Privacy Policy

Last updated September 2026.

Two different roles, and why it matters to you

Eduworks handles personal information in two distinct capacities, and your rights differ between them:

• As a controller — for the people we deal with directly: website visitors, prospects, and the administrators and billing contacts of customer accounts. This policy covers that.
• As a processor — for the content our customers put into their CADRE instances, which routinely includes information about their learners and employees. There, the customer decides what is collected and why; we act on their instructions. That relationship is governed by the Data Processing Agreement.

If you are a learner or employee whose records are in a CADRE instance, your organization is the right first point of contact, not us. We will help them respond, but we cannot act on their data without their instruction.

What we collect as a controller

• Account and billing information — name, work email, organization, and billing details, collected when a subscription is created. Payment card details go directly to our payment processor; we do not receive or store card numbers.
• Sign-in identity — the name and email address released by your identity provider when you sign in. We never receive your password.
• Support correspondence — what you send us when you ask for help.
• Service logs — records of requests to the account portal, including IP address and timestamp, kept to operate the service securely and to investigate faults and abuse.
• Website analytics — basic usage information about this marketing site.

Why we use it

• To provide, provision and support the service you have subscribed to.
• To bill you and keep the financial records the law requires us to keep.
• To tell you about things that affect your account: your instance being ready, a backup or restore, a change to who can administer the account, a security or configuration change, or a billing problem. These are service messages and you cannot unsubscribe from them while you hold an account.
• To secure the platform — detecting abuse, investigating incidents, and keeping an audit record of administrative access.
• To improve the service, using aggregated and de-identified information.

Where the law requires a lawful basis, ours is performance of our contract with you, our legitimate interest in operating and securing the service, and compliance with legal obligations.

Who we share it with

We do not sell personal information, and we do not share it for advertising. We share it with the subprocessors listed on the Trust Center, each only to the extent needed to do its job, and with professional advisers or authorities where the law requires. If Eduworks is ever involved in a merger or acquisition, information may transfer as part of that transaction; we will give notice before it becomes subject to a materially different policy.

Where it is held, and for how long

Data is held in the United States. We keep account and billing records for as long as you are a customer and afterwards for the period our legal and accounting obligations require. Service logs are kept for a limited operational period and then discarded.

Content inside a CADRE instance is retained under the customer's own instruction. Note that ending a subscription preserves the instance's data by default rather than deleting it, so that reactivation restores it. The customer controls this: the account page offers both an election to delete everything when the subscription ends and an immediate permanent deletion once it has been cancelled. Either destroys the instance storage and all stored backups irreversibly.

Your choices

Depending on where you live you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to complain to a supervisory authority. To exercise any of these, email privacy@eduworks.com. We will not treat you differently for asking.

Children

The service is sold to organizations for workforce and professional training. It is not directed to children, and we do not knowingly collect their information as a controller. Where a customer uses CADRE in an educational setting involving students, that customer is the controller and is responsible for the consents and protections its jurisdiction requires. [FERPA and state student-privacy terms to be confirmed by counsel before selling into education.]

Changes and contact

We will post changes here and update the date above. For anything in this policy, contact privacy@eduworks.com or write to Eduworks Corporation, 14300 SE 1st St., Suite 110, Vancouver, WA 98684.