Snapshot 41535
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Last Updated: November 26, 2025
Effective Date: January 1, 2026
See previous Privacy Policies here.
Introduction and Commitment
Welcome! Thank you for visiting the ReadWorks, Inc. website (“ReadWorks”, “we”, “our”, or “us”). This Privacy Policy applies to our entire Site, including this website (readworks.org) and all of our subdomains (the “Site”).
We are strongly committed to protecting the privacy of educators, students, and all visitors to our Site. This Policy should help you understand the information we collect about you and students when you use the Site and how we use any information we may collect.
When you visit our Site, you agree to our Privacy Policy and Terms of Use. Please review this Privacy Policy now and each time you visit our Site. If you do not agree to any term in the Privacy Policy, you should not use the Site.
This Privacy Policy covers all information collected from Educators and Students via our Site. Only internal employee data or aggregated, de-identified data used for research are considered outside the scope of this Policy.
The laws of the State of New York govern this Privacy Policy. Any dispute relating to this Privacy Policy or your use of the Site or the Content shall be resolved solely in the state or federal courts located in New York, New York.
If you have any questions, comments, or concerns about our Privacy Policy, please email us at [email protected] or write to us at P.O. Box 25809, New York, NY 10087. This Privacy Policy is currently provided in English only. Please contact us if you require translation assistance.
ReadWorks’ Privacy Policy Highlights
We encourage you to read our full privacy policy below. Here are some of the key points throughout:
ReadWorks is a 501(c)(3) nonprofit organization and is primarily used, designed, and marketed for K-12 educational purposes.
ReadWorks is 100% free to use with no in-app purchases for Educators or Students. We may occasionally ask Educators for donations to support our mission, though this is never required.
Who is ReadWorks intended for?
ReadWorks.org is intended for use by individuals 18 or older, including teachers, educators, and parents/guardians.
Students use ReadWorks only through access granted by an Educator User (teacher, educator, or parent/guardian).
What Student data does ReadWorks collect, and how is it used?
All data collected is used for educational purposes only. See our student data schedule here.
ReadWorks does not sell or rent students' personal information and does not use student data for targeted advertising.
Can users communicate on ReadWorks’ platform?
Teachers can provide written feedback on students’ submitted work on ReadWorks.
Students cannot receive or send any form of communication other than teacher feedback on written responses and question sets.
How can I request data deletion?
To request account deactivation or data deletion, contact [email protected].
What activities are prohibited on ReadWorks.org?
Please review our Terms of Use for a list of prohibited activities.
ReadWorks may display limited advertising to fund our mission-based work only on Educator- and General User-facing webpages.
We do not allow any third-party targeted advertising providers to display on or collect information from the student-facing pages of our platform.
How can I contact the ReadWorks team about data privacy?
To contact our team about data privacy, please reach out to [email protected]
Quick Links and Certifications
ReadWorks has achieved SOC2 certification! Learn more here.
For schools and districts seeking a Data Privacy Agreement (DPA), please reach out to [email protected].
Data Breach Plan
Terms of Use
Accessibility Statement
Accessibility Conformance Report
Who is ReadWorks Intended For?
Our Site is intended for any U.S.-based adult educator or education-minded parent or guardian to use in concert with students of elementary school age or older.
No person under the age of 18 is meant to use the ReadWorks Site without the invitation, direction, and guidance of an adult. If you are the parent, guardian, or educator of a child who has used the Site without such permission, please contact us at [email protected].
Definitions of Terms in Policy
“Educator User” or “Educator”:
Registered adult user (teacher, educator, parent) creating accounts, assigning content, and administering the platform.
“Student User” or “Student”:
Account created by or at the direction of a school/teacher/parent through a user account. Students have access only to a student workspace area on the website.
General Site Visitor:
Anyone browsing the public website.
Personal-Identifiable Information (PII):
Any data that can be used to identify a specific individual, either on its own or when combined with other information, including non-personally identifiable information.
Non-personal Information:
Information that does not personally identify you, including anonymous information and aggregate data.
Are There Outbound Links on the Site?
Educators
Our Site contains links to third-party websites. We provide these links for convenience; we do not control the content of these websites, and assume no liability or responsibility for them.
Our Privacy Policy does not concern the use of information collected on these third-party sites. If you choose to visit these third-party sites, you should review their privacy policies to make sure you understand and are comfortable with their practices regarding your personal information.
Students
The student workspace does not contain any external outbound links or advertisements. Links on the general educator/adult pages are clearly marked, and ReadWorks is not responsible for the privacy practices of third-party sites.
What is ReadWorks’ International Use Policy?
This Site is intended for use by individuals in the United States. Despite the global nature of the Internet, ReadWorks makes no claims that the Site is appropriate or may be viewed or used outside the United States. Additionally, our databases are located in the United States, and the data we collect from users is stored in the United States. This Site is intended for use by individuals in the United States. By sending us your information, you consent to its transfer to and storage within the United States and its use in a manner consistent with this Privacy Policy.
