Privacy Policy

• Contact and account information, such as name, email address, school or organization, language preference, and support messages.
• Waitlist, demo, and product-interest information that you submit through forms or email.
• Education-service information, such as classroom configuration, learning activity metadata, teacher notes, student learning signals, and other records provided by a school or authorized educator.
• Technical information, such as device, browser, pages viewed, approximate location derived from IP address, logs, security events, and cookie or similar identifiers.

• Provide, maintain, secure, and improve Vispo.
• Respond to waitlist requests, support requests, and product inquiries.
• Configure classroom workflows, learning reports, integrations, and teacher-reviewed AI suggestions.
• Detect abuse, troubleshoot bugs, measure reliability, and protect students, schools, and the service.
• Comply with legal, regulatory, contractual, accounting, and security obligations.

When a school or educator uses Vispo for classroom or student records, the school or institution controls the education records it provides. Vispo processes that data only to provide the service, follow authorized instructions, and meet security or legal obligations.

We do not sell student personal data, use student data for targeted advertising, or build unrelated commercial profiles from student records.

• United States: Vispo is designed to support school workflows under FERPA, COPPA notices and verifiable parent or school consent where applicable, and state privacy rights such as access, deletion, correction, and opt-out of sale or sharing under California privacy law. Vispo does not sell personal data or share it for cross-context behavioral advertising.
• Taiwan: This notice is intended to cover the Personal Data Protection Act notice items, including the collector, purposes, categories of personal data, period, territory, recipients and methods of use, data-subject rights, exercise methods, and the effect of choosing not to provide data.
• European Union / EEA / United Kingdom: Where GDPR or UK GDPR applies, Vispo identifies controller and processor roles in the applicable agreement or notice, relies on lawful bases such as contract, legitimate interests, consent, and legal obligation, and honors rights to access, rectification, erasure, restriction, objection, portability, withdrawal of consent, and supervisory-authority complaint.

We share personal data only with service providers that help operate Vispo, authorized schools or administrators, professional advisers, authorities when legally required, and successor entities in a merger, acquisition, or similar transaction.

Processors and subprocessors must protect data, use it only for authorized purposes, and support confidentiality, security, deletion, and audit commitments appropriate to their role.

We use administrative, technical, and organizational safeguards such as encryption in transit, access controls, logging, least-privilege practices, and vendor review. No system is perfectly secure, but we work to reduce risk and respond to incidents promptly.

We keep personal data only as long as needed for the purposes described here, as required by law or contract, or as directed by the relevant school or customer. You may request access, correction, deletion, export, restriction, or objection by contacting us.

Vispo may process data in the United States and other countries where we or our providers operate. Where required, we use appropriate transfer safeguards, such as contractual protections, data-processing agreements, or standard contractual clauses.

Questions, privacy requests, and data-protection inquiries can be sent to support@vispo.app.