Security

Alludo’s physical infrastructure is hosted and managed within Amazon’s secure data centers and utilize the Amazon Web Service (AWS) technology. Amazon continually manages risk and undergoes recurring assessments to ensure compliance with industry standards. Amazon’s data center operations have been accredited under:

• ISO 27001
• SOC 1/SSAE 16/ISAE 3402 (Previously SAS 70 Type II)
• PCI Level 1
• FISMA Moderate
• Sarbanes-Oxley (SOX)

Alludo utilizes ISO 27001 and FISMA certified data centers managed by Amazon. Amazon has many years of experience in designing, constructing, and operating large-scale data centers. This experience has been applied to the AWS platform and infrastructure. AWS data centers are housed in nondescript facilities, and critical facilities have extensive setback and military grade perimeter control berms as well as other natural boundary protection. Physical access is strictly controlled both at the perimeter and at building ingress points by professional security staff utilizing video surveillance, state of the art intrusion detection systems, and other electronic means. Authorized staff must pass two-factor authentication no fewer than three times to access data center floors. All visitors and contractors are required to present identification and are signed in and continually escorted by authorized staff.

Amazon only provides data center access and information to employees who have a legitimate business need for such privileges. When an employee no longer has a business need for these privileges, his or her access is immediately revoked, even if they continue to be an employee of Amazon or Amazon Web Services. All physical and electronic access to data centers by Amazon employees is logged and audited routinely.

For additional information see: https://aws.amazon.com/security

Regulatory Compliance

Family Educational Rights Privacy Act (FERPA)

Given the sensitive nature of student and education data, Alludo understands that it is important to comply with the Federal FERPA regulation. Access to education data inside Alludo’s systems is tightly controlled and requires explicit written permission from a school or district before we will begin transferring information from their systems and before we begin transferring information to our partners.

Children's Online Privacy Protection Act (COPPA)

Alludo's products and services are COPPA compliant as well. Since we take steps to ensure that schools and districts have given explicit permission at every step in the process of connecting them to our partners, all Alludo education data has received consent for use.

Privacy

We understand that your privacy is of the utmost importance to you. Alludo is committed to protecting the privacy and confidential information of those who register.

Your Personal Information

When you sign in with us, Alludo logs you in automatically using your account with existing 3rd party providers such as Google and Office 365. This makes it easier for you as you don’t have to create and remember a login identifier.

We request basic personal information when you sign in to participate in Alludo, request information about services or correspond with us or engage in certain other activities through our Web pages. You make the decision whether to proceed with any activity that requests personal information. If you do not wish to provide the requested information, however, you may be unable to use our services.

We won’t sell your personal information to anyone. There might be one exception in the event Alludo itself is sold. In this case we would transfer your personal information along with our privacy policy to our buyers so that they could continue to provide the same great Alludo service.

Alludo may disclose to authorized law enforcement personnel the personal data from anyone who poses a threat. This might include those that are attempting to commit fraud or those who conduct activities that could bring harm to others. We assume that this is not you so please don’t worry.

Alludo has a sophisticated security program intended to keep the information stored in our system protected from unauthorized access. We store your information in a secure data center located in the United States.

We provide a number of ways for you to “opt-out” of receiving additional information from us. We may offer you these choices at the time you give us your information. Users who no longer wish to receive our communications may opt-out of receiving these communications by replying to an email communication and writing “unsubscribe” in the subject line in the email or by emailing us at support@alludolearning.com

When you visit app.alludolearning.com we may store information about your web session and assign you one or more ‘cookies’. Your browser will store these cookies on your computer in a small text file. For example, when you decide to login as a Alludo member, we store encrypted information in your browser so you don’t have to login on every page.

Permanent cookie files remain on your computer’s hard drive until you delete them manually using your browser or operating system software. You can enable your browser to refuse cookies, but doing so may disable access to some services and tools that we offer.

Our Web pages may contain links to other sites. We do not necessarily share personal information with those websites and are not responsible for their privacy practices. We encourage you to learn about the privacy policies of those companies.

To the extent that you do provide us with personal information, we wish to maintain accurate personal information. Where we collect Personal Information from you on the Web, our goal is to provide a means of contacting us should you need to review, update or correct that Information. If for any reason those means are unavailable or inaccessible, you may send updates and corrections about your personal information by email to support@alludolearning.com and we will make reasonable efforts to incorporate the changes in your personal information that we hold as soon as practicable

By using this Web site, you consent to the terms of our Privacy Policy. Alludo reserves the right to modify this privacy statement at any time. If there are material changes to this statement on how Alludo will use your personal information, we will prominently post these changes prior to implementing them. If you use our website after we post these changes, this indicates your acceptance of them. Regardless of later updates, we will follow the privacy practices described in this privacy statement at the time you provided us with your information.

Questions

Any questions about this Privacy Policy should be addressed to support@alludolearning.com

The effective date of this privacy policy is December 20,2018.