What if ReadWorks’ Privacy Policy Changes?
In the case of any material changes to our policy, including those that affect the use of Student PII, we will provide a banner notification on our website at least thirty (30) days prior to the changes taking effect. This notification will include an "accept" button on the banner. Once you have consented to these changes by clicking the "accept" button, you can continue to use our Site. Material changes will not take effect until the stated date of effectiveness following the notification period. Non-material changes may take effect immediately.
Information We Collect and How We Collect It
Educator User Data - Educators, Teachers, Parents/Guardians
Information You Provide
To access certain information or materials on the Site, a ReadWorks Educator account is required. We collect and store information that allows us to connect an account to you, such as your name and email address. We may also ask for your role, city, state, school, and more. We refer to this information as personally-identifiable information (PII). If you wish to update any profile information, navigate to your ReadWorks profile. See how here.
Additionally, we may collect and retain a record of all communications we have with you.
Information We Acquire from Third Parties (Educator PII Only)
To market our free educational resources to the widest possible audience of educators, ReadWorks may, from time to time, acquire lists containing Educator PII, such as names and email addresses, from trusted, third-party education list service providers
This information is collected solely to communicate about the ReadWorks platform, new content, and features. No Student PII is ever acquired, purchased, or combined with any list service data. All Educator PII acquired this way is protected by the terms of this Policy and is subject to the same opt-out and deletion rights as directly collected PII.
What Information Does ReadWorks Collect through Technology?
We may collect information about Educators through technology. For example, we may collect your IP address each time you click on a page during a visit to our Site. The Site may use other technical methods to track and analyze website traffic patterns, such as how often our Users visit different parts of the Site.
These technical methods may involve the transmission of information either directly to us or to another party we have authorized to collect and process information on our behalf, such as Amazon Web Services. (See Third-Parties section for details.)
We may also use technical methods in emails that we send to Educators to determine whether Educators have opened and/or clicked links. We may collect the information from these technical methods in a personally identifiable form.
Cookies
Our Site uses “cookies” to enable ongoing access to and use of the Site and to support ongoing Site maintenance. Cookies are small text files that may be placed on a browser when you visit a website. For instance, when you return to the Site after logging in, cookies provide the Site with information, including personal information, so that the Site can remember who you are.
We use cookies to capture anonymous data from Educator actions to improve our Site experience and performance. We get statistical information from cookies, including, among other things, how often Educators use our Site, the pages Educators visit, and how long each visit is, as well as information about an Educator’s computer, operating system, browser, language, and country.
How to Limit Cookies
In your Internet browser, you can choose to have your computer warn you each time a cookie is sent, or you can choose to turn off all cookies. Check your browser’s HELP menu to learn about your options. If you decide to turn off cookies, you may not have access to many features that make our Site smoother, and some services on the Site might not work properly.
You can delete any cookies at any time by using the relevant option of your Internet browser or by deleting cookies on your hard drive. If you continue to use the Site with your browser set to accept cookies, we will assume you accept receiving all cookies coming from our Site.
Google Analytics & Google API Services
We use Google Analytics to collect information about how our General Site Visitors and Educators use our Site. Google Analytics collects information such as how often users visit the Site, which pages they visit, and which other sites they visit before or after coming to the Site.
Our Site’s use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements. (See Third-Parties section for details.)
We use the information we get from Google Analytics only to improve our Site. By using our Site with your Internet browser set to accept cookies, you agree to Google Analytics’ use of cookies on our Site.
Schedule of Educator Data
Data Element Required or Optional How Data is Collected Purpose
IP Address of users, use of cookies Required Automatically collected by Site.
Enables the delivery of our online resources.
We may use your IP address to help diagnose problems with our servers, your Site experience, for security purposes, for impact analytics, and for advertising.
Metadata on user interaction with the application Required Automatically collected by Site. Enables the delivery of our online resources.
User Name Required Collected when the user creates a ReadWorks profile Enables the delivery of our online resources.
User Email Required Collected when the user creates a ReadWorks profile Enables the delivery of our online resources.
User Role Optional Collected when the user creates a ReadWorks profile As a mission-based nonprofit, this data helps us better understand and report our impact on reading comprehension nationwide.
User School Optional Collected when the user creates a ReadWorks profile As a mission-based nonprofit, this data helps us better understand and report our impact on reading comprehension nationwide.
City Optional Collected when the user creates a ReadWorks profile As a mission-based nonprofit, this data helps us better understand and report our impact on reading comprehension nationwide.
State Optional Collected when the user creates a ReadWorks profile As a mission-based nonprofit, this data helps us better understand and report our impact on reading comprehension nationwide.
Grade Levels Taught Optional Collected when the user creates a ReadWorks profile As a mission-based nonprofit, this data helps us better understand and report our impact on reading comprehension nationwide.
Student User Data
Student User data is collected only for educational purposes. Collection or use of data is limited to product requirements.
ReadWorks will not retain student personal information for longer than necessary to deliver services or for school purposes. ReadWorks will delete any student data once operationally practicable.
