Privacy Policy

Last Revised: November 9th, 2023

Welcome to Got It!

Got It! Inc. (Got It, the “Company”, “we”, “us” or “our”) values the privacy of all of its Users. Safeguarding your sensitive information is our top priority. Got It provides a service platform connecting “Users” and “Experts” via the Got It website (the “Site”), the Got It application (the “App”) and related Internet services (collectively, the “Service(s)”). The Service is operated by GotIt! Inc. Our Privacy Policy explains the information that we collect from users and how or when we disclose or use it. By accessing or using the Got It website, services, software, applications, and/or content made available by us, you are consenting to collection and use of your information as outlined in this Privacy Policy. When you use the Got It Service, you also agree to our Terms of Service.

for users of the Service (“you”). Under applicable law, Got It is the “data controller” of personal data collected through the Services.

Got It’s Privacy Policy applies to our collection and use of data from students, parents, guardians, teachers, school administrators, school staff, and members of non-profit organizations, and other partners as applicable.

As described below, we use the information that we collect in connection with the use of our Service to provide the Service and to inform and improve our Services.


Information We Collect

In providing our Services, we and our service providers, may collect the following information:

  • Information You Volunteer: We collect information from you when you voluntarily provide such information, such as when you register for access to the Services or use certain Services. The information we collect may include but not be limited to your email address, your password, (and in some cases your first and last name, nickname, grade level, gender, profile photo, phone number, email address, username and password, country of residence, school name, zip code and payment account information, student ID numbers, student classroom roster information, demographic information, learning level and performance data, as applicable a student’s parent or guardian's name and email address, content such as lesson plans and notes) and any messages, images, files or other content you send via the Services.

  • Data We Collect Automatically: When you interact with us through the Services, we receive and store certain information, such as an IP address, including a user’s general location (based on IP address or GPS), device ID, and your activities within the Services such as when and for how long a user accesses our Services, what content a user views and what actions a user takes, using various technologies such as “cookies” or other persistent identifiers. Cookies are data files that are transferred to a user’s computer and are intended to identify that computer. We and our service providers use this information for security purposes, to facilitate navigation, to display information more effectively, to personalize your experience while using our Services, and to recognize your computer in order to assist your use of the Services. We may use cookies to remember your information so that you will not have to re-enter it during your visit or the next time you access the Service. We may store the information we collect or such information may be included in databases owned and maintained by affiliates, agents or service providers. The Services may use such information and pool it with other information to track, for example, the total number of visitors to our Site, the number of visitors to each page of our Site, and the domain names of our visitors’ Internet service providers. We also gather statistical information about use of the Services in order to continually improve their design and functionality, understand how they are used and assist us with resolving questions regarding them. You can disable cookies by changing your browser settings. Further information about the procedure to follow in order to disable cookies can be found on your Internet browser provider’s website via your help screen.

  • Aggregated Information: In an ongoing effort to better understand and serve the users of the Services, we may conduct research on its customer demographics, interests and behavior based on the information provided to us. This research may be compiled and analyzed on an aggregate basis, and we may share this aggregate data with our affiliates, agents and business partners. We may also disclose aggregated user statistics in order to describe our services to current and prospective business partners, and to other third parties for other lawful purposes.

  • Third Party Services: We may allow third party service providers to use cookies or similar technologies to collect information about your browsing and other usage activities over time and across different websites. For example, we use Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses cookies to help us analyze how users use the Site and enhance your experience when you use the Service. For more information on how Google uses this data, please go to www.google.com/policies/privacy/partners/.

  • Other Information: Information from and about a user’s device, such as mobile device type, browser type and version, operating system name and version, IP address, and referring URL. We collect this information automatically when you access our services, to help us understand usage, diagnose problems, administer our Services, and provide support. Information collected through pixel tags (also known as web beacons and clear GIFs) or other similar technologies to track how you navigate through our Services, so that we can understand, for example, what links are clicked and what content is accessed and for how long.

  • Advertising: You may see our Service advertised in other applications or websites. After clicking on one of these advertisements and registering with our Service, you will become a user of the Service. Visitors can opt out of each of the following third party providers by using the following links: http://www.aboutads.info/choices/#completed.

  • We may (and we may allow third party service providers to) use cookies or other technologies to collect information about your browsing activities over time and across different websites following your use of the Services. Please note that the Services currently do not respond to “Do Not Track” (DNT) signals and operate as described in this Privacy Policy whether or not a DNT signal is received. We do not use cookies, pixel tags, or other technologies to track your use of third-party services.


Where Information is Processed

The Company is based in the United States. No matter where you are located, you consent to the processing and transferring of your information in and to the U.S. and other countries. The laws of the U.S. and other countries governing data collection and use may not be as comprehensive or protective as the laws of the country where you live.


