Remind complies with all applicable privacy laws and regulations that apply to individuals of the EU, EEA, Switzerland, or the UK. Remind may lawfully transfer EU, EEA, UK or Swiss individuals' Personal Data, as that term is defined in the EU's General Data Protection Regulation ("GDPR"). Remind complies with the principles of the EU-US Privacy Shield Framework and the Swiss-US Privacy Shield Framework as set forth by the US Department of Commerce regarding the collection, use, and retention of Personal Information transferred from European Union and Switzerland to the United States, respectively. Remind has certified to the Department of Commerce that it adheres to the Privacy Shield Principles and also applies those to the transfers of personal data of individuals from the EEA and UK to the US for processing. If there is any conflict between the terms in this Privacy Policy and the Privacy Shield Principles, the Privacy Shield Principles shall govern. To learn more about the Privacy Shield program, and to view Remind's certification page, please visit https://www.privacyshield.gov/.

In compliance with the EU-US and Swiss-US Privacy Shield Principles and by extending these Principles to transfers of the personal data of residents of the EEA and UK to the US, Remind commits to resolve complaints about your privacy and our collection or use of your Personal Information. Pursuant to the Privacy Shield, Remind remains liable for the transfer of personal data to third parties acting as our agents unless we can prove we were not a party to the events giving rise to the damages. European Union or Swiss individuals with inquiries or complaints regarding this privacy policy should first contact Remind at: [email protected]. Remind is subject to the jurisdiction of the US Federal Trade Commission for any alleged failure of Remind to meet our privacy commitments. You may contact Remind's Data Privacy Officer at any time at [email protected].

Remind has further committed to refer unresolved privacy complaints under the Privacy Shield Principles to an independent dispute resolution mechanism, the BBB EU PRIVACY SHIELD, operated by BBB National Programs. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit https://bbbprograms.org/privacy-shield-complaints/ for more information and to file a complaint. This service is provided free of charge to you.

If your Privacy Shield complaint remains unresolved by the above methods, there is a possibility, under certain conditions, to invoke binding arbitration for complaints regarding Privacy Shield compliance not resolved by any of the other Privacy Shield mechanisms. See Annex I for additional information.

We have included some information below related to the Children's Online Privacy and Protection Act ("COPPA"). COPPA requires that online service providers obtain parental consent and provide notice before they knowingly collect personally identifiable information online from children who are under 13 ("under-13 users"). Remind typically relies on a teacher, school, or school district to obtain verifiable parental consent to provide our services to under-13 users. Pursuant to COPPA, we may collect an under-13 user's name (first and last name), date of birth, email address and/or telephone number in order to operate and provide the Services, and we may collect the under-13 user's parent's (or legal guardian's) email address in order to provide notice to the child's parent or guardian that we may contact the under-13 user for the purpose of allowing access to and use of the Services. For Remind Tutoring, in addition to the information we typically collect, we will also collect a child's voice recording in order to provide live tutoring sessions. If Remind does not receive the parent's email address within a reasonable time period, the under-13 user will not be able to send or receive any messages and his/her Personal Information will be deleted. If an under-13 user's Remind account is inactive for at least twelve months (meaning, the account has not sent or received a message through the Services in that period of time), Remind's policy is to delete the Personal Information. If we learn we have collected Personal Information from an under-13 user other than pursuant to the above, or if we learn that an under-13 user has provided us Personal Information beyond what we request from him or her, we will delete that information as quickly as possible after we have identified it. If you believe that an under-13 user may have provided us Personal Information in violation of this paragraph, please contact us at rmd.me/help.

In order for an under-13 user to gain access to additional features or services, Remind may employ one or more methods approved by the Federal Trade Commission for verifying parental consent.

While COPPA requires Remind to follow these procedures for under-13 users in the United States, Remind employs the same process to obtain consent for all users under 13 years old.

