Curriculum Associates logo.
i-Readyi-Ready Teacher Login

Ellevation Platform Privacy Policy

Last updated: April 16, 2026

1. Who We Are and Scope of this Privacy Policy

Ellevation is an English language development (ELD) solution that unifies instructional planning tools, benchmark assessment insights and research-based instructional strategies in one platform. Our tools help Educators oversee program progress, drive meaningful language growth and improve outcomes for English language learner (EL) Students.  

The Ellevation Platform encompasses the platform for Educators of English language learners, including Ellevation Math® and Ellevation Strategies®, and a Ellevation Benchmark®, an assessment that is administered to Students. Ellevation Benchmark® tests the Student’s progress across reading, writing, listening, and speaking – so Educators can monitor growth, identify needs, and adjust instruction throughout the year.  

This Privacy Policy applies to all parts of the Ellevation Platform. We differentiate between the student-facing part of the Ellevation Platform, Benchmark, and the Educator-facing parts of the Ellevation Platform, wherever applicable. This Privacy Policy does not apply to the Ellevation website https://ellevationeducation.com, which is our corporate and marketing website not intended for Students. The Privacy Policy for the Ellevation website may be found here: https://ellevationeducation.com/privacy-policy.  

Ellevation Platform is operated by Ellevation Education, a business division of Curriculum Associates. For contact information for Ellevation Education, please see Section 17 of this Privacy Policy. 

2. Terms used in this Privacy Policy 

Personal Information means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to a particular individual or household, as such terms are defined under applicable U.S. federal and state privacy laws. 

Student means an individual who is enrolled in kindergarten through grade 12 (K‑12), or an equivalent level of education outside of the United States, at a School that uses the Ellevation Platform. 

Student Data means Personal Information about K‑12 Students that is processed by us on behalf of a School while providing the Ellevation Platform. Student Data includes information provided to us by a School, a Parent, or a Student, as well as information generated by or provided by a Student through their use of the Ellevation Platform (such as assessment responses, learning progress, and usage metadata). 

Education Records has the meaning set forth under the Family Educational Rights and Privacy Act (FERPA) and includes records that are directly related to a Student and maintained by a School, or by a party acting for the School. 

School means a K‑12 school, school district, local educational agency (LEA), diocese, or other educational institution or authority that contracts with Ellevation for, or otherwise subscribes to, the Ellevation Platform. 

Educator means authorized School personnel who access or use the Ellevation Platform, including teachers, instructional staff, instructional coaches, specialists, and administrators. 

Parent means a Student’s parent or legal guardian. 

De‑identified Data means information that has been derived from Personal Information and that cannot reasonably be used to identify, relate to, describe, be associated with, or be linked to a particular individual or Student. We may use De‑identified Data for product development, research, and improving educational outcomes, provided that we maintain appropriate technical and organizational safeguards and do not attempt to re‑identify such data. 

Aggregate Data means information that has been derived from Personal Information and combined into groups or categories such that it cannot reasonably be used to identify any specific individual, Student, or School. 

3. Our Role with Schools

When a School uses the Ellevation Platform, Ellevation acts as a service provider and a “school official” with a legitimate educational interest, as that term is defined under the Family Educational Rights and Privacy Act (FERPA). Ellevation operates under the School’s direct control with respect to the use and maintenance of Education Records and processes Student Data solely on behalf of the School for authorized educational purposes. 

Ellevation uses Student Data only as necessary to provide the Ellevation Platform to the School and shares Student Data with third‑party service providers only as needed to perform services on Ellevation’s behalf and in accordance with applicable law.

4. Information We Collect from and about Students and Educators

Ellevation collects only the information that is reasonably necessary for Students and Educators to access the Ellevation Platform and for Schools to receive the educational services they have contracted for. For account provisioning, this information generally includes a Student’s first and last name and associated School. Additional information may be processed depending on how a School configures and uses the Platform. 

Students interact directly only with Ellevation Benchmark and Ellevation Math. In Ellevation Benchmark, Students respond to assessment activities, which may include multiple‑choice items (such as listening and reading), free‑text responses (such as describing an image), and audio recordings captured through the device microphone (speaking). In Ellevation Math, Students may submit text or audio responses as they progress through learning modules. 

