our customer support team by email at corgi@cast.org. For all other inquiries relating to this Privacy Policy, please contact the Privacy Compliance Officer by email at corgi@cast.org or by mail at:

Privacy Compliance Officer
CAST Inc.
50 Salem St
Building B, Ste 303
Lynnfield, MA 01940-0030

Tel: 781-245-2212

If you live within the European Economic Area, please contact our Data Protection Officer in confidence at compliance@cast.org.