Privacy Policy

Last Updated: November 25, 2025

Playbl, Inc. (“Playbl,” “we,” “us,” or “our”) is committed to respecting your privacy. This Privacy Policy (the “Privacy Policy”) explains our practices regarding the collection, use, and disclosure of information that you (“you” or “users”) may provide to us through your use of our website located at (https://playbl.com/), any social media pages that we may make available, and any other products or services that link to this Privacy Policy (collectively, our “Website”).

If you have entered into a separate agreement with us, that separate agreement shall control, and only those terms within this Privacy Policy that do not conflict with such separate agreement shall apply. This Privacy Policy does not cover information we receive from third parties. If you have any questions regarding this Privacy Policy, please contact us at hello@playbl.com.

By accessing the Website, you agree to be bound by this Privacy Policy. If you do not agree to the terms of this Privacy Policy, please do not use the Website. Each time you use the Website, the current version of this Privacy Policy will apply. Accordingly, when you use the Website, you should check the date of this Privacy Policy (which appears at the top) and review any changes since you last reviewed the Privacy Policy.

This Privacy Policy covers both our general Website and our school-authorized educational portal (https://learn.playbl.com/). Certain parts of this Privacy Policy apply only to Playbl’s school-authorized educational services and not to general marketing features of our public website. When students access the Playbl portal through a School Account, additional FERPA protections apply.

This Privacy Policy publicly discloses all material information required by state student-data-privacy laws, as relevant.

Information We Collect

We collect two types of information from users of our Website: “Personal Information,” which is information that you provide that can be used to identify you (such as your name, email address, etc.), and “Aggregate Information,” which is information that cannot be used to identify you (such as frequency of visits to the Website, browser type, etc.).

Information Collected from Students and Educators in School Accounts

Playbl integrates with school-authorized roster and identity providers such as Google Classroom, ClassLink, and OneRoster systems. These integrations supply school-rostered user information.

Playbl collects only the minimum amount of identifiable Student Data necessary to deliver school-authorized educational services.

Summary of Personal Information We Collect, Why We Collect It, and How We Use It

Playbl does not collect or store parent or guardian contact information.

INFORMATION YOU PROVIDE TO US

We collect Personal Information that you voluntarily provide to us when you use our Website. For example, you may provide us with your contact information such as your email address, first name and last name, phone number, company name, or other Personal Information when you choose to submit such information to us through email, an online form (if we make such feature available), or other method (such as contacting us through our “Contact Us” Website feature).

INFORMATION WE AUTOMATICALLY COLLECT

When you use our Website, we may automatically receive and collect information about you and your device. This information may include the following:

• Information about your device, such as the operating system, hardware, system version, Internet Protocol (IP) address, device ID, and device language.
• The specific actions that you take when you use our Website, including but not limited to the pages and screens that you view or visit, search terms that you enter, and how you interact with our Website.
• The time, frequency, connection type, and duration of your use of our Website.
• Information regarding your interaction with email messages, for example, whether you opened, clicked on, or forwarded the email message.
• Identifiers associated with cookies or other technologies that may uniquely identify your device or browser (as further described below).
• Pages you visited before or after navigating to our Website.

EMPLOYMENT

If we have collected your Personal Information through our “Careers” page in response to a job opening, you are giving us permission to use and retain your information for the purpose of evaluating your application for employment consideration for the specific position that you applied to, as well as other roles at Playbl. This Personal Information may be processed and stored by a third party talent tracking solution provider as well as with vendors, consultants, and other service providers who need access to such information to carry out work relating to the recruitment process on our behalf. If you apply to Playbl through a third party platform that requires that you create an account, such as through LinkedIn, the privacy practices of those platforms will be governed by their own policies, and not by this Privacy Policy.

COLLECTION OF PERSONAL INFORMATION BY THIRD PARTIES

Some links on our Website may redirect you to third-party websites that we do not operate, which may include social media features, such as LinkedIn buttons or links. The privacy practices of those websites will be governed by their own policies. We make no representation or warranty as to the privacy practices or policies of any third parties, including the providers of third-party applications. If you are submitting information to any such third-party through our Website, you should review and understand that party’s applicable policies, including their privacy policies, before providing your information to the third-party.

