top of page

EDpact's Privacy Policy

​

Effective date: November 6, 2026

​

1. Introduction and Scope

EDpact LLC ("EDpact," "we," "us," or "our") is a Texas-based educational consulting company supporting school districts with Teacher Incentive Allotment (TIA), LIFT, instructional improvement, data management, reporting, and related services. This Privacy Policy describes how we handle information in connection with our contracted district services, Google Workspace-based tools and applications, and public website.

 

For information provided by a school district, EDpact acts on the district’s instructions and under applicable agreements and law. The district determines authorized educational and administrative purposes and controls access to its records. Information collected directly through our website is handled as described below.

​

2. Information Collected and How It Is Used

District-provided information may include student names and identifiers, assessment results, growth calculations, grade levels, enrollment and teacher-roster relationships; and teacher names and identifiers, assignments, employment or eligibility information, appraisal and observation results, student-growth measures, designation information, and information needed to resolve discrepancies. Additional identifying information, including dates of birth, may be processed when required for an authorized service or submission.

 

EDpact uses district information to manage authorized data collection; check completeness and consistency; calculate and report growth or appraisal-related results; maintain district dashboards and tools; prepare district-authorized submissions; investigate discrepancies; and support audits, reviews, and technical assistance within the scope of our agreements. Districts remain responsible for the accuracy of their source assessment and appraisal records and for official determinations.

 

Teachers may report potential data discrepancies through an EDpact-managed form. We use the information provided to review and route the concern through authorized district processes. Individuals should not include unnecessary student or other sensitive information in free-text submissions.

​

Website visitors who contact EDpact may provide names, email addresses, and the content of their inquiry. We use this information to respond, maintain relevant business communications, and administer our services. Our website provider may process device, browser, IP-address, usage, and cookie information as described in Section 7.

EDpact does not sell district records or use identifiable district information for targeted advertising or unrelated commercial profiling.

​

3. District Data, FERPA, and Confidentiality

District-provided records remain subject to the responsible district’s control and applicable contractual and legal restrictions. EDpact does not acquire independent rights to use identifiable district information for unrelated purposes. Access is limited to authorized EDpact personnel, contractors, and district representatives according to applicable approval procedures and legitimate service needs.

​

When EDpact processes education records under the school-official exception to the Family Educational Rights and Privacy Act (FERPA), it performs the contracted institutional function under the district’s direct control and subject to applicable use and redisclosure restrictions. The availability of that exception depends on the district’s arrangements and applicable FERPA requirements. Confidential teacher appraisal and personnel information is also handled subject to applicable Texas law and district agreements.

​

EDpact does not disclose identifiable student records, confidential teacher information, or other protected district records to another district without authorization. De-identified or aggregated analysis may be used only where permitted by law and the applicable district agreement and where individuals or otherwise protected parties cannot reasonably be identified.

​

Direct requests to access or correct district-maintained student or teacher records to the responsible district. EDpact assists authorized districts with requests as required by applicable law and agreements and does not independently release district-controlled records to unverified requesters. Our tools are intended for authorized adult personnel, not direct student use.

​

4. Technology, Google Applications, and AI

EDpact uses Google Workspace, Google Sheets, and Google Apps Script applications to support authorized district workflows. Depending on the application and permissions granted, tools may read, display, calculate, organize, or update information in authorized spreadsheets and associated files. Applications may request Google account permissions necessary for their functions; the permissions displayed by Google may be broader than an individual feature’s operations. Users may review or revoke permissions through their Google account or organizational administrator, which may affect functionality.

​

EDpact's Google Apps Script dashboards display information from authorized district spreadsheets. Dashboard interfaces are read-only, while supporting automation may update authorized spreadsheet information to maintain data accuracy and correct record association. Information accessed through these applications remains within EDpact-managed Google Workspace systems and is subject to district-specific access controls. Dashboard information is not transmitted to unrelated external services or shared between school districts.

​

EDpact’s use and transfer of information received from Google APIs is subject to the Google API Services User Data Policy, including its Limited Use requirements. Google user data is used for authorized user-facing functionality; it is not sold to advertisers or data brokers, used for unrelated advertising or profiling, or used to develop or train generalized AI models. Access, transfer, and human review are limited to purposes and circumstances permitted by those requirements, including authorized functionality, support, security, and legal compliance.

​

EDpact may use approved AI-assisted tools for software development, technical troubleshooting, and administrative work. Personnel may not submit identifiable student and personnel records or confidential district information to general-purpose AI services except where expressly permitted by applicable agreements, law, and approved data-protection procedures. EDpact does not use identifiable district information to train generalized AI models.

​

5. Information Sharing and Service Providers

EDpact shares information only as necessary for authorized services or applicable legal obligations, including with: (a) district-approved representatives; (b) the Texas Education Agency or other authorized recipients for approved submissions; (c) EDpact employees and contractors with a legitimate service need and confidentiality obligations; (d) service providers supporting hosting, productivity, technical operations, and communications, subject to applicable agreements and protections; and (e) recipients required by lawful process, with notice to the district where appropriate and legally permitted.

​

Service providers may include Google Workspace, Wix, Microsoft services, and other providers used in approved workflows. Provider access to identifiable district information is governed by applicable district agreements and data-protection requirements. EDpact does not sell or rent district information.

​

6. Security, Incidents, and Retention

EDpact maintains administrative, technical, and organizational safeguards designed to protect information from unauthorized access, disclosure, alteration, and loss. Safeguards include access restrictions, authentication controls, confidentiality obligations, secure transfer practices, and periodic review of relevant procedures. No system can guarantee absolute security.

​

EDpact investigates suspected incidents involving district information, takes appropriate containment and remediation measures, and notifies affected districts as required by applicable law and contractual notification provisions. EDpact cooperates with districts in addressing authorized investigation and notification responsibilities.

​

EDpact retains district information for periods reasonably necessary to provide authorized services and satisfy contractual, reporting, audit, preservation, and legal requirements. On expiration or termination of services, EDpact returns, deletes, de-identifies, or otherwise disposes of district information as required by the applicable agreement and law. Records subject to an audit, dispute, investigation, appeal, or lawful preservation obligation may require longer retention. De-identified information is retained or used only as permitted by law and contract.

​

7. Website Privacy and Cookies

EDpact’s website is hosted by Wix. Essential technologies may support website operation and security; analytics and similar technologies may help us understand website use. Cookies and related technologies, available choices, and consent controls depend on the website’s actual configuration and applicable law. Visitors may also control cookies through browser settings. EDpact does not use district records or website contact-form submissions for targeted advertising.

​

8. Policy Updates and Contact Information

EDpact may update this policy to reflect changes in services, technology, or legal requirements. EDpact will post the current version and its effective date on the EDpact website. Where required, EDpact will provide additional notice or obtain authorization before implementing a materially different use of protected information.

Questions about this policy or personal information provided directly to EDpact may be directed to: EDpact LLC | Privacy and Security Contact: Matt Pope, CEO | matt@edpact.net | https://www.edpact.net/. Submit requests involving district-maintained records through the responsible school district.

bottom of page