Any information, including non-Personally Identifiable Information (non-PII) such as an IP address, usage statistics, or device ID, that is collected and then combined or associated with a user’s Personally Identifiable Information (PII) is subsequently treated as PII and will be protected under the full terms of this Policy.
ReadWorks Does Not:
Build student profiles for non-educational commercial purposes
Sell or rent student data to third parties
Advertise to students or provide any external links in the student workspace
Collect geolocation data, biometric or health data, behavioral data, or free/reduced lunch status
Collect sensitive information such as ethnic, racial, national origin, cultural, religious, or social personal information
Cookies
Our system is set up not to use cookies for Students except when requested by such Students’ school district. In such cases, the data generated is managed in accordance with the school district’s privacy policy.
Google Analytics & Google API Services
Our Site is set up not to use Google Analytics to collect data about Students.
ReadWorks’ In-Platform Rostered Student Accounts: Schedule of Student Data
If a Student has a class code from their Educator (an alphanumeric code unique to a digital class), the Student uses that code to access ReadWorks’ platform. In this instance, ReadWorks may also obtain the name of the Student’s Educator, school, and/or school district.
Student names are not visible to other Users except for that Student’s linked Educator. An Educator can designate pseudonyms, initials, or nicknames instead of Student names.
Data Element Required or Optional How Data is Collected Collection Purpose Third Party Sharing Sharing Purpose
Provider/app assigned student ID number Required Assigned by Site Unique ID number enables the use of ReadWorks’ digital class features See Third Party Section See Third Party Section
First and/or Last Name Required
Provided by the Educator.
This is not required to be a student’s full name and can be a nickname.
We collect student names to ensure that parents, guardians, and educators are able to keep track of which students are which while using our Site.
We do not store student names long-term and endeavor to delete such data once the corresponding student account or the class containing such student account is deleted by the educator, parent, or guardian who set up such account.
Program/application performance Required Collected by the Site throughout use
Allows teachers to monitor progress, including through assignment grading.
Student use activity is stored anonymously and retained only for educational purposes.
ELL Status Optional Educators are able to enable extra support features for English Language Learners in Class Admin Denoting a student as an English Language Learner, and in some cases selecting a home language, enables delivery of tailored support, such as instructions in a student’s native language.
Student responses to surveys or questionnaires Optional Collected by the Site throughout use
If assigned, students may complete our Reading Mindset Snapshot to indicate reading interests
If Student Library is enabled, students complete a survey upon entry to tailor recommended passages to student interests.
Student use activity is stored anonymously and retained only for educational purposes.
Student-generated content; writing; pictures, etc. Optional Collected by the Site throughout use
If assigned open-ended question sets or the Book of Knowledge, students provide written responses for assignments
Student use activity is stored anonymously and retained only for educational purposes.
Single Sign-On (SSO) Integrations
If you register for a ReadWorks account through an authentication service (such as Google Classroom, NYC DOE, ClassLink, or Clever), ReadWorks may collect information from these third-party services, consistent with your privacy settings in your account with the relevant Authentication Service.
ReadWorks and Google Classroom Integration: Data Collected from Google
When a student account in ReadWorks is set up from a pre-existing Google account, we collect the name provided by such educator, parent, or guardian as it appears in that Google account and store it in our database accordingly.
ReadWorks and Clever Integration: Data Collected from Clever
Data Element Collection Purpose Third Party Sharing Sharing Purpose
Teacher First Name Enables the delivery of our online resources. See Third Party Section See Third Party Section
Teacher Last Name Enables the delivery of our online resources.
Teacher Email Enables the delivery of our online resources.
ReadWorks does not write back any data to Clever and does not collect Student data.
ReadWorks and Class Link Integration: Data Collected
Data Element Collection Purpose Third Party Sharing Sharing Purpose
Teacher First Name Enables the delivery of our online resources. See Third Party Section See Third Party Section
Teacher Last Name Enables the delivery of our online resources.
Teacher Email Enables the delivery of our online resources.
Student First Name ReadWorks uses collected data for SSO purposes only.
Student Last Name ReadWorks uses collected data for SSO purposes only.
ReadWorks does not write back any data to ClassLink.
ReadWorks and NYC DOE SSO Integration: Student Data Collected
Data Element Collection Purpose Third Party Sharing Sharing Purpose
Teacher First Name ReadWorks uses collected data for SSO purposes only. See Third Party Section See Third Party Section
Teacher Last Name ReadWorks uses collected data for SSO purposes only.
Teacher Email ReadWorks uses collected data for SSO purposes only.
Student First Name ReadWorks uses collected data for SSO purposes only.
Student Last Name ReadWorks uses collected data for SSO purposes only.
ReadWorks does not write back any data to NYC DOE.
Donor Data
As a nonprofit organization, ReadWorks relies on the generosity of its donors to continue providing free resources nationwide. Donating is never required to use ReadWorks.org.
