Effective and last updated August 23, 2026
We may collect the categories below when you visit our site, request information, onboard a school, or use EOS. We collect only information reasonably necessary and proportionate for the purposes described here.
| Category | Examples | Purpose | Retention |
|---|---|---|---|
| Identifiers/contact data | Name, email, phone, account identifiers | Respond to requests, create accounts, support, security, communications | For the customer relationship and thereafter as reasonably needed for legal, security, dispute, and recordkeeping purposes |
| Commercial/account data | Plan, transactions, service history, school account details | Provide and administer EOS, billing, support, records | For the relationship and applicable legal/financial recordkeeping periods |
| Internet/electronic activity | IP address, browser/device data, logs, site/service activity | Operate, secure, troubleshoot and improve EOS | Only as reasonably needed for operational, security and legal purposes |
| Customer-provided school data | Staff, student, family, schedule, attendance, membership, communications and migration data | Provide EOS at the school customer's direction | According to the customer relationship, customer instructions and applicable obligations |
| Payment-related data | Transaction and payment-status information | Process and document transactions | As needed for transactions, accounting, disputes and legal obligations |
| Communications | Messages, support requests, consent records | Support, fulfill requests, document preferences and consent | As reasonably needed for support, compliance and recordkeeping |
EOS does not use or disclose sensitive personal information for purposes that would require a California right to limit its use. If that changes, we will provide any legally required notice and choice.
We receive information directly from you; from the school or organization that uses EOS; automatically from devices and systems used to access EOS; and from service providers or integrations used at a customer's direction.
We use information to provide and configure EOS, migrate data at a customer's direction, authenticate users, process transactions, provide support, communicate about requested services, maintain records, detect and prevent fraud or abuse, secure and troubleshoot the service, improve EOS, and comply with law.
We may disclose the categories described above to service providers and contractors that help us host databases and infrastructure, process payments, deliver email or text messages, provide security, and operate requested features. They may process information only for permitted business purposes subject to applicable contractual and legal restrictions. We may also disclose information when required by law, to protect rights and safety, or in connection with a merger, financing, acquisition, or sale of business assets subject to applicable law.
EOS does not sell personal information for money or other valuable consideration and does not share personal information for cross-context behavioral advertising as those terms are defined by California law. Because we do not engage in those practices, there is currently no sale/sharing opt-out to exercise. We also do not knowingly sell or share the personal information of consumers under 16.
If the California Consumer Privacy Act, as amended by the CPRA, applies to your information, you may have the right to know/access personal information we have collected about you, request deletion, request correction of inaccurate personal information, and receive information about categories of personal information collected, sources, purposes, and disclosures. You also have the right not to receive discriminatory treatment for exercising applicable privacy rights. We will honor requests to limit sensitive-personal-information use when that right applies to our practices.
To exercise a right, use our Privacy Request form. We will confirm receipt and respond within the time required by applicable law. We may need to verify your identity using information reasonably related to the request. If we cannot verify a request or an exception applies, we will explain the result where required.
A California resident may use an authorized agent to submit a request. We may require proof that the agent is authorized and may ask the resident to verify their identity or confirm the authorization directly, as permitted by law.
If you have a question about a privacy request or believe a request was handled incorrectly, submit a new request using the Privacy Request form and select “Other privacy question,” referencing the earlier request.
Marketing text consent is optional and is not a condition of purchase. We send marketing texts only where we have the required consent. Message frequency may vary; message and data rates may apply. You can withdraw consent by replying STOP or otherwise telling us to stop. Transactional or service messages may be sent as permitted by law.
The EOS marketing site and owner onboarding are directed to adults and are not intended for children. Schools may use EOS to process student information, including information about minors. In that context, EOS acts at the direction of the school customer, and the school is responsible for determining the notices, permissions, and consents required for its collection and use of student information. EOS does not knowingly use school-provided student data for cross-context behavioral advertising or sell it.
We seek to collect, use and retain personal information only as reasonably necessary and proportionate to the stated purposes. Retention depends on the nature of the information, the customer relationship, operational needs, security and fraud prevention, disputes, contractual requirements, and legal or accounting obligations. We use technical and organizational safeguards intended to protect information, but no internet service can guarantee absolute security.
EOS may use cookies, local storage, session storage, authentication tokens and similar technologies that are necessary to operate requested features, protect accounts, remember privacy choices, and preserve onboarding progress. The public EOS marketing pages do not currently run optional advertising pixels or optional analytics cookies. If optional analytics or marketing technologies are added, our privacy-choice controls are designed to keep them off unless they are permitted by the visitor’s choice and applicable law. See our Cookie & Browser Storage Notice for current details.
If a browser sends a recognized Global Privacy Control signal, EOS treats it as a direction to keep optional analytics and marketing technologies off in that browser. EOS does not currently sell personal information or share personal information for cross-context behavioral advertising.
Some browsers also send a legacy “Do Not Track” signal. There is no single industry standard governing that signal. Because EOS does not currently perform cross-site behavioral tracking on its public marketing pages, we do not change that practice based on the legacy Do Not Track signal. If our tracking practices change, we will update this policy and our controls before using optional technologies where consent or opt-out rights apply.
We may update this policy as EOS changes. The date above identifies the current version. If required, we will provide additional notice before a material change takes effect.
Questions or requests can be submitted through the Privacy Request form.