AGGREGATE INFORMATION COLLECTED

Aggregate Information is information that does not identify you. Aggregate Information may be collected when you use our Website, independent of any information you voluntarily enter. Additionally, we may use one or more processes to de-identify information that contains Personal Information, such that only Aggregate Information remains. We may collect, use, store, and transfer Aggregate Information without restriction.

USE OF “COOKIES”

Like most websites, our Website may use “cookies.” Cookies are alphanumeric identifiers that we transfer to your computer’s hard drive through your web browser to help us identify you when you come to our Website. You have choices with respect to cookies. By modifying your browser preferences, you have the choice to accept all cookies, to be notified when a cookie is set, or to reject all cookies. If you choose to reject all cookies you may be unable to use those aspects of our Website that require registration in order to participate. You can learn more about cookies and how they work at allaboutcookies.org. You can always disable cookies through your browser settings. Doing so, however, may disable certain features on our Website. You can opt-out from third-party cookies that are used for advertising purposes on the NAI website.

Although we do our best to honor the privacy preferences of our visitors, we are not able to respond to Do Not Track signals from your browser.

How we Use Your Information

In general, we collect information and Personal Information from you so that we can provide our Website, operate our business, and provide information that you request from us. This includes the following uses and purposes:

• Provide, operate, improve, maintain, and protect our Website.
• Provide you with technical and other support.
• Send administrative updates and service-related communications.
• Provide secure access to assigned educational content.
• Improve system performance and educational effectiveness.
• Conduct research and analysis, and monitor and analyze trends and usage.
• Enhance or improve user experience, our business, and our Website, including the safety and security thereof.
• Communicate with you and respond to inquiries.
• Consider your application for employment.
• As necessary to comply with any applicable law, regulation, subpoena, legal process, or governmental request.
• Enforce contracts, including investigation of potential violations thereof.
• Detect, prevent, or otherwise address fraud, security or technical issues.
• Protect against harm to the rights, property or safety of Playbl, our users, or the public as required or permitted by law.

Playbl processes student data solely as a “school official” under FERPA, and only for authorized educational purposes on behalf of the school or district. We do not use student data for advertising, marketing, or profiling.

No advertising or behavioral targeting is performed with student data.

Cookies are used only for essential functionality and analytics, not advertising, when students use school accounts.

Sharing of Personal Information with Third Parties

We do not rent or sell your Personal Information.

Like most companies, we share information, including Personal Information, in certain circumstances with third parties through the operation of our Website and our business. Below we explain when that happens.

SERVICE PROVIDERS

We may transfer Personal Information to third parties for the purpose of providing the Website or operating our business. For example, we may transfer your Personal Information to third-party service providers to assist with providing the Website and other services, and to communicate with you about current or future offerings.

SUBPROCESSORS WHO RECEIVE STUDENT DATA (School Accounts)

Playbl uses a small number of carefully vetted subprocessors who assist us in providing our educational services. These subprocessors may process Student Data solely to support Playbl’s operations and are contractually prohibited from using Student Data for any other purpose. Subprocessors do not have any property, licensing, or ownership rights in Student Data.

We currently use the following subprocessors:

• Render.com (app hosting & database)
• Amazon Web Services (database backups, storage, roster sync)
• Mailgun (transactional emails, e.g. login links)
• SolarWinds (web access logs, security monitoring)

Subprocessors used by Playbl do not acquire any ownership, licensing, or other rights to Student Data. All Student Data remains under the control of the originating school or district at all times.

REQUIRED TRANSFERS

We may also transfer your Personal Information to third parties under the following circumstances: (i) to comply with a legal requirement, law, subpoena, judicial proceeding, court order, governmental request, or legal process; (ii) to investigate a possible crime, such as fraud or identity theft; (iii) in connection with the sale, purchase, merger, asset sale, financing, reorganization, liquidation or dissolution of Playbl, including in connection with the evaluation thereof; (iv) when we believe it is necessary to protect the rights, property, or safety of Playbl or other persons, or (v) as otherwise required or permitted by law, including any contractual obligations of Playbl.

AS DIRECTED BY YOU AND WITH YOUR CONSENT

Except as otherwise provided in this Privacy Policy, we share Personal Information with companies, organizations or individuals outside of Playbl only at your direction or when we have your consent to do so.

Opt-Out

If you no longer wish to receive our marketing and promotional communications, you may opt-out by following the instructions included in each communication.