We receive and store any information you knowingly enter on the Services, whether via computer, mobile phone, other wireless device, or that you provide to us in any other way. With your express consent, you may be able to upload, import or sync contact information from your mobile device (for example, from your address book) to Remind. This information may include Personal Information such as your name, phone numbers, email addresses, photographs, and, in certain circumstances, your school and/or district, class, group, grades and report card, video that may contain your voice and image, club, team or Organization affiliation (which may be used to validate your account or to provide you with notifications via the Services from a teacher, school and/or district, class, group, club, team or affiliated Organization ("Notifications"), or any other information necessary for us to provide our Services. For under-13 users, we collect a name (first and last name), date of birth, district, school, class, grades and report card, video that may contain that child’s voice and image, email address and/or telephone number, and that under-13 user's parent's email address to provide notice to the parent regarding the Services. You may choose not to provide us with certain information, but then you may not be able to take advantage of many of our features. We use the Personal Information we receive about you to provide you with the Services and also for purposes such as:

attempting to authenticate your identity,
responding to your requests for certain information,
customizing the features that we make available to you,
suggesting relevant services or products for you to use,
improving the Services and internal operations (including troubleshooting, testing, and analyzing usage),
communicating with you about new features
and, most importantly, protecting our users, sending emergency messages we are directed to send to you, and working towards making sure our Services are safer and more secure.
You may modify or remove your Personal Information at any time by logging into your account and accessing features to edit your classes, groups, and/or account information. If an Organizer or a Verified Administrator uploads or adds information about you to your account, you may have to contact and work directly with that Organizer or Verified Administrator in order to modify or remove that information.

We receive and store certain types of information whenever you use the Services. Remind automatically receives and records information on our server logs from your browser including Remind cookie information, the page you requested, and other usage information such as your activity on the Services, the numbers and frequency of visitors to our site and its components (similar to TV ratings that indicate how many people watched a particular show). None of this information constitutes Personal Information. Certain information that is collected automatically, such as device ID, IP address and phone number, and browsing information that is associated with a user will be treated as Personal Information. In addition, for users who are students, teachers or administrators of schools or districts that contract with Remind for Remind Hub, Remind may, with the consent of the Verified Administrator in the school or district, obtain information from a third party Student Information System (SIS) provider, which will include basic directory and class roster information, attendance information, class grades and report cards, and similar information that is Personal Information.

We also may provide to our partners aggregate information derived from automatically collected information about how our users, collectively, use our site. We may share this type of non-personally identifiable, aggregated statistical data so that our partners also understand how often people use their services as well as Remind.

When users use our mobile application, we automatically collect the Internet Protocol (IP) address, device ID, device type, and what operating system (OS) the user is running.

We collect users' IP addresses whenever they use our mobile application, which provides us with a coarse approximation of the user's location at the city level in order for Remind to, for example:

• provide Organizers with a geo-specific long-code (i.e., generic phone number with a local area code),
• support features such as school selection, and
• enable other internal measurement and Services features.

We also may, with your express consent, request more specific location information in order to provide you with more relevant information (such as nearby classes or relevant groups that you may subscribe to). We will not store or track your device location on an ongoing basis or without your permission. We may also collect location-based information from users as part of providing the Services and in order to comply with applicable laws and regulations for the user's jurisdiction.

While Remind collects and temporarily stores phone numbers of first-time users under 13 years of age, we will delete the information collected if parental consent is not obtained. If the underage user has signed up for the Services through SMS and then downloaded Remind's mobile application, Remind will have and may use the underage user's phone number:

• to merge the under-13 user's accounts,
• to continue SMS delivery services, and/or
• as a back-up method of notification.
  