How We Use The Information We Collect

We use information that you provide or that we otherwise collect in a manner that is consistent with this Privacy Policy. Notably, we will use your information to link you with the best match to a Got It Expert (if you are a User) or User (if you are a Got It Expert). If you are a User, we will use your information to monitor performance and progress, personalize the User experience, and support instruction. In addition, if you are an Expert we may use your information to audit your work, build Expert rankings and facilitate payment to you; if you are a User we may use your information to notify you of communications from Experts and other Users as well as invites from friends and to collect payment from you.

If you provide information for a certain reason, we may use that information in connection with the reason for which it was provided. For instance, if you contact us by email, we will use the information you provide, including your email address, to answer your question or resolve your problem. Also, if you provide information in order to obtain access to the Services, we will use your information to provide you with access to such services and to monitor your use of such services. The Company and its subsidiaries and affiliates (the “Related Companies”) may also use your information collected through the Services to help us improve the content and functionality of the Services, to better understand our users and to improve the Services, and to tailor and optimize the Services for Users. For analytics purposes, to understand how our Services are accessed and used, and how they perform, so that we may improve upon their design and functionality. We also perform analytics on aggregate information that does not permit the identification of any individual user. We will also use the information to diagnose problems, troubleshoot issues, and provide maintenance and support.

The Company and its affiliates may use this information to contact you in the future to tell you about services we believe will be of interest to you. If we do so, each marketing communication we send you will contain instructions permitting you to “opt-out” of receiving future marketing communications. In addition, if at any time you wish not to receive any future marketing communications or you wish to have your name deleted from our mailing lists, please contact us as indicated below.


Our Legal Bases for Handling of Your Personal Data

The laws in some jurisdictions require companies to tell you about the legal ground they rely on to use or disclose your personal data. To the extent those laws apply, our legal grounds are as follows:

  • To Honor Our Contractual Commitments To You: Much of our processing of personal data is to meet our contractual obligations to our users, or to take steps at users’ request in anticipation of entering into a contract with them. For example, we handle personal data on this basis to create your account and provide our Services.
  • Legitimate Interests: In many cases, we handle personal data on the ground that it furthers our legitimate interests in ways that are not overridden by the interests or fundamental rights and freedoms of the affected individuals. This includes:
    • Providing a safe and enjoyable user experience
    • Customer service
    • Marketing, e.g. sending emails or other communications to let you know about new features
    • Protecting our users, personnel, and property
    • Analyzing and improving our business, e.g. collecting information about how you use our Services to optimize the design and placement of certain features
    • Processing job applications
    • Managing legal issues
  • Legal Compliance: We need to use and disclose personal data in certain ways to comply with our legal obligations.
  • To Protect The Vital Interests Of The Individual Or Others: For example, we may collect or share personal data to help resolve an urgent medical situation.
  • Consent: Where required by law, and in some other cases, we handle personal data on the basis of your implied or express consent.
  • As We Believe To Be Necessary Or Appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal process; (c) to respond to requests from public and government authorities, including public and government authorities outside your country of residence; (d) to enforce our terms and conditions; (e) to protect our operations or those of any of our affiliates; (f) to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others; and (g) to allow us to pursue available remedies or limit the damages that we may sustain.
  • We may use and disclose information that does not identify or otherwise directly relate to an individual for any purpose, subject to any restrictions imposed by applicable law.

Our Disclosure of Your Information

The Company is not in the business of selling your information. There are, however, certain circumstances in which we may share your information with certain third parties without further notice to you, as set forth below:

  • Business Transfers: As we develop our business, we might sell or buy businesses or assets. In the event of a corporate sale, merger, reorganization, dissolution or similar event (including bankruptcy), your information may be part of the transferred assets.
  • Related Companies: We may also share your information with our Related Companies for purposes consistent with this Privacy Policy.
  • Agents, Consultants and Related Third Parties: Like many businesses we sometimes hire other companies to perform certain business-related functions. Such functions include facilitating communication, mailing information, maintaining databases and processing payments. For example, we currently use Amazon Web Services and other data storage providers to store data related to and used in connection with the Service, which includes your information. In addition, we use Apple, Braintree/PayPal and other third party payment processors in connection with the Service. We also use Asana to enable communication among our team members. When we employ another entity to perform a function of this nature, we only provide them with the information that they need to perform their specific function.
  • Legal Requirements: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, (ii) protect and defend the rights or property of the Company or Related Companies, (iii) protect the personal safety of users of the Services or the public, or (iv) protect against legal liability.