ReadWorks does NOT directly store credit card information — all credit card information and transactions are stored by our third-party payment providers, Bloomerang, PayPal, and Stripe.
We use Bloomerang CRM and its subsidiary, Kindful, to collect donations. See our Third-Party section for more information.
Donor Data Schedule
Data Element Required or Optional How Data is Collected Purpose Third Party Sharing Sharing Purpose
Donor Name Required Donation Form Bloomerang, Kindful Donor CRM software
Donor Email Required Donation Form Bloomerang, Kindful Donor CRM software
Donor Address Optional Donation Form Bloomerang, Kindful Donor CRM software
Donor Phone Number Optional Donation Form Bloomerang, Kindful Donor CRM software
Donor Credit Card/Payment Information Optional Donation Form Note, ReadWorks does NOT directly store credit card information — all credit card information and transactions are stored by our third-party payment providers, Bloomerang, PayPal, and Stripe. Bloomerang, Kindful Donor CRM software
How Does ReadWorks Use the Information Collected?
Student User data is collected by ReadWorks only for educational purposes. Collection or use of data is limited to product requirements.
ReadWorks does not sell, rent, or trade Student User PII to third parties for their marketing or advertising purposes. See our Advertising and Marketing Policies section to learn more.
We do not disclose nonpublic personal information about Student Users of the Site to any nonaffiliated third parties, except as described here or in our Terms of Use.
Data Retention and Storage
If an Educator Account (and all associated Student Data) remains inactive for twenty-four (24) consecutive months, ReadWorks reserves the right to automatically purge all associated PII from our systems, unless subject to a current contract with an LEA.
Student Data
ReadWorks retains user and student data only as long as necessary to fulfill the educational purpose for which it was collected.
We do not store Student names long-term and endeavor to delete such data once the corresponding student account or the class containing that account is deleted by the Educator User who set up such an account.
Student use activity (e.g., when an assignment begins or ends and how questions are answered) is stored anonymously and retained only for educational purposes.
Research and Impact Assessments
ReadWorks is a nonprofit organization dedicated to improving reading comprehension, and we use data in two specific ways to achieve and communicate our mission:
Efficacy and Impact Assessment: We may use aggregated, anonymized, and de-identified Student Usage and Performance Data to assess the effectiveness and impact of the ReadWorks Site. This data is used to improve the user experience, content quality, and service delivery. This process never involves the use of Student Personally Identifiable Information (PII).
Formal Research Pilots: ReadWorks may collaborate directly with a Local Education Agency (LEA) to conduct a formal research pilot study. In these cases:
No Student PII is ever shared or used without the explicit knowledge and direction of the participating LEA.
A separate, formal Data Privacy Agreement (DPA) or research agreement will be executed with the LEA. This agreement will strictly govern the scope, duration, PII fields used, and specific deletion requirements for that individual study, superseding any general terms in this policy.
Third-Party Service Providers
ReadWorks is committed to keeping the number of third parties that process your data to an absolute minimum. To provide, maintain, protect, and improve the quality and performance of the ReadWorks Site and our nonprofit operations, we work with a select number of trusted partners, vendors, and organizations ("Service Providers").
ReadWorks maintains a strict inventory of all Service Providers, sharing user data only with a minimal number of third parties when necessary for the operation of the Site, such as Amazon Web Services (AWS) for server hosting. A comprehensive, up-to-date list of these partners and the data shared is always available in the "Third-Party" section of this Policy.
To ensure continuous protection, we conduct an annual review of each vendor’s privacy policy to confirm strict alignment with our security and privacy standards. For any custom subcontracts, we require the vendor to adhere to our privacy and security requirements. Users cannot opt out of or change profile settings to adjust third-party access.
For full transparency into our technical and administrative controls, ReadWorks has achieved a clean SOC 2 report, which details the extensive security measures we have in place. Educators, schools, districts, and families may request the full report by emailing [email protected].
We categorize third parties into three groups:
Service Providers: Core vendors that process student or educator PII to support the educational function of the logged-in Site (e.g., hosting, database management, platform functionality).
Internal Operations Tools: Business services (like internal team collaboration or project management software) that may incidentally contain Educator PII (e.g., email address, name).
Public Site Vendors: Services used only on the public-facing areas of the ReadWorks website, which do not interact with the logged-in student or educator workspace.
This list may be updated as we enhance our services. We strive to keep this list current and accurate. If you have any questions, please contact us at [email protected].
Third-Party Service Providers
Third-Party
Privacy Policy
Group Purpose How We Use Service Educator/Donor PII Shared Student PII Shared Entity location (country) and country of data storage
ActiveCampaign
Privacy Policy
Service Provider
Email marketing
Email communications
District support
ActiveCampaign is our email CRM used to communicate with Educators. We send platform updates, promotional materials, and guidance based on use activity through ActiveCampaign. All collected Educator data is stored in ActiveCampaign for ReadWorks promotional and guidance purposes. None
Service Provider Location: USA
Data Storage Location: USA
AWS
(Amazon Web Services)
Privacy Policy
Service Provider Amazon Web Services (AWS) provides ReadWorks with servers, databases, analytics, and website infrastructure. Data is stored in various cloud (AWS) databases. Data is encrypted via TLS. All collected Educator and Student data is stored in various cloud (AWS) databases. Data is encrypted via TLS.