If you provide us your email address or phone number, Remind may send you administrative messages (such as updates, notifications, newsletters, and other news) relating to the Services or to respond to communications from you. Additionally, Remind may contact you or provide you notification of new or enhanced products and services offered by Remind. Remind may also send you emergency messages when we are directed to do so by a teacher, school, district or government agency. By maintaining a Remind account and/or not opting out of receiving information from Remind, you acknowledge and agree that you may receive e-mail or SMS text messages on your phone or mobile device from other Remind users, from Remind and/or its agents (as described below) and other individuals or companies if you choose to use services or products that they offer. Receiving these messages may cause you to incur usage charges or other fees or costs in accordance with your wireless or data service plan. Any and all such charges, fees, or costs are your sole responsibility. You should consult with your wireless carrier to determine what rates, charges, fees, or costs may apply. We may receive a confirmation when you open an email from us if your computer supports this type of program. Communications of this type are also sent to under-13 users and the parental consent to use this service also covers these messages. If you no longer wish to receive administrative email messages from Remind you may opt-out by following the unsubscribe link located at the bottom of each message or by contacting us at rmd.me/help. Please note that if you do not want to receive legal notices from us, such as this Privacy Policy, those legal notices will still govern your use of the Services, and you are responsible for reviewing the legal notices for changes.

To permanently cease receiving SMS text messages, please text @STOPALL:

• in reply to any SMS message from that class or group,
• to a Remind long-code (a phone number issued by Remind), or
• in the US, to the Remind short code 81010.

For more information see this link.

If you are located in Canada, you may opt out of receiving marketing messages (including text messages and emails); however, you may still receive text message and email communications that are necessary for the Services or otherwise exempt from anti-spam laws.

Cookies are small files that websites place on your computer as you browse the web. Like many websites, Remind uses cookies to discover how people are using our Services and to make them work better.

A pixel is a small amount of code on a web page or in an email notification. As many services do, we (or our agents) may use pixels to learn whether you've interacted with certain web or email content on our Services. This helps us measure and improve our Services and personalize your experience on Remind.

Local storage is an industry-standard technology that allows a website or application to store information locally on your computer or mobile device. We use local storage to customize what we show you based on your past interactions with Remind.

Remind uses these technologies to deliver, measure, and improve our Services in various ways. These uses generally fall into one of the following categories:

Authentication and security

• To log you into Remind.
• To protect your security.
• To help us detect and fight spam, abuse, and other activities that violate Remind's policies.

For example, these technologies help authenticate your access to Remind and prevent unauthorized parties from accessing your account.

Preferences

To remember information about your browser and your preferences.

For example, cookies may help us remember your preferred language or country that you are in. We can then provide you with Remind content in your preferred language without having to ask you each time you visit Remind. We can also customize content based on your country, such as disabling SMS, or to withhold certain content based on applicable local laws.

Analytics and research

To help us improve and understand how people use our Services.

For example, cookies help us test different versions of our services to see which particular features or content users prefer or to share information about our services to you as you interact online across the internet. We might also optimize and improve your experience on Remind by using cookies to see how you interact with our services, such as when and how often you use them and what links you click on. We may use Google Analytics to assist us with this.

Most browsers have an option for turning off the cookie feature, which will prevent your browser from accepting new cookies, as well as (depending on the sophistication of your browser software) allowing you to decide on acceptance of each new cookie in a variety of ways. We strongly recommend that you leave the cookies activated, however, because you will not be able to log in or use many of the Services' features without cookies enabled. Note that the use of cookies by anyone other than Remind is not covered by our privacy policy. We do not have access or control over those cookies.

Users may have the choice of associating their account with a school or other Organization (such as a team or group). This may be required (for example) for teachers and may be either required or strongly encouraged for other types of Organizers in order to use certain features of the Services. Other users may attend a school or school district that contracts with Remind for use of Remind Hub, and this may automatically create an account for all the students, teachers, parents and relevant administrators of that class, school, or district and associate their accounts with the class, school, or district.

By associating your account with an Organization, you acknowledge and agree that a Verified Administrator may be able to view your User Submissions (including your Personal Information and messaging content). In addition, Verified Administrators may be able to make administrative changes to your account, such as removing you from classes and/or groups, sending messages on your behalf, and more. In addition, depending upon the preferences of the Verified Administrator and the Organization, Remind may be used as a school directory and information such as your name, classes or groups may be made available to people in your Organization.