Exclusions

This Privacy Policy does not apply to any information collected by us other than information collected through the Services. This Privacy Policy shall not apply to any unsolicited information you provide to us through the Services or through any other means. This includes, but is not limited to, information posted to any public areas of the Services, such as forums, any ideas for new products or modifications to existing products, and other unsolicited submissions (collectively, “Unsolicited Information”). All Unsolicited Information shall be deemed to be non-confidential and we shall be free to reproduce, use, disclose, and distribute such Unsolicited Information to others without limitation or attribution.


User Access

Only as applicable, the law may permit students and their parents or guardians to view, edit, or delete their own personal information that is collected and retained. If you would like to seek such access, please contact the school organization through whom you are using the Service. The Service Provider may elect to forward such access requests to Got It.


Data Retention Period

We generally retain data for so long as it may be relevant to the purposes identified herein and to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law or has otherwise been specified in an agreement.. To dispose of personal data, we may anonymize it, delete it or take appropriate steps. Data may persist in copies made for backup and business continuity purposes for additional time.


Children and Family Educational Rights and Privacy Act of 1974 (“FERPA”)

The Services are not intended for individuals under the age of 13 and we do not knowingly collect information from children under the age of 13. If you are under the age of 13, please do not submit any information through the Services or access or use the Services in any way. If you are a parent or guardian of a child under the age of 13 and believe he or she has disclosed personal information to us please contact us at privacy@got-it.co. If you are over the age of 13, or are the legal parent or guardian of the student, or are the partner school agency, and are aware of inadvertent disclosure of personally identifiable information (PII), please contact us at privacy@got-it.co so that we can remove the information from our platform.

For residents of the EEA, where processing of personal information is based on consent, Got It will not knowingly engage in that processing for users under the age of consent established by applicable data protection law. If we learn that we are engaged in that processing with such users, we will halt such processing and will take reasonable measures to promptly remove applicable information from our records.

As applicable, Got It is in full compliance with the Family Educational Rights and Privacy Act of 1974 (“FERPA”) (20 U.S.C. § 1232g) and the Protection of Pupil Rights Amendment (“PPRA”) (20 U.S.C. §1232h).

As applicable, and with regard to school-based activities, FERPA allows teachers and school administrators to provide consent for the collection of directory information from children. Schools should always notify parents about these activities. Got It only collects limited personal information from minor students only where that student’s school, district, or teacher has contracted with Got It to provide service, which collects personal information solely for the use and benefit of the learning environment. As further applicable, Got It shall require schools, districts, or teachers to obtain parental consent from parents. If you are a parent and would like more information on parental rights with respect to a child’s educational record under the Family Educational Rights and Privacy Act (FERPA), please visit the FERPA site (http://www.ed.gov/policy/gen/guid/fpco/ferpa/index.html). If you believe that a student’s school, district, or teacher has not required parental consent prior to our collection of any personal information, contact us at privacy@got-it.co.


Links to Other Websites

This Privacy Policy applies only to the Services. The Services may contain links to other web sites not operated or controlled by us (the “Third Party Sites”). The policies and procedures we described here do not apply to the Third Party Sites. The links from the Services do not imply that we endorse or have reviewed the Third Party Sites. We suggest contacting those sites directly for information on their privacy policies.

Integrating Social Networking Services:
One of the special features of the Service is that it allows you to enable or log in to the Services via various social networking services like Facebook (“Social Networking Service(s)”). By directly integrating these services, we make your online experiences richer and more personalized. To take advantage of this feature, we will ask you to log into or grant us permission via the relevant Social Networking Service. When you add a Social Networking Services account to the Service or log into the Service using your Social Networking Services account, we will collect relevant information necessary to enable the Service to access that Social Networking Service and your data contained within that Social Networking Service. As part of such integration, the Social Networking Service will provide us with access to certain information that you have provided to the Social Networking Service, and we will use, store and disclose such information in accordance with this Privacy Policy. However, please remember that the manner in which Social Networking Services use, store and disclose your information is governed by the policies of such third parties, and we shall have no liability or responsibility for the privacy practices or other actions of any Social Networking Services that may be enabled within the Service.

You may also have the option of posting your Services activities to Social Networking Services when you access content through the Services (for example, you may post to Facebook that you performed an activity on the Service); you acknowledge that if you choose to use this feature, your friends, followers and subscribers on any Social Networking Services you have enabled will be able to view such activity.


Security

We take reasonable organizational, technical, and administrative measures to protect information within our organization. These reasonable steps are designed to protect the information provided via the Services from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or email transmission is ever fully secure or error free. In particular, email sent to or from the Services may not be secure. Therefore, you should take special care in deciding what information you send to us via email. Please keep this in mind when disclosing any information via the Internet. If you have reason to believe the security of your account has been compromised, please immediately notify us at privacy@got-it.co.