All collected user data is stored in various cloud (AWS) databases. Data is encrypted via TLS.
All data is stored exclusively for educational purposes, either to ensure the smooth functionality of the website itself, or to support analysis to improve the ReadWorks product. No student PII is utilized for commercial or marketing purposes.
Service Provider Location: USA
Data Storage Location: USA
Atlassian
Privacy Policy
Service Provider Task management software Used for internal tech team project management. In some instances, Educator data may be used in Atlassian to identify and resolve technical issues. None
Service Provider Location: USA
Data Storage Location: USA
Bloomerang
Privacy Policy
Service Provider Donations and Donor Management
Donors Only: Bloomerang CRM is the platform ReadWorks uses to track donations and send email communications to donors
Donor name
Donor email address
Donor comments
Donor address
Payment method
None
Service Provider Location: USA
Data Storage Location:
USA
Calendly
Privacy Policy
Service Provider Scheduling tool ReadWorks’ team uses Calendly to schedule meetings with district leaders and educators for professional learning opportunities Provided information, such as name, school, district, email, and professional learning interests, may be collected None Service Provider Location: USA
ClassLink
Privacy Policy
Service Provider Student rostering / Single sign-on (SSO) We acquire data from our approved roster management partners to facilitate account creation and class management. ReadWorks does not write back to ClassLink. ReadWorks does not write back to ClassLink.
Clever
Privacy Policy
Service Provider Student rostering / Single sign-on (SSO) We acquire data from our approved roster management partners to facilitate account creation and class management. ReadWorks does not write back to Clever. ReadWorks does not write back to Clever.
Google
Privacy Policy
Internal Operations Tools
Internal Communications
Document Storage
ReadWorks uses Google Workspace for emails, docs, slides, worksheets, and file storage. ReadWorks stores emails and files using Google services for its own purposes. In some instances, ReadWorks may share personal information while using Google services. (For example, if an educator emails employees for support.)
None
In rare instances, user data may be shared with explicit permission from users in the form of case studies on our blog or in our teacher guide, which may be first drafted in Google Workspace internally.
Service Provider Location: USA
Data Storage Location: Global
Google Analytics
Privacy Policy
Service Provider Viewing Site traffic and analyzing impact. We use Google Analytics to collect information about how our visitors use our Site. Google Analytics collects information such as how often users visit the Site, what pages users visit, and what other sites they visited before or after coming to the Site. Our Site is set up not to use Google Analytics to collect data about our student users
None
Google Analytics is not used for student workspace pages. Student-facing pages are excluded via filters through Google Analytics 4.
Service Provider Location: USA
Data Storage Location: Global
Google Classroom
Privacy Policy
Service Provider Student rostering / Single sign-on (SSO) We acquire data from our approved roster management partners to facilitate account creation and class management. ReadWorks does not write back to Google Classroom. ReadWorks does not write back to Google Classroom.
Service Provider Location: USA
Data Storage Location: USA
Handwrytten
Privacy Policy
Internal Operations Tool Donor communications We use Handwrytten to deliver limited mail to supporters
Donor name
Donor address
None
Service Provider Location: USA
HelpScout
Privacy Policy
Service Provider Customer support ticketing In some cases, educator users may share the Student Name associated with a digital class or, in the event that a student has created an educator account against ReadWorks’ Terms, a student’s email address.
Service Provider Location: USA
Data Storage Location: USA
Kindful
Privacy Policy
Service Provider Donations and Donor Management Donors Only: Kindful, a subsidiary of Bloomerang, is the tool we use to collect payments from donors
Donor name
Donor email address
Donor comments
Donor address
Payment method
None
Service Provider Location: USA
Data Storage Location: USA
NYC DOE SSO
Privacy Policy
Service Provider Student rostering / Single sign-on (SSO) We acquire data from our approved roster management partners to facilitate account creation and class management.
Service Provider Location: USA
Data Storage Location: USA
PayPal
Privacy Policy
Service Provider Donations and Donor Management Donors Only: We use PayPal to collect payments from donors.