All other Student information within the Ellevation Platform is provided by or on behalf of the Student’s School and is not collected directly from Students. Information generated through Ellevation Benchmark and Ellevation Math is used solely for the School’s educational purposes and for the benefit of the Student, such as reviewing Student progress and supporting instructional decision‑making. The Ellevation Platform does not permit Students to publicly share information. 

Schools may choose to upload additional optional Student information to support their educational programs. This information may include sensitive categories such as race, gender, sex, disability status, medical or physical conditions, and demographic information, including English language proficiency designation and immigrant or newcomer status. The collection and use of this optional information is determined by the School and is used only to support educational planning, personalization, and instructional effectiveness. 

Data Category Specific Data Fields Purpose of Collection
Identifiers First and last name; Student ID number (our internal identifier); Student School ID; state or local District ID; email address; username and password (usernames and passwords are used for Ellevation Math only) To create and manage Student accounts, authenticate users, and support School and district reporting. For Ellevation Math, we provide Schools with a username and password for each Student user, and Students are required to create a new password upon first login.
Contact Information Student email address; Student physical address; Parent email address; Student phone number  Student email addresses are collected only when a Student uses Google single sign-on (SSO). Student physical addresses are used to generate mailing labels for translated notices that Schools are required to provide to families in connection with educational programs (such as placement, exit, or continuation notices). Parent contact information is used to support School communications and required notifications.
Sensitive Information Race; gender; sex; disability status; medical or physical conditions; IEP/504 data; SIFE status; homeless status; homebound status; dropout status Collected only if provided by the School, and used to meet applicable state and federal reporting requirements and to support required accommodations and instructional services.
Student Responses Test scores; assignments; learning responses; program participation; testing accommodations; classroom modifications; goals; Educator comments To evaluate Student progress, support instructional planning, personalize learning experiences, and enable educational analytics at the direction of the School.
Demographic Information Date of birth; age; place of birth; grade level; native language; nationality; English language proficiency designation (e.g. EL/LEP status); immigrant or newcomer designation (e.g., NOM) To support grade placement, assess English language proficiency, and meet applicable reporting and compliance obligations. 
Parent Information Parent or Emergency contact name; email address; phone number; workplace contact information; interpreter-need indicators; relationship to Student; consent status To deliver required notices, support consent workflows, and maintain emergency contact information at the direction of the School.
Educator Information Educator's first name and last name, staff ID number; email address; courses taught; scheduling information; Educator comments To create and manage Educator accounts, support platform administration and rostering. Educator comments entered into shared instructional materials may be visible to other authorized users within the Ellevation Platform.
Technical and Device Information IP address; device type; operating system; app interactions; log and usage data  To maintain platform security, detect and prevent fraud, support internal system operations, and improve performance and reliability of the platform.
Customer Support Name; email address; message content Educators may contact Ellevation through the Ellevation Platform while logged in. The Platform does not provide a comparable direct support communication feature for Students.

5. How We Use Information

We use the collected information, including Student Data, to provide, operate, and support the Ellevation Platform on behalf of School Customers, including to maintain the Platform’s security, perform system maintenance, troubleshoot issues, generate instructional insights for Educators using the Platform, communicate with Educators, and comply with applicable laws and regulations. 

To support the internal operations of the Platform, and as permissible under applicable laws and regulations, we may use data, including Student Data if necessary, to improve, maintain, and enhance the functionality, effectiveness, and security of the Platform, including through analytics, testing, and research to improve our product. Such use is limited to purposes related to the operation and improvement of the Platform and is not conducted for advertising or marketing purposes. 

With the School Customer’s written consent and as permissible under applicable laws and regulations, we may also use aggregated or de‑identified data (as defined above) for analytics or research purposes to improve educational outcomes of Students. 

In the event that we receive a court order or law enforcement request (including but not limited to an administrative subpoena or judicial warrant) for access to, use of, or inspection of School’s data, including School’s Student Personal Information, wherever legally permissible we will not voluntarily disclose such data or act directly on such request, but will instead promptly refer the request to the School. To the extent we are legally required to provide the information requested prior to or in addition to such referral, wherever legally permissible we will promptly notify the School of the request and of Ellevation’s intent to comply.

6. Information Use Restrictions

We do not sell or rent Student Data, Educator data or any other information that we collect. We do not permit targeted advertising or behavioral profiling of Students. We use Student Data solely for educational purposes as authorized by Schools. The School retains control of all Student Data. We take Student privacy seriously and apply principles of data minimization, privacy by design, and responsible data‑handling practices. 