Your Data Rights and Choices

We believe that all users and experts should be treated equally no matter where they are, and so we are making the following options to control your data available to all users, regardless of their location.

You can update certain information by accessing your profile via “Account.” You can also unsubscribe from certain emails by clicking the “unsubscribe” link they contain. You can opt out from certain cookie-related processing by following the instructions above in “Other Information.” Individuals in the European Economic Area, Canada, Costa Rica and some other jurisdictions outside the United States have certain legal rights to obtain confirmation of whether we hold personal data about them, to access personal data we hold about them (including, in some cases, in portable form), and to obtain its correction, update, amendment or deletion in appropriate circumstances. They may also object to our uses or disclosures of personal data, to request a restriction on its processing, or withdraw any consent, though such actions typically will not have retroactive effect. They also will not affect our ability to continue processing data in lawful ways. If you experience issues, you can also contact us at privacy@got-it.co.

How can I access the personal data you have about me?
If you would like to submit a data access request, you can do so from the “Account” page of the Services, where there is a link to submit a request to our Customer Service team. We will then start the process and provide you a link to access the personal data that Got It has on you within 30 days.

How do I correct, update, amend, or delete the personal data you have about me?
In addition to the functionality available through the “Account” of the Services, in which you can correct, update, amend, or delete certain personal data, you can also request other modifications from us directly. Please contact us using the link on the “Account” page with the words “Personal Data Request” in the subject or body of your message, along with an explanation of what data subject right you are seeking to exercise. For your protection, we may take steps to verify identity before responding to your request.

How do I object or restrict the manner in which Got It processes my personal data?
You have a right to ask us to stop using or limit our use of your personal data in certain circumstances—for example, if we have no lawful basis to keep using your data, or if you think your personal data is inaccurate.

Got It offers you the ability to restrict the processing of your data for specific uses, which you can find in the “Account” page of the Services. Individuals in the European Economic Area have the right to opt out of all of our processing of their personal data for direct marketing purposes. To exercise this right, please see the “Account” page. You may also click the “unsubscribe” link in any of our marketing emails.

The rights and options described above are subject to limitations and exceptions under applicable law. In addition to those rights, you have the right to lodge a complaint with the relevant supervisory authority. However, we encourage you to contact us first, and we will do our very best to resolve your concern.


Additional Information for California Residents

This section provides information organized in accordance with the California Consumer Privacy Act (“CCPA”) for residents of California about how we handle certain personal information we have collected over the past 12 months.

Categories of Personal Information. This Privacy Policy discloses the categories of personal information that we collect, use, and disclose in order to operate our business over the past 12 months.

  • Collect. The section above entitled “Information We Collect” discloses the categories of personal information that we collect, which include your account and profile information, your content, your communications with us, your information you provide from linked networks, information about your activity on Got It, and how you engage with Got It.
  • Use. The section above entitled Our Use of Your Information discloses how the categories of personal information we collect are used to provide our services, to promote our services to you, to analyze how our services are used, to comply with law, and to prevent misuse of Got It.
  • Disclose. The section above entitled Our Disclosure of Your Information discloses that we share your personal information with, service providers, affiliates, law enforcement authorities, and as needed with third parties to provide our services.

Requests for Deletion, Copy and Right to Know Your Information. California consumers have the right to make the following requests, which we endeavor to honor from non-California residents as well:

  • Deletion. You have the right to request deletion of personal information that we have collected about you.
  • Copy and Right to Know. You have the right to request a copy of the specific pieces of personal information that we have collected about you over the past 12 months, including the categories of information, sources, and purposes of collection, as well as categories of third parties we have shared it with.
  • Designated Agent. You may designate an agent to make a request on your behalf. That agent must have access to your account in order for us to verify the request.

You can submit a deletion, copy and right to know request by emailing us at privacy@got-it.co. You will need access to the email account associated with your Got It account in order to verify your identity and complete this process.

Non-Discrimination. Got It will not discriminate against you, including by denying or providing a different level or quality of goods or services should you choose to exercise your options under the CCPA.

Your California Privacy Rights under California’s Shine-the-Light Law. California law permits users who are California residents to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their personal information (if any) for their direct marketing purposes in the prior calendar year, as well as the types of personal information disclosed to those parties. If you are a California resident and would like to request this information, please submit your request in an email to privacy@got-it.co.


Updates to this Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time and from time to time without prior notice. Please review this policy periodically, and especially before you provide any personal information. This Privacy Policy was last updated on the date indicated above. Your continued use of the Services after any changes or revisions to this Privacy Policy shall indicate your agreement with the terms of such revised Privacy Policy.


Contacting Us

Please also feel free to contact us if you have any questions about this Privacy Policy or the information practices of the Services.

You may contact us at: privacy@got-it.co