Who We Are
Welcome to STEAM-4-Schools, operated by iCode Technologies LLC. Our platform empowers
educators with advanced AI-driven tools to create custom lesson plans, quizzes, and educational
experiences for K-12 students. This privacy policy describes how we collect, use, and protect personal
information on our admin.steam4schools.com portal, which serves educators and school administrators.
What Personal Data We Collect and Why
Account and Profile Information
Name, email address, school affiliation, and role are collected during registration. This information is
used to create educator accounts, manage cohorts, and provide access to educational features.
Student Data (Provided by Teachers)
- First and last names of students
- Quiz responses and educational activity
- Interests submitted by students
- AI chat interactions (moderated and accessible to teachers only)
Student accounts are never created directly; access is granted through teacher-generated QR codes or
links.
Cookies
- Session Cookies: Enable secure login and save user preferences.
- Analytics Cookies: Collected through Google Analytics to help us understand user
interactions. (Google Signals and user-provided data collection are disabled.)
Users can revoke cookie consent via their account profile settings.
Media Uploads
Educators may upload media (e.g., images, documents). We advise users to avoid uploading media with
embedded location metadata (EXIF GPS).
Embedded Content
Our platform may feature embedded content from trusted providers (e.g., YouTube, Vimeo). Such content
behaves as if visited on the host site, which may collect personal data or use cookies in line with
their respective privacy policies.
How We Use Your Information
- To personalize lesson plans and student experiences
- To facilitate collaboration between teachers and students
- To analyze learning outcomes and improve platform features
- To enable secure storage of content in connected Google Drive accounts (for educators)
Data Sharing and Service Providers
We do not sell or rent personal information to third parties. We use the following service providers for
infrastructure and platform functionality:
- Google Cloud Platform (GCP) – Data storage (Cloud SQL); SOC 2 Type II, ISO/IEC
27001, FedRAMP compliant
- OpenAI – Powers AI chatbot features, limited to non-sensitive inputs
Data Security
- Encryption: AES-256 at rest, TLS 1.2+ in transit
- Access Controls: IAM-based least-privilege access, audit logging
- Password Security: PBKDF2 hashing with unique salts
- Monitoring: GCP Security Command Center and automated intrusion detection
- Staff Training: Secure development and data privacy training
- Backups: Point-in-time recovery, with deleted student data excluded from backups
Data Retention
Student data is retained only as long as necessary for educational use. Upon request or contract
termination, data is deleted or de-identified within 45 days. Backup data is purged of deleted student
records within a 90-day window.
Your Rights Over Your Data
Educators and administrators may:
- View, edit, or delete their own account information
- Request an export or deletion of their data
- Contact us for assistance with privacy-related inquiries
All subject access requests (SARs) and deletion requests will be handled within 30 days, with extensions
up to 60 additional days for complex cases, in line with GDPR requirements. Users will be notified
within the initial 30 days if more time is needed.
Student Data Requests
If a parent or student contacts us directly, we will refer the request to the School Administrator. We
act as a data processor under the school’s direction and will only process or delete student data upon
the School’s instruction.
Breach Notification Policy
In the event of a breach involving student data, we notify the School within 72 hours of confirmation.
Details provided include: nature, scope, affected systems, mitigation steps. Notifications are delayed
only if required by law enforcement. We coordinate closely with Google Cloud Platform to investigate and
respond to incidents.
Law Enforcement and Legal Requests
iCode Technologies LLC may disclose personal information where required by applicable law or court order.
The School will be notified unless legally prohibited. All requests are reviewed by legal and compliance
personnel and documented internally.
Contact Us
If you have questions about this policy or your data:
Effective Date: May 2, 2025
Last Updated: May 2, 2025
Site: admin.steam4schools.com