Join Today

Privacy Policy

1. Introduction

Suntara ("Suntara,""we,""us," or "our") operates a teaching assistant platform that helps educators generate personalized, standards-aligned assignments using student data, including grades and Individualized Education Programs (IEPs). We are committed to protecting the privacy of students and educators who use our platform.

This Privacy Policy describes how we collect, use, store, and disclose information in connection with our services and explains our compliance with the Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. § 1232g, and its implementing regulations at 34 C.F.R. Part 99, as well as New York Education Law § 2-d and its implementing regulations at 8 N.Y.C.R.R. Part 121.

2. Our Role Under FERPA and NY Education Law 2-d

Suntara provides services to schools and educational institutions. When we receive, process, or store student education records on behalf of a school, district, or educator, we act as a "school official" or "legitimate educational interest" service provider as defined under FERPA, and as a "third-party contractor" as defined under New York Education Law § 2-d.

We do not own or control education records — we process them solely at the direction of the educational institution or authorized educator who has provided them, and only for the purposes for which they were disclosed.

Schools and educational agencies are responsible for ensuring that their use of Suntara complies with applicable FERPA and NY Ed Law 2-d requirements, including executing appropriate data privacy agreements, obtaining necessary consents, and making required disclosures to students and parents.

3. New York Education Law 2-d: Parents' Bill of Rights

In accordance with New York Education Law § 2-d, Suntara affirms the following rights of parents and eligible students with respect to student data:

  • The right to inspect and review the complete contents of their child's education record maintained by Suntara or the educational agency
  • The right to have education records of their child protected from unauthorized disclosure
  • The right to have any complaints about potential violations of Ed Law 2-d addressed by filing a complaint with the New York State Education Department (NYSED)
  • The right to be notified in accordance with applicable law in the event of an unauthorized release of student data

Suntara will enter into a Data Privacy Agreement (DPA) with any New York educational agency prior to receiving student data. That DPA will conform to the requirements of 8 N.Y.C.R.R. Part 121 and will be appended to or incorporated into any service agreement.

4. Information We Collect

Information Educators Provide

When educators register and use Suntara, we collect account information including name, email address, phone number, and school name. Beyond that, the information we receive is entirely dependent on what each educator chooses to provide. Educators may optionally upload or enter any combination of the following:

  • Class rosters, student names, and grade levels
  • Lesson plans uploaded or created on the platform
  • Student education records such as IEPs, grades, assessment results, and other gradebook documents
  • Assignment history and content generated through the platform

Educators are not required to provide all of the above in order to use Suntara, and may choose to use the platform with limited or no student data. The personalization and features available may vary depending on what information is provided.

Automatically Collected Information

When you use our platform, we automatically collect:

  • Log data such as IP addresses, browser type, pages visited, and time spent on the platform
  • Device information and identifiers
  • Cookies and similar tracking technologies used to maintain sessions and improve functionality

Student Data

Any student data that an educator chooses to upload to Suntara — which may include IEPs, grades, reflections, and other education records — is treated as education records under FERPA and as "protected information" under NY Education Law § 2-d. This includes "personally identifiable information" (PII) as defined under both laws. Such data is processed solely for the purpose of generating personalized assignments and related educational services, and for no other purpose.

5. How We Use Information

We use the information we collect to:

  • Provide, maintain, and improve the Suntara platform and its features
  • Generate personalized, standards-aligned assignments based on student data and lesson plans
  • Store and organize class, student, and assignment data within educator accounts
  • Communicate with educators about their accounts, updates, and platform improvements
  • Ensure the security and integrity of the platform
  • Comply with legal obligations

Prohibited Uses of Student Data Under NY Education Law 2-d

In compliance with NY Education Law § 2-d, Suntara will not:

  • Sell student PII or use it for any commercial purpose unrelated to providing the contracted educational service
  • Use student PII to engage in targeted advertising to students or their families
  • Use student PII to develop a profile of a student for any purpose other than providing the contracted educational service
  • Disclose student PII to any third party except as permitted by FERPA, NY Ed Law 2-d, and the applicable Data Privacy Agreement
  • Retain student PII beyond the term of the service agreement except as required by law or as directed by the educational agency

Educator Account Information

Information that educators voluntarily provide when creating and managing their Suntara account — such as their name, email address, phone numbers, school names, and lesson plans — is used solely to improve the platform. This information is not sold, rented, or shared with third parties for commercial purposes. While general educator account information of this nature is not the primary subject of NY Education Law § 2-d's teacher protections (which are focused on APPR data), we apply the same principles of data minimization and confidentiality to all information on our platform.

6. How We Share Information

We Do Not Sell Student Data. Suntara does not sell, rent, or trade student education records or any personally identifiable information derived from such records, consistent with FERPA and NY Education Law § 2-d.

We Do Not Share Student Data with Third Parties for Their Own Purposes. Student education records are never shared with third-party advertisers, data brokers, or unrelated commercial entities.

Limited Disclosures Permitted Under FERPA and NY Ed Law 2-d

We may disclose education records only in the following circumstances:

  • With the consent of an eligible student or parent/guardian, as applicable under FERPA and NY Ed Law 2-d
  • To authorized school officials at the institution with a legitimate educational interest
  • To subcontractors who assist in delivering our platform, strictly under written agreements that: (a) prohibit use of student PII for any purpose other than providing services to Suntara; (b) require subcontractors to comply with NY Ed Law 2-d and FERPA; (c) require notification to Suntara in the event of a data breach; and (d) require deletion or return of student PII upon termination of the subcontract
  • In response to a lawfully issued judicial order or subpoena, in which case we will make reasonable efforts to notify the school or educator prior to disclosure unless prohibited by law
  • As otherwise permitted by FERPA and NY Education Law § 2-d

Subcontractor Disclosure

Consistent with 8 N.Y.C.R.R. § 121.6, Suntara will publish and maintain a list of authorized subcontractors that may have access to student PII in connection with the services we provide. This list is available upon request and will be included in or appended to any Data Privacy Agreement with a New York educational agency.

De-identified or Aggregated Data

We may use and disclose de-identified, aggregated, or anonymized data — from which all personally identifiable information has been removed in accordance with the standards set forth under FERPA and NY Ed Law 2-d — for research, product improvement, and reporting purposes. Such data cannot reasonably be used to identify any individual student.

7. Data Security

We implement administrative, technical, and physical safeguards designed to protect student education records and other personal information from unauthorized access, disclosure, alteration, or destruction, consistent with the data security requirements of FERPA and 8 N.Y.C.R.R. § 121.8. These measures include:

  • Encryption of data in transit and at rest
  • Access controls limiting who within Suntara can access education records
  • Secure authentication for educator accounts
  • Employee training on data privacy and security obligations under FERPA and NY Ed Law 2-d
  • Regular security assessments and monitoring
  • Incident response procedures designed to detect, contain, and remediate unauthorized access

No data security measures are 100% foolproof. In the event of a breach or unauthorized release of student PII, we will notify affected educational agencies in accordance with NY Education Law § 2-d and applicable breach notification law, and will cooperate with the educational agency's obligations to notify parents and NYSED.

8. Breach Notification

In the event of an unauthorized release, disclosure, or acquisition of student PII ("data breach"), Suntara will:

  • Notify the affected educational agency in the most expedient manner possible and without unreasonable delay
  • Provide the educational agency with the information necessary for it to notify parents and eligible students as required under NY Education Law § 2-d and NY General Business Law § 899-aa
  • Cooperate with the educational agency's response and any required reporting to NYSED
  • Document the breach and maintain records of our response

Educational agencies are responsible for notifying parents, eligible students, and NYSED as required by NY Ed Law 2-d following receipt of notice from Suntara.

9. Data Retention and Deletion

We retain