7. With Whom We Share Information

Ellevation does not disclose Student Personal Information from Education Records to third parties except as authorized by the School Customer or as permitted by applicable law. The School Customer retains control over all Student Data. 

Ellevation may disclose Personal Information, including persistent identifiers to its subcontractors and service providers solely to the extent necessary to provide, operate, and support the Ellevation Platform. Such subcontractors and service providers act only on Ellevation’s behalf as data processors, are contractually bound to maintain the confidentiality of the information and are subject to equivalent restrictions on use and re‑disclosure. 

Ellevation may also disclose Personal Information if required to do so by a judicial order or lawfully issued subpoena. In such cases, Ellevation will, to the extent permitted by law, provide the School Customer with advance notice of the request prior to complying. 

We also share Student Data as necessary to provide educational services through the Ellevation Platform, including with the Student’s School and authorized School personnel. 

We may also disclose information in connection with a merger, acquisition, financing, or sale of company assets, provided that any such disclosure remains subject to appropriate confidentiality and data‑protection obligations. 

8. Service Providers that Process Student Data

We use service providers to support the hosting, security, authentication, analytics, and diagnostics of the Ellevation Platform. These service providers may process Student Data and Student persistent identifiers solely on our behalf and under our instructions. 

All such service providers act as processors pursuant to written agreements that require confidentiality, appropriate security measures, and the deletion or return of Student Data upon request or upon termination of services. Service providers are prohibited from using Student Data for advertising, marketing, profiling, or any independent commercial purposes. 

A current list of service providers that process Student Data is available here.

9. Service Providers that Process Educator data

We use third‑party service providers and tools to support the operation, security, analytics, user authentication, customer support, and reliability of the Ellevation Platform, as well as to provide training and support resources for Educators.

A current list of third parties, including the purpose for which each is used, is available here. 

Ellevation is committed to protecting the privacy of all Students. We require verifiable parental or guardian consent for every Student, regardless of age (under 13 or 13+).

Ellevation Bechmark, our Student-facing product, is only available in the School setting. Schools serve as the Parents’ agents in the notice and consent process and consent on behalf of Parents. Student Data is always used in the educational context only. Ellevation supports Schools in providing necessary information about their Student Data practices to Parents. 

 If Ellevation becomes aware that a Student account was created without the required Parental consent, we will delete the account and associated information.  

11. Student and Parental Rights

Parents can request a description of the specific types or categories of Personal Information collected by Ellevation from or about their Student, a deletion of Student’s Personal Information, or that Ellevation stops collecting Personal Information from or about their Student.

To exercise these rights, Parents are asked to contact their School. Ellevation acts under the direct control of the School as the FERPA “School Official”. Ellevation does not act on direct Parental deletion requests unless explicitly directed to do so by the Student’s School, consistent with FERPA and standard best practices in the industry. 

Ellevation aids Schools in their response to Parental requests and forwards any requests it receives to the appropriate School. 

Note that if the Personal Information collection is integral to the educational experience provided to the Student, Student may lose access to the Platform.  

12. Educator Rights

Educators may have certain rights with respect to their Personal Information under applicable U.S. state privacy laws, including the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CPRA), and similar laws in other states. These rights are subject to applicable exceptions and limitations. 

Depending on the user’s state of residence, these rights may include the right to:

  • Request access to the categories and specific pieces of Personal Information we have collected about the individual; 
  • Request correction of inaccurate Personal Information; 
  • Request deletion of Personal Information, subject to legal, contractual, and service‑related obligations; 
  • Request that we limit the use or disclosure of sensitive Personal Information, where applicable; 
  • Opt out of certain disclosures of Personal Information, where required by law; and 
  • Not be discriminated against for exercising applicable privacy rights.

Ellevation collects and processes Educator Personal Information primarily to provide services on behalf of Schools and acts as a service provider or processor with respect to such information. As a result, certain requests may need to be coordinated with the Educator’s School or employer, and some information may not be deleted or modified where retention is required to provide the service, comply with legal obligations, maintain security, or support contractual requirements. 

Educators may submit privacy rights requests by contacting Ellevation using the contact information provided in this Privacy Policy. We may take reasonable steps to verify the identity of the requestor and to confirm the scope of the request. Where appropriate, we may direct the request to the relevant School or process the request in accordance with their instructions. 

Authorized agents may submit requests on behalf of an Educator where permitted by law, subject to verification of authorization. 