Donor name
Donor email address
Donor comments
Donor address
Payment method
None
Service Provider Location: USA
Data Storage Location: USA
Proton Pass
Privacy Policy
Internal Operations Tools Secure password management and two-factor authentication ReadWorks stores some usernames and passwords in Proton Pass to ensure confidentiality and encrypted storage of all internal user accounts None None Service Provider Location: Switzerland
Slack
Privacy Policy
Internal Operations Tools Internal communications ReadWorks uses Slack for internal communications and limited external partnership communications In rare instances, user data may be shared in Slack, especially to address technical bugs and user issues None
Service Provider Location: USA
Data Storage Location: USA
Stripe
Privacy Policy
Service Provider
Donations and Donor Management
Donors Only: Stripe is our payment processing platform None
Service Provider Location: USA
Data Storage Location: Global
SurveyMonkey
Privacy Policy
Service Provider Survey platform ReadWorks may occasionally ask users to participate in surveys to help our team better understand use and identify areas for platform growth and improvement Information shared through SurveyMonkey is entirely optional and may include name, school, district, ReadWorks use information, curriculum, and more. None
Service Provider Location: USA
Data Storage Location: USA, Canada, Ireland
Vanta
Privacy Policy
Internal Operations Tools Security audit service Vanta is a trust management platform that automates compliance and security workflows for ReadWorks, including supporting SOC2 certification. None None
Service Provider Location: USA
Data Storage Location: USA
Tableau
(Salesforce product)
Privacy Policy
Service Provider Data visualization tool ReadWorks uses Tableau to analyze and report on data internally. This helps us understand how educators are using the platform and, in cases where users have opted to share their school information, helps us understand the communities we are serving as a mission-based organization.
Aggregated and anonymized student usage data may be stored in Tableau.
All data is stored exclusively for educational purposes, either to ensure the smooth functionality of the website itself or to support analysis to improve the ReadWorks product.
Service Provider Location: USA
Data Storage Location: USA
Weebly
Privacy Policy
Internal Operations Tools Website hosting service
ReadWorks uses Weebly for our About.ReadWorks.org website, where we host our teacher guide, organizational information, and blog.
None
In rare instances, user data may be shared with permission from users in the form of case studies on our blog or in our teacher guide.
None
In rare instances, user data may be shared with explicit permission from users in the form of case studies on our blog or in our teacher guide.
Service Provider Location: USA
Zoom
Privacy Policy
Internal Operations Tools Video conference/meeting platform ReadWorks’ team uses Zoom to meet internally and with partners, districts, schools, educators, and funders. None None
Service Provider Location: USA
Data Storage Location: USA
How Does ReadWorks Secure & Protect Data?
ReadWorks has achieved SOC2 certification! Learn more here.
ReadWorks adheres to the NIST Cybersecurity Version 1.1 and ISO 27000 series frameworks.
We work hard to protect personal information. We store and process all data in accordance with industry best practices. This includes encryption and appropriate administrative, physical, and technical safeguards, including firewalls, to secure Student Data from unauthorized access, disclosure, and use. We conduct periodic risk assessments and promptly remediate any identified security vulnerabilities.
We regularly conduct system audits and ensure all of our software has the latest security-related patches and updates. We also limit employee access to user information.
Unfortunately, there is no such thing as “perfect security” on the Internet, and third parties may unlawfully intercept or access transmissions or private communications. We will not be responsible or liable for any damages, losses, or causes of action in connection with the disclosure of your personal information.
Encryption
Educator, Student, and General Site Visitor data are encrypted at rest and in transit. Data is encrypted via TLS. We use secure data transmission protocols to encrypt confidential and sensitive data when transmitted over public networks. ReadWorks restricts privileged access to encryption keys to authorized users.
Verified Educator Account
Educators must verify their account via email before they can access some of our Site. This is to prevent fraudulent access and reduce instances of Student cheating.
Password Requirements
For security purposes, Educators are required to create an account using an email and password or via a third-party SSO. Passwords must be at least 8 characters, and include both uppercase and lowercase, as well as a number or special character. At this time, ReadWorks does not require two-factor authentication for users, though third-party SSOs used with ReadWorks may.
reCAPTCHA
To ensure that you are not a robot trying to hack or spam our website, we use the reCAPTCHA API from Google. You acknowledge and understand that the reCAPTCHA API works by collecting hardware and software information, such as device and application data, and the results of integrity checks, and sending that data to Google for analysis.
Employee Access
Access to Student and Educator PII is strictly limited to a select group of authorized ReadWorks employees whose job functions require access (i.e., customer support and technical development). All employees undergo mandatory annual security training and policy review to ensure they fully understand and adhere to our strict confidentiality and data handling protocols.
Control, Access, and Accuracy of Your Information
Data Sharing
Disclosure to Law Enforcement
ReadWorks will not disclose Student PII to law enforcement or private parties unless required by a valid, legally binding court order or subpoena. In the event we receive such a request, we are committed to conducting due diligence to ensure the request is lawful and notifying the affected Educator or LEA before disclosure, unless legally prohibited from doing so (e.g., by a court-issued gag order).
We may also do so to help enforce our Terms of Use, protect your safety or security, or protect the safety and security of tangible or intangible property that belongs to us, to you, or to third parties.
We intend to publicly disclose the number of legal requests for user data we receive annually, subject to applicable laws. To date, ReadWorks has not received any legal requests for user data.
Disclosure in the Event of Acquisition
If acquired, we may transfer all Educator User information (including personal information) to our acquirers or successors. Our acquirers and successors will act in accordance with this privacy policy. Other than as part of such a transaction, we will not sell any of your personal information.