If you are an Organizer affiliated with an Organization, you acknowledge that Remind may enable other users who are associated with the same Organization to contact you -- for example, teachers, students, or parents who are associated with your Organization may communicate with you. Participants may also contact each other (in addition to viewing User Submissions). Remind does not display in a user's account profile personal contact information of the user to any other users without prior consent.

Remind relies on its users to provide accurate Personal Information in order to provide our Services. We try our best to protect that information and make sure that we are responsible in handling, disclosing, and retaining your data. We neither rent nor sell your Personal Information to anyone. If other Remind users, other individuals or companies whose products you choose to use, have access to your Personal Information (for example, your messaging content), they may use and share that information in ways that Remind cannot, and does not, control. Remind shares your Personal Information in personally identifiable form as described below.

Agents and third party service providers

Advertising is not permitted on the Services, and we do not share information for third-party advertising. However, we employ other companies to perform tasks on our behalf and help us provide certain features of our Services, and may need to share your information with those companies in order to provide our Services to you. We do not permit any of these companies to use your personal information for any purpose that is inconsistent with your use of Remind, or to ensure high quality services for Remind for your benefit, or to protect your personal information. Some examples of services for which we use agents include sending email or SMS, analyzing data, providing user services, and searching for any security vulnerabilities. These agents may use Personal Information we share with them, for example, to assist us, to provide their services to you and/or us, and to measure and improve the performance of their services. Please see here for further information about the agents we use as part of the Services (including any of their specific terms or policies that are applicable and that may govern use of your information). Remind has reviewed the privacy policies and practices of these agents and third party service providers in order to verify that they are capable of complying with Remind's policies and practices, including those related to the collection, use, transfer, confidentiality, security and integrity of user data. As a condition of contracting with Remind, those agents and third-party service providers committed, in writing, to providing at least equivalent privacy and security for your data as does Remind. Finally, these companies are prohibited from accessing your personal information to: (i) create a profile of you for their use; (ii) enhance their data; or (iii) engage in social advertising or targeted advertising.

Additional Information for EU, EEA or UK Individuals Regarding Transfers to Third Parties Governed by GDPR

If you are from the EU, EEA or UK and one of our agents or third-party service providers fails to uphold these standards with respect to your Personal Information that we transferred to that agent or provider on your behalf, that agent or third-party service provider may be liable for any injury as required by GDPR.

Additional Information for EU, EEA, UK and Swiss Individuals Regarding Transfers to Third Parties Governed by Privacy Shield

In cases of onward transfer of data of EU, EEA, UK or Swiss individuals to third-party agents or service providers in the US received through the use of Standard Contractual Clauses and consistent with the principles of the EU-US or Swiss-US Privacy Shield, Remind is potentially liable. Remind will work with you to resolve any such failure and, if the provider is no longer able to resolve the matter, Remind will resolve the matter and may bear responsibility if there is any liability. We will review those agents' policies and practices at least annually, but you should review them as well. You hereby consent to our sharing of information about you (including, in some cases, Personal Information) for such purposes.

We may release Personal Information when we believe in good faith that release is necessary to:

• comply with the law or national security request (for example, responding to a subpoena or other legal process);
• enforce or apply our Terms of Service and other agreements; or
• protect the rights, property, or safety of Remind, our employees, our users, or others. This includes, without limitation, exchanging information with other companies and organizations for fraud protection or responding to government requests.

We also may be required to disclose an individual's Personal Information in response to a lawful request by public authorities, including to meet national security or law enforcement requirements.

The security of Personal Information in the school environment is a top priority for Remind.