Data Retention

We retain student data only for the duration of the school or district’s agreement and for the minimum period necessary to support reporting and contractual obligations.

Server logs, audit logs, and database backups are retained for a minimum of 90 days to support security monitoring, troubleshooting, and data integrity.

Data Deletion and District Control (School Accounts)

Schools and districts may request deletion of student data at any time. Playbl deletes active records within 30 days of a verified request. System logs and encrypted backups are retained for minimum security purposes as described in our Data Security Policy.

Deletion requests must come from a district administrator or data privacy officer. Playbl cannot act on deletion requests from individual parents or students unless the request is submitted and verified by the school or district.

Deletion requests apply to active and live databases. For disaster recovery purposes, Playbl maintains encrypted backup snapshots which may contain copies of data deleted from the live system. Backup snapshots are not accessed or restored except for system recovery. If a recovery event requires restoring from a snapshot, Playbl will re-apply all prior deletion requests.

Student and Parent Access Rights

For school-managed accounts, access to Student Data is controlled by the school or district. Parents and eligible students may request access to, correction of, or deletion of Student Data by contacting their school or district, who will then relay verified requests to Playbl as needed.

Playbl does not require parents or students to waive any privacy rights as a condition of accessing our educational services.

Children’s Privacy (School Accounts)

Playbl’s educational services may be used by students, including children under the age of 13, when such use is authorized by their school or district. When students access Playbl through school-issued accounts, Playbl processes Student Data solely as a “school official” under the Family Educational Rights and Privacy Act (FERPA) and for authorized educational purposes only.

Because student access occurs through their school, Playbl relies on schools to provide any required parental notices or consents under the Children’s Online Privacy Protection Act (COPPA). Playbl does not knowingly collect Personal Information directly from children on our public marketing website, and children are not intended to create accounts or submit information to Playbl outside of their school-managed environment.

Parents and eligible students who wish to access, review, or request correction or deletion of Student Data should contact their school or district, who will verify the request and provide instructions to Playbl as needed. Playbl does not act on direct requests from parents or students unless directed by the school.

Playbl does not use Student Data, including data from children under 13, for advertising, behavioral targeting, or any purpose not authorized by the school or district.

For New York LEAs, Playbl complies with Education Law 2-d and each district’s Parents’ Bill of Rights for Data Security and Privacy. These obligations are incorporated by reference into Playbl’s Data Security and Privacy Plan.

How Do We Protect Your Information

We take the security of your Personal Information very seriously. We use reasonable administrative, physical, and technical safeguards to secure the Personal Information you share with us. Despite these safeguards and our additional efforts to secure your information, we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your Personal Information.

How We Protect Student Data (School Accounts)

We take privacy and security extremely seriously and maintain administrative, technical, and physical safeguards that meet or exceed applicable federal and state requirements, including FERPA, COPPA, state student-data-privacy laws, and industry frameworks such as NIST SP 800-53.

Our safeguards include:

• Student data is stored and processed exclusively in the United States
• Encryption at rest (AES‑256) and in transit (TLS 1.2+)
• Strict controls on server & data access
• Data security training requirements for staff
• Staff data access is restricted to a small number of authorized Playbl personnel
• Role-based access controls
• SSO is required for admin accounts, and encouraged for all accounts where supported
• Tracking and reviewing sensitive events in an audit log
• Regular vulnerability scans and security updates

Security Incidents and Breach Notification

If we confirm a security incident that involves unauthorized access to Student Data or Personal Information, we will:

• Notify the affected school or district of the breach within the required timeframe under applicable law or contract.
• Cooperate with the district’s investigation and remediation requirements.
• Follow the district’s instructions regarding notifications to parents or regulators.
• Not notify parents or regulators directly unless we are expressly instructed by the district or required by law.

Privacy Policy Updates

Each time you use our Website the current version of this Privacy Policy will apply. When you use our Website, you should check the date of this Privacy Policy (which appears at the top of the Privacy Policy) and review any changes since the last version. Our business changes frequently and this Privacy Policy is subject to change from time to time.

If we make any material changes to this Privacy Policy that affect how we collect, use, or disclose Student Data, Playbl will provide advance written notice to all affected schools and districts before the changes take effect.

How to Contact Us

To contact us with your questions or comments regarding this Privacy Policy or our privacy practices in general, please email us at hello@playbl.com.