Privacy Policy

Information We Collect

We collect three categories of information:

• District operational data. Route, ridership, fleet, telematics, cost, and service data provided by a district through exports, API integrations, or manual entry.
• Contact information. Name, role, district, email, and phone submitted through forms on this site or during a pilot.
• Usage information. Basic technical and product usage data used to operate, secure, and improve the platform. On this website that includes Google Analytics, which reports page visits, approximate location (city or country), and how visitors found the site; it does not identify individual visitors.

Student Data

Bus IQ Maximizer is designed to produce baselines, scores, savings figures, and scenarios without requiring personally identifiable student information. Where a district chooses to provide data that includes student-level records, we process it solely to deliver the service, under the district's direction, and never to build advertising profiles or to sell.

Where applicable, we act as a school official with a legitimate educational interest under FERPA, operating under the district's direct control. We do not use student data for any purpose other than providing and improving the service to that district.

How We Use Information

We use information to establish district baselines, generate scores and insights, model scenarios, produce reports, provide support, secure the platform, and communicate with district staff who contact us. We do not sell information, and we do not use district data to advertise to families.

Sharing and Service Providers

We share information with service providers who host, secure, and support the platform, and only under agreements that limit their use to those purposes. We may disclose information where required by law or to protect the safety of students and staff. A current list of subprocessors is available on request.

Retention and Deletion

District data is retained for the period the district specifies or for the duration of the agreement, and is deleted or returned at the district's request. Aggregated, de-identified benchmarks that cannot reasonably identify a district or an individual may be retained.

Security

We use role-based access controls, encryption in transit, and access logging. Districts control which staff have access and at what permission level. No system is perfectly secure, and we will notify affected districts of a confirmed breach involving their data without undue delay.

District and Individual Choices

Districts may request access to, correction of, or deletion of data they have provided. Individuals who submitted contact information may ask us to update or remove it. Parents and students should direct requests about their records to their district, which controls those records.

Changes to This Policy

If we make material changes, we will update the date above and notify districts with an active agreement.

Contact

Questions about this policy can be sent through the contact form on our site.