Remind has protections in place to enhance our users' security, and routinely update these protections. We have administrative, technical, and physical safeguards designed to protect against unauthorized use, disclosure of or access to Personal Information. In particular:

• Our engineering team is dedicated to keeping your Personal Information secure.
• We work with industry-leading auditors to review and guide our security policies and procedures.
• Remind stores its data within an AWS region that is FedRAMP compliant.
• Remind's main database and all backups are encrypted at rest.
• The AWS cloud infrastructure has been designed and managed in compliance with regulations, standards, and best-practices, including HIPAA, SOC 1/SSAE 16/ISAE 3402 (formerly SAS70), SOC 2, SOC 3, PCI DSS Level 1, ISO 27001, FedRAMP, DIACAP and FISMA, ITAR, FIPS 140-2, CSA, and MPAA.
• Low-level auditing software is run on all production systems to record potentially malicious actions that may take place.
• Increased focus for all software companies on advancing cybersecurity has led Remind to undertake industry standard software security measures. For example, Remind runs periodic penetration tests and a bug bounty program with trusted, vetted and verified security researchers then logs and resolves discovered issues.
• All Remind clients use TLS/SSL when communicating with our servers.
• We utilize a bug bounty program under the guidance of HackerOne and its vetted, software security experts to help us identify and quickly resolve any previously unknown software bugs.

Remind endeavors to protect user information and to ensure that user account information is kept private; however, we cannot guarantee the security of user account information. Unauthorized entry or use, hardware or software failure, and other factors may compromise the security of user information at any time. If Remind knows or becomes aware of a security breach of its users' personally identifiable information, Remind will notify affected users as required by applicable laws and may post a notice on the Services as required by applicable law(s). For additional information about the security measures we use in connection with the Services, please contact us at [email protected].

The Services contain links to other sites or services. Remind is not responsible for the privacy policies and/or practices on other sites. When linking to another site you should read the privacy policy stated on that site. This Privacy Policy only governs information collected on the Services.

You may be able to access certain third party products through Remind's Services to share content to or from another website or app. These are not Remind products; they are another company's and we do not control their privacy and security practices so only you can decide whether to connect your Remind account with another company's services.

Payment processing services on Remind are provided by Stripe and are subject to the Stripe Connected Account Agreement, which includes the Stripe Terms of Service (collectively, the "Stripe Services Agreement"). By agreeing to the Agreement, you agree to be bound by the Stripe Services Agreement, which Stripe may modify from time to time. As a condition of Remind enabling payment processing services through Stripe, you agree to provide Remind with accurate and complete information about you and your entity (if applicable), and you authorize Remind to share it and transaction information related to your use of the payment processing services provided by Stripe.

The third party products you choose to use on Remind may need to collect and use your Personal Information in order to provide their services to you; in order to use any products or services offered by anyone other than Remind, you must review and agree to their specific terms and privacy policies.

Our Services may also include access to, among others:

• Workplace productivity apps that allow for the sharing of content or video or screen sharing, such as but not limited to, Google Docs, Microsoft Office, Dropbox, or Quip; or
• Social media features, such as the Facebook "Like" button, and widgets, such as the "Share this" button or interactive mini-programs that run on our site.

These features may collect your IP address, which page you are visiting on our site, and may set a cookie to enable the feature to function properly. Social media features and widgets are either hosted by another company or hosted directly on our Services. When connecting your Remind account with any third party site you may benefit from the ability to communicate across sites. Although a class owner may share their roster with a third party service to send content to the students and parents in a class, the class owner may not share phone numbers, email addresses or similar information without the express consent of the user themselves or the Verified Administrator. Furthermore under 13 year old students will never have their external contact points shared. Remind will allow Hub organizations to grant students younger than 13 the ability to reply to messages within their organization(s), not simply to receive these messages. Your interactions with these features are governed by the privacy policy of the company providing it.

You may choose to use products offered by another individual or company while using Remind. Since these products are offered by companies other than Remind (and are not covered by our Privacy Policy), you will need to review and agree to their terms before using their products.

Remind acknowledges that individuals from the EU, EEA, UK and various states in the United States have the right to access the Personal Information that we maintain about them. Any individual who seeks access to, or who seeks to correct, amend, or delete inaccurate data, or to port their data to another, similar service should direct their query to [email protected] or [email protected]. If requested to remove data, we will respond within a reasonable timeframe.

