Privacy Policy

Brivio ("Brivio," "we," "us," or "our") is an educational technology service provided by BRIVIO HQ LLC. Brivio helps world language teachers assign proficiency-based tasks, collect student responses, and track language growth over time.

This Privacy Policy describes how we collect, use, and protect personal information when you use Brivio. By accessing or using Brivio, you agree to the practices described in this policy. If you are a school or district deploying Brivio for students, your agreement to our Terms of Service also incorporates this Privacy Policy.

Effective date: June 22, 2026.

Brivio is designed for and used by:

• Teachers and school administrators who create and manage language learning tasks and review student work.
• Students who complete tasks, submit written or spoken responses, and receive feedback.
• Schools and districts that deploy Brivio as part of their educational program.

Brivio is not intended for use by children under 13 except through a school account where the school has obtained appropriate consent on behalf of parents or guardians under applicable law (see the FERPA, COPPA, and School Use section below).

Account information

When a teacher or school administrator creates an account, we collect name, email address, and password credentials (or OAuth tokens when signing in with Google).

Usage and activity data

We collect data about how Brivio is used — for example, tasks created, sessions assigned, and interactions with the platform interface — to operate and improve the service.

Device and technical data

We may collect standard server log information such as IP address, browser type, and operating system when you access the service. This data is used for security, debugging, and service reliability.

Communications

If you contact us by email or through the platform, we retain those communications to respond to your inquiry.

When a student joins a Brivio class, we collect the minimum information necessary to provide the service:

• Name (as entered by the student or assigned by the teacher/school).
• Email address (used for authentication).
• Student work — written and spoken responses to assigned tasks.
• Feedback records — teacher notes and rubric scores attached to student submissions.
• Progress data — proficiency evidence that teachers create to track language development over time.

Student data is collected and used solely for educational purposes. We do not collect information from students beyond what is necessary to provide the service.

What we access through Google sign-in

Brivio offers Google sign-in (OAuth 2.0) as a convenient authentication method. When you sign in with Google, Google provides us with your:

• Name (as set in your Google account).
• Email address (used as your Brivio account identifier).
• Google account profile photo (optional, used for display purposes only).

We request only the minimum OAuth scopes needed for authentication. We do not access your Gmail, Google Drive, Google Calendar, Google Contacts, or any other Google service data.

How we use Google user data

Google user data obtained through sign-in is used exclusively to:

• Create and authenticate your Brivio account.
• Display your name within the platform.
• Send service-related communications to your email address.

We do not use Google user data for advertising, profiling, or any purpose unrelated to providing the Brivio educational service.

How we store Google user data

Your name and email address obtained through Google sign-in are stored in Brivio's secure database, hosted on infrastructure provided by Wix.com (see Service Providers below). We retain this data for as long as your account is active. You may request deletion at any time.

Sharing of Google user data

We do not sell, rent, or share Google user data with third parties for advertising or commercial purposes. Google user data may be disclosed to service providers who assist in operating Brivio (see How We Share Information), strictly for the purpose of delivering the service, and bound by appropriate confidentiality obligations.

Revoking Google access

You may revoke Brivio's access to your Google account at any time through your Google Account security settings at myaccount.google.com/permissions. Revoking access will not immediately delete your Brivio account or data; to request deletion, contact us using the information in the Contact Us section.

Compliance with Google API policies

Brivio's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use the information we collect to:

• Operate and provide the Brivio service, including displaying assigned tasks, collecting student responses, and enabling teacher feedback.
• Maintain and improve the platform, including debugging, security monitoring, and developing new features.
• Communicate with teachers, school administrators, and users about their accounts and the service.
• Respond to inquiries, support requests, and legal obligations.
• Generate aggregated, de-identified analytics to understand how the service is used (never identifiable student data).

We do not use personal information — and specifically do not use student information — for targeted advertising, behavioral profiling, or any commercial purpose unrelated to the educational service.

We do not sell personal information.

We share information only in the following limited circumstances:

Within the school/class

Teachers can view the work and feedback records of students in their class. School administrators may have broader visibility depending on how Brivio is deployed. Students can see their own work and their teacher's feedback.

Service providers (subprocessors)

We use third-party services to operate Brivio. These providers process data on our behalf and are contractually required to protect it. Current service providers include:

• Wix.com Ltd. — platform infrastructure, authentication, and database hosting.
• Google LLC — Google sign-in / OAuth (see Google Sign-In section).
• OpenAI — limited AI model integration for optional instructional assistance features (no student work is used to train models).

Legal requirements

We may disclose information if required by law, court order, or to protect the safety of users or the public.

Business transitions

If Brivio is acquired or merges with another entity, we will notify affected schools and users, and any successor will be required to honor this Privacy Policy or obtain fresh consent.

We make the following commitments specifically regarding student data:

• We will not sell student personal information under any circumstances.
• We will not use student data to target students with advertising.
• We will not build advertising profiles of students.
• We will not share student information with third parties for commercial purposes.
• We will use student data only to provide and improve the Brivio educational service.
• We will not use student data for any purpose not authorized by the school, teacher, or student's parent/guardian.
• We will provide schools with the ability to request deletion of student data.
• We will maintain reasonable security safeguards appropriate to the sensitivity of the data.

FERPA (Family Educational Rights and Privacy Act)

When Brivio is deployed by a school or district, student records stored in Brivio are "education records" under FERPA. Brivio operates as a "school official" with a legitimate educational interest in those records for purposes of providing the service. Schools remain the responsible party for student education records and may request access to or deletion of records at any time.

COPPA (Children's Online Privacy Protection Act)

Brivio is not directed at children under 13 as a general consumer service. When schools deploy Brivio for students who may be under 13, Brivio relies on the school to obtain consent from parents or guardians consistent with COPPA's school-consent exception. Schools are responsible for ensuring that their use of Brivio complies with applicable laws, including obtaining any required parental consent.

If a parent or guardian believes their child under 13 has provided personal information to Brivio without school-facilitated consent, please contact us at michael@briviohq.com and we will promptly address the request.

School official / educational purpose

School administrators and teachers who deploy Brivio represent that they have the authority to do so within their institution and that their use complies with their school or district's policies regarding educational technology and student data.

We retain account information and associated data for as long as an account is active or as needed to provide the service. When a teacher or school requests deletion of a class or account, we will delete or de-identify the associated student data within a reasonable time, subject to legal hold obligations.

Schools and teachers may delete class data, student rosters, and associated submissions directly through the Brivio interface. For account-level deletion or data export requests, contact us at [Contact email].

We do not retain student data beyond what is necessary to provide the service to the school or as required by law.

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, and destruction. Our platform is hosted on infrastructure that maintains industry-standard security practices.

No system is perfectly secure. If you become aware of a potential security issue, please notify us immediately at [Contact email].

Schools, parents, guardians, and eligible students (18+ or as defined by applicable law) may request:

• Access to personal information or student education records maintained in Brivio.
• Correction of inaccurate information.
• Deletion of an account and associated data.
• A description of the categories of data we maintain.

To submit a request, contact us at [Contact email] with the subject line "Privacy Request." We will respond within 30 days. Schools may submit requests on behalf of enrolled students.

We may update this Privacy Policy from time to time. If we make material changes, we will notify schools and teachers by email or through a prominent notice in the platform before the changes take effect. Continued use of Brivio after the effective date of an updated policy constitutes acceptance of the changes.

If you have questions about this Privacy Policy or our data practices, please contact us: