Privacy Policy

1. Introduction

EdDriving ("we," "us," "our") is committed to protecting the privacy and security of personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our driving school management platform ("Service").

By using EdDriving, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide Directly

Account Registration Information:

• Name, email address, phone number
• Organization name and address (for driving schools)
• Password (encrypted)
• Role and permissions within the organization

Student Information (collected by driving schools using our platform):

• Full name, date of birth, gender
• Contact information (email, phone, address)
• Driver's license or permit information
• Parent/guardian information (for students under 18)
• Course enrollment and progress data
• Document viewing history and completion records
• Payment and billing information
• Appointment and scheduling data
• Instructor evaluations and notes
• Digital signatures
• Photos and uploaded documents (ID, permits, etc.)

Instructor Information:

• Personal information (name, contact details)
• Certification and license information
• Vehicle assignments and availability
• Teaching records and student interactions

Payment Information:

• Payment method details (processed by Stripe)
• Billing address
• Transaction history

2.2 Information Collected Automatically

Usage Data:

• IP address
• Browser type and version
• Device information (type, operating system)
• Pages visited and time spent on pages
• Referral source
• Actions taken within the platform
• Session duration and frequency of use

Cookies and Tracking Technologies:

• Session cookies (essential for platform functionality)
• Authentication tokens
• Preference cookies (user settings)
• Analytics cookies (if enabled)

2.3 Information from Third Parties

• Payment processors (Stripe) - transaction completion data
• Email service providers - delivery and engagement metrics
• SMS providers (Twilio) - message delivery status

3. How We Use Your Information

Specific Uses:

• Compliance Enforcement: Track student progress, document viewing, and requirement completion to ensure valid certifications
• Audit Trail: Maintain records of who approved certificates, when, and under what circumstances for legal defense
• Document Verification: Record when students view required documents (handbooks, policies) with timestamps and IP addresses
• Scheduling: Match students with instructors based on availability and preferences
• Communication: Send transactional emails (appointment confirmations, reminders, certificate notifications)
• Analytics: Understand platform usage to improve features and user experience

4. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

4.1 Within Your Organization

Information is shared with authorized users within your driving school (administrators, instructors) based on their roles and permissions.

4.2 Service Providers

We share information with third-party vendors who perform services on our behalf:

• Stripe: Payment processing (subject to Stripe's privacy policy)
• Email providers: Transactional and notification emails
• SMS providers: Text message notifications (Twilio)
• Cloud hosting: Data storage and application hosting
• Analytics: Usage analytics (if enabled)

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.3 Legal Requirements

We may disclose information if required by law, subpoena, court order, or governmental request, or if we believe disclosure is necessary to:

• Comply with legal obligations
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Respond to state DMV audits or regulatory inquiries

4.4 Business Transfers

If EdDriving is involved in a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. You will be notified of any such change.

4.5 With Your Consent

We may share information for any other purpose disclosed to you with your consent.

5. Data Retention

Active Accounts: We retain your information for as long as your account is active or as needed to provide services.

After Account Termination:

• Educational Records: Retained for 7 years (standard compliance requirement for driving schools)
• Financial Records: Retained for 7 years (tax and accounting requirements)
• Audit Trails: Retained for 7 years (legal defense purposes)
• Other Data: Deleted within 90 days unless legally required to retain

You may request data deletion, but we may retain certain information as required by law or for legitimate business purposes (e.g., preventing fraud, enforcing agreements).

6. Data Security

We implement industry-standard security measures to protect your information:

Technical Safeguards:

• Encryption in transit (TLS/SSL)
• Encryption at rest for sensitive data
• Secure password hashing (bcrypt)
• Regular security updates and patches
• Firewall protection and intrusion detection

Administrative Safeguards:

• Role-based access controls
• Multi-factor authentication options
• Employee training on data protection
• Vendor security assessments

Physical Safeguards:

• Data centers with physical security controls
• Redundant backups and disaster recovery plans

However, no system is completely secure. We cannot guarantee absolute security of your information.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

7.1 Access and Portability: You have the right to request a copy of your personal information in a structured, machine-readable format.

7.2 Correction: You can update your account information directly through the platform or request corrections from your administrator.

7.3 Deletion: You can request deletion of your personal information, subject to legal retention requirements.

7.4 Restriction of Processing: You can request that we limit how we use your information in certain circumstances.

7.5 Objection: You can object to processing based on legitimate interests or for marketing purposes.

7.6 Withdraw Consent: Where processing is based on consent, you can withdraw consent at any time.

7.7 Opt-Out of Marketing: You can unsubscribe from marketing emails using the link in any marketing message or by contacting us.

To Exercise Your Rights: Email with your request. We will respond within 30 days.

8. Children's Privacy (COPPA Compliance)

EdDriving is used by driving schools to manage student enrollments, which often include minors (under 18). We take special precautions to protect children's information:

Parental Consent: Driving schools are responsible for obtaining parental consent before collecting information from students under 18.

Limited Collection: We only collect information necessary for driving school operations and compliance.

No Marketing to Minors: We do not send marketing communications to students under 18.

Parental Rights: Parents have the right to:

• Review their child's personal information
• Request deletion of their child's information (subject to legal retention requirements)
• Refuse further collection or use of their child's information

Parents should contact their child's driving school to exercise these rights. Schools can manage student data through the EdDriving platform.

9. Educational Records (FERPA Compliance)

If your organization is subject to the Family Educational Rights and Privacy Act (FERPA), you are responsible for ensuring compliance. EdDriving supports FERPA compliance by:

• Limiting access to educational records based on legitimate educational interest
• Maintaining audit trails of who accessed student records
• Allowing parents/eligible students to review and request corrections
• Providing controls to limit disclosure of personally identifiable information

Your organization remains the custodian of educational records and is responsible for responding to FERPA requests.

10. International Data Transfers

EdDriving operates in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the United States, which may have different data protection laws than your country.

By using the Service, you consent to the transfer of your information to the United States.

European Users: If you are located in the European Economic Area (EEA), we take additional steps to ensure adequate protection of your information, including:

• Standard Contractual Clauses with service providers
• Ensuring service providers maintain appropriate safeguards

11. Cookies and Tracking Technologies

We use cookies and similar technologies. See our Cookie Policy for detailed information.

Managing Cookies: You can control cookies through your browser settings. However, disabling essential cookies may impair platform functionality.

12. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you in the past 12 months.

Right to Delete: You can request deletion of your personal information, subject to exceptions.

Right to Opt-Out of Sale: We do not sell personal information.

Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

Authorized Agent: You may designate an authorized agent to make requests on your behalf.

To exercise these rights, email .

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our website
• Sending an email notification
• Displaying an in-platform notice

The "Last Updated" date at the top of this policy indicates when it was last revised. Your continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Email:

By using EdDriving, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.