As a Remind account holder, you have access to view and update the following information at your discretion:

• information in your user account (such as your email address),
• Participant names,
• user preferences, and
• content in your account (note that once provided, you may not be able to edit or remove certain types of content, such as messages)

This list may change as the Services change.

You also have the right to request access to the Personal Information we hold about you in order to verify the Personal Information we have collected in respect of you and to have a general account of our uses of that Personal Information. Upon receipt of your written request to our Privacy Team (contact information below), Remind will provide you with a copy of your Personal Information although in certain limited circumstances, we may not be able to make all relevant Personal Information available to you such as where that information also pertains to another individual or as otherwise required or permitted by law. In such circumstances We will provide reasons for the denial to you upon request. We will endeavor to deal with all requests for access and modifications in a timely manner.

You can always opt not to disclose information, even though it may be needed to take advantage of certain Remind features.

You are able to add or update certain information on pages, such as those listed in the "What Information Can I Access" section above. When you update information, however, we often maintain a copy of the unrevised information in our records. Certain types of communication you send to other users cannot be removed, such as message content.

You may request deletion of your Remind account by accessing your account online or contacting us at rmd.me/help or [email protected]. Note, if you are a Participant or Organizer and you request to delete your account, Remind may notify the Organization and the Organizer(s) of the classes and/or groups you are affiliated with of your deletion request. Please note that certain information may remain in our records, server logs and archives after deletion of your account. Remind retains this information for purposes such as diagnosing problems with the service and for auditing legal investigations, but reserves the right to delete this information in accordance with its standard business practices in effect from time to time. Further, information and other content you have provided may remain visible elsewhere to the extent such content was copied or stored by other users.

For under age users with an account that is inactive for twelve months or more (meaning the account has not received a message through the Services in that time), Remind's policy is to disable access to Personal Information associated with that account.

If your or your child's Personal Information changes, or you no longer desire to use our Services, or you would like to rescind permission for Remind to further contact your child, you may review, correct, update, delete inaccuracies, request deletion of your child's information, or amend it by logging into your account and making those changes or contacting us at rmd.me/help or [email protected]. We will respond to your request as quickly as possible.

We will retain your or your child's information for as long as your account is active or as needed to provide the Services. If you wish to cancel your or your child's account or request that we no longer use your information to provide Services, contact us at rmd.me/help. Note we will retain and use information, for example, to comply with our audit and legal obligations, to resolve disputes, and to enforce our agreements.

If the information you are requesting to delete was uploaded or otherwise provided by a Verified Administrator of an Organization to which you belong (for example, through CSV or SIS integration), then you must request deletion of that information directly from the Organization. Remind may inform the Organizer(s) and/or Organization(s) you are affiliated with when you request to delete your Remind account.

If your school or school district has paid for Remind Hub and the school or district chooses to end their contract with Remind for Remind Hub, you will be able to use Remind Chat. If your school or district subsequently requests termination of all services and deletion of accounts, Remind will offer you the choice whether to continue using Remind, and if so, provide you with control over your Remind account. If in that instance you as a user wish to delete your service we will honor that request.

California Residents - Exercise of Rights

If you reside in California you are entitled to exercise certain rights outlined in the California Consumer Protection Act. You may access the information we collect about you, modify it or delete it by contacting us at rmd.me/help or [email protected]. Remind will not and may not discriminate against you for exercising these rights.

We may update this Privacy Policy to reflect changes to our information practices. If we make any material changes we will notify you by email (using the e-mail address specified in your account) or some other means prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices.

If we make material changes to the types of Personal Information we collect or how we use Personal Information collected from under-13 users we will notify parents by email in order to obtain verifiable parental consent for the new uses of the child's Personal Information.

If you have any questions or concerns regarding privacy when using Remind's Services, please contact us and send us a detailed message at the contact information below. We will make every effort to resolve your concerns.

Name
Privacy Team

Contact
[email protected]

‍

12935 Alcosta Blvd.

Unit 1077

San Ramon, CA 94583

‍

If you are a school or district interested in upgrading to Remind Hub, please visit remind.com/plans.