13. Data Retention and Deletion

Ellevation collects and processes Student information solely on behalf of and under the direction of the Student’s School. Consistent with the Children’s Online Privacy Protection Act (COPPA), Ellevation retains Student information only for as long as reasonably necessary to provide the educational services requested by the School and to meet applicable legal, reporting, security, and operational requirements. Ellevation does not retain Student information longer than needed for these purposes and does not use Student information for commercial purposes. 

The retention periods described below reflect instructional, operational, and security needs. Where a School requires a shorter retention period, the School‑directed timeline prevails. If a contract with a School Customer expires, Ellevation will, in accordance with the contract, return or delete and destroy all Student Data at the School Customer’s election within 90 days of contract expiration. 

For purposes of this section, each “course term” refers to the academic year of the School that corresponds to one grade. An account is considered Inactive after 12 consecutive months without login activity, unless the School Customer specifies a shorter threshold. 

Data Category Why We Collect It Why We Keep It  How Long We Keep It
Account and Access Information To create and manage accounts and allow secure access to the Platform Needed to authenticate users and maintain active accounts  Kept while the account is active; deleted within 12 months after account Inactivity or earlier at the School’s direction
Contact and Communication Information To support School‑directed communications, account access, and consent workflows Needed to deliver notices, enable single sign‑on, and support account recovery Kept while the account is active; deleted within 12 months after account Inactivity or earlier at the School’s direction
Educational and Academic Information To evaluate Student progress and support instruction Needed to provide educational tools, scoring, feedback, and progress monitoring Kept while the account is active; deleted within 12 months after account Inactivity or earlier at the School’s direction
Student Responses To support assessments and provide instructional feedback Needed only for scoring, review, and instructional use Kept while the account is active; deleted within 12 months after account Inactivity or earlier at the School’s direction
Demographic and Program Information, including Sensitive Information To support educational programs, placement, and reporting Needed only while the School uses these features for educational purposes Kept while the account is active; deleted within 12 months after account Inactivity or earlier at the School’s direction
Technical and Device Information To keep the Platform secure, prevent misuse, and improve performance Needed for security monitoring and system reliability Retained only as long as necessary to support security, operational integrity, and legal or regulatory requirements, and deleted or anonymized when no longer required for those purposes.

 

14. Security

We maintain a comprehensive written information security program designed to protect Student and Educator information in accordance with FERPA, COPPA, and applicable U.S. state student and children’s privacy laws. 

Data is encrypted in transit and at rest using modern, industry‑standard secure connection and storage methods. Our cryptographic practices are reviewed regularly and updated as needed to align with current best practices. 

Access to Personal Information is limited through strong authentication measures, least‑privilege permissions, and explicit authorization for support access. System activity is logged, monitored, and reviewed to help detect and investigate potential security issues. Our infrastructure is hosted in secure, segregated cloud environments and uses zero‑trust access controls, continuous monitoring, tamper‑resistant logging, and intrusion detection measures. 

Our written security program includes designated security leadership, periodic risk assessments, documented administrative, technical, and physical safeguards, and ongoing testing and monitoring, with updates performed at least annually. Independent assurance measures, such as penetration testing, red‑team exercises, and vulnerability disclosure programs, help strengthen our security controls. 

Employees and contractors with access to Personal Information undergo background checks, receive regular security and privacy training, and must comply with device security requirements. We maintain incident response procedures with on‑call availability to support prompt investigation, containment, and notification where required by law. Before engaging service providers, we assess their security practices and require written commitments to protect personal information.

15. Data Breach Notification

If Personal Information is compromised or reasonably suspected to be compromised, we will promptly investigate and contain the incident and, where required, notify affected parties without undue delay in accordance with applicable U.S. state and federal laws and our incident‑response procedures. Where Student Data is involved, we will notify the relevant School in accordance with applicable law.

16. Updates to this Privacy Policy

We may modify this Privacy Policy at any time to reflect changes in our Services or legal requirements. We will post the updated version and revise the "Last Updated" date at the top of this page. For material changes that substantively affect the collection, use, or disclosure of Student Data, we will provide prior notice to the School via email, a prominent notification within the Ellevation Platform and, where required by law, obtain any legally required consents.

17. Contact Information

Ellevation, LLC
50 Milk St, 20th Floor
Boston, MA 02109 

Email address: info@ellevationeducation.com
Phone number: 617‑307‑5755