In the event of such acquisition, we will provide a notification on our website at least thirty (30) days prior to the acquisition taking effect. This notification will include an "accept" button on the banner. Once you have consented to these changes by clicking the "accept" button, you can continue to use our Site.
Non-personal information is information that does not personally identify you, including anonymous information and aggregate data. We may use this information to understand how General Site Visitors and Educators use the Site, provide customized services and information, improve the Site, and for other similar purposes. We may combine this information with personal information. We may share this information with others and use this information in any manner permitted by law, but the above paragraphs will govern any disclosure that identifies you personally.
Data Ownership
You understand and agree that you have no ownership rights in materials you submit to us, to any account you may have with us, or to any aspect of the Site or features therein.
If ReadWorks enters into a formal Data Privacy Agreement (DPA) with an LEA, the terms and conditions of that DPA regarding the ownership and use of Student Data shall supersede and override any general statements made in this Privacy Policy or our Terms of Use regarding the ownership of content.
Account Removal
We may cancel your account and delete all User Content associated with your account at any time, and without notice, if we deem that you have violated our Terms of Use, Privacy Policy, or the law, or for any other reason. We assume no liability for any information removed from our Site and reserve the right to restrict access to the Site or a user account permanently. ReadWorks may also prevent your use of this Site with or without notice. You agree that you do not have any rights in this Site and that ReadWorks will have no liability to you if this Site is discontinued or your ability to access the Site or any content you may have posted on the Site is terminated.
If a user believes their account was deactivated in error and would like to issue a complaint or appeal, they can email [email protected].
Data Accuracy
To ensure data accuracy, ReadWorks may occasionally request updated profile information and suggest archival of older digital classes, typically in alignment with the start of a school year.
User Data Control Questions
How Do I Request Data Modification and Updates?
Students
To learn how to update Student information or delete a Student, please see: https://help.readworks.org/article/39-how-can-i-delete-a-student
Educators
Educator User profile data can be found by selecting your account name in the top right corner of ReadWorks.org when signed in. From there, select “My Account” to see First Name, Last Name, Email, City, State, Role, and Grade Level(s) Taught. All data fields can be edited on this page.
If you have any questions about updating account information or need assistance, reach out to [email protected]. Please allow 7-10 business days for a response.
How Do I Deactivate My Account?
If you would like to deactivate your account, please email [email protected]. Please allow 7-10 business days for a response.
How Do I Request Data for Review or Deletion?
If you would like us to delete certain information or disclose to you information about our collection and use of your personal information for review, you may ask us to do so.
Once we receive your request and verify your identity, we will disclose such information to you or delete the information you have asked us to delete, unless there is a legal exception. For example, we might deny your deletion request if we need to retain the information to complete the transaction for which we collected the personal information, provide a service you requested, or take actions we reasonably anticipate within the context of our ongoing relationship with you.
To submit a request, please email us at [email protected].
Your request must:
Provide enough information to reasonably verify that you are the person about whom we collected personal information or an authorized representative of such person.
Describe your request with enough detail to allow us to understand, evaluate, and respond to it.
We cannot respond to your request or provide you with non-public personal information if we cannot verify your identity, authority to make the request, or confirm that the requested personal information relates to you. We will use the information provided in a request solely to verify your identity or authority to make the request.
Please allow up to 30 business days for the deletion or disclosure of data.
How Can I Export User Data?
See how to access different categories of data below:
Collected User Profile Data: Educator User profile data can be found by selecting your account name in the top right corner of ReadWorks.org when signed in. From there, select “My Account” to see First Name, Last Name, Email, City, State, Role, and Grade Level(s) Taught. All data fields can be edited on this page.
Export class results: See how to export aggregated class results here.
Export Submitted Student Content: Student-generated content and be exported in “Assignments & Progress” by selecting “Student Progress” and then the Student whose data you wish to export. Export options include the print icon in the top right corner and the CSV download option.
To submit additional data export requests, please email us at [email protected].
Can I Assign a Legacy Contact?
ReadWorks does not provide a feature for individual users to assign a 'legacy contact.' All student PII control and management is handled by the Local Education Agency (LEA), which determines the authorized personnel responsible for inactive teacher accounts or data archival.
COPPA and FERPA
ReadWorks is an educational nonprofit committed to protecting the privacy of all student data in accordance with the highest industry standards. As a nonprofit that does not receive federal funding, COPPA and FERPA do not directly apply to our organization; however, we voluntarily align with the core principles and protections established under U.S. federal law.
We will not use Student Data for any purpose beyond providing our educational services to the students as outlined in this Policy. ReadWorks does not sell or rent students' personal information and does not use student data for targeted advertising.
We collect limited personal information from children under 13 only with consent provided by the Educator or the LEA on behalf of the parent or guardian. By accepting this Policy and creating an account, Educators verify consent on behalf of the parent/guardian.
If a parent/guardian wishes to withdraw consent for Student use or delete Student data used in coordination with an Educator account, they should first contact the Student’s teacher, school, or district. For parents seeking further support, they can email [email protected].
What Are ReadWorks’ Advertising and Marketing Policies?
ReadWorks Promotional and Guidance Emails
We may use or disclose certain personal information we collect about our Educators when they visit and browse our Site as part of our normal operations, including through our promotional email platform, ActiveCampaign. More information on how ActiveCampaign uses data can be found at https://www.activecampaign.com/legal/privacy-policy.
We may also use or disclose certain personal information to respond to requests we receive from you and through our use of service providers in connection with the Site. See our Third-Party section to learn more.
Users can opt out or unsubscribe from marketing communications by selecting the “Unsubscribe” button at the bottom of every email or emailing ReadWorks at [email protected].
Students
We make every effort to segregate student data from that of educators, parents, and guardian users and do not share such data with ActiveCampaign.
Contests, Surveys, and Sweepstakes
ReadWorks may occasionally offer Educator Users the opportunity to participate in voluntary programs, such as our bi-annual educator surveys, contests (including student-centered illustration or writing competitions), and the Readwards program (which rewards educators who share the platform). In some instances, these will be held in partnership with another organization.
Data Collected: Participation in these activities is entirely optional and typically requires the collection of your Educator PII (such as name, email, and school affiliation) solely to administer the activity, select winners, and distribute prizes (e.g., gift cards).
Student PII: While some contests may be student-centered, any associated student content (e.g., artwork) is not PII. We may require limited Student PII (such as name and grade) to register for or participate in these activities.
Advertising on ReadWorks
ReadWorks is a nonprofit organization, and we use limited, non-intrusive advertising solely to generate revenue to support our core educational mission and keep our platform free for all users.
Students
Crucially, we maintain a strict firewall between our advertising practices and Student data:
No Student Data Used: We do not use Student Personally Identifiable Information (PII), performance data, or educational records to target, customize, or serve advertisements.
No Student Visibility: Advertisements never appear on any Student-facing pages, within the student workspace, or on pages accessible to users logged in as Students.
Educators
Targeting for Educator Pages Only: Banner and sidebar advertisements are displayed only on teacher-facing pages of the Site (e.g., ReadWorks’ homepage, our content library, administrative “About ReadWorks” pages).
Targeting Basis: Ads displayed on Educator pages are customized based solely on first-party cookies related to the adult user's non-PII browsing history on the ReadWorks site (contextual targeting).
Selective Advertising to Educators: ReadWorks maintains strict standards for all advertisements displayed on our Educator-facing pages. We prohibit ads that promote or feature inappropriate content, including, but not limited to, alcohol, tobacco, gambling, violence, or sexual content. We strive to ensure that all ads displayed are appropriate for an educational environment.
At this time, there is no way to opt out of advertising on ReadWorks’ Site.
Off-Site Retargeting: Educator Users and General Site Visitors
For marketing purposes, ReadWorks may engage in retargeting to promote our services to Educators and General Site Visitors who have previously visited our site or similar educational resource sites. This process uses third-party cookies or pixel technology to display ReadWorks banner advertisements to adult users on other websites across the internet.
This advertising is based on the user's non-PII browsing activity and is never linked to Student data or Student accounts.
Educators can manage preferences for this type of behavioral advertising through their browser’s privacy settings or via general industry opt-out mechanisms.
Selling, Renting, or Disclosing Data for Advertising
ReadWorks does not sell, rent, or trade Student User PII that we collect to third parties for their marketing or advertising purposes.
Shine the Light
California Civil Code Section 1798.83, known as the “Shine The Light” law, permits our Site users who are California residents to request and obtain from us a list of their personal information (if any) we disclosed to third parties for direct marketing purposes in the preceding calendar year and the names and addresses of those third parties. Requests may be made only once a year and are free of charge.
Responsible Use of Site
On-Site Communications
Educators can give Students feedback on their submitted work within the application.
No feature allows Students to communicate with any user other than the Educator account associated with the Student’s profile. The only information shared between Students and Educators in the feedback process is the Student’s name and the submitted work. This process supports safe and appropriate communication by limiting user interactions.
User data is not displayed in any public manner. Educator feedback is available in the app so long as the assignment and class remain active.
ReadWorks does not monitor, screen, or review user-created content (assignment submissions and feedback). The communication remains traceable as long as the assignment and class remain intact. To trace a piece of teacher feedback once a class or assignment is deleted or to report misuse/abuse of the limited Educator-to-Student communication channels, Educators, schools, and districts can submit a request to [email protected].
Blocking Content
ReadWorks’ texts are to be used at the Educator’s discretion. There is no ability for an Educator to remove a text from ReadWorks’ Educator Content Library.
If an Educator wishes to limit Student access to ReadWorks texts in the Student Library (a feature that promotes independent reading for Students in Digital Classes), they can learn how to do so here: https://help.readworks.org/article/148-how-can-i-hide-assigned-passages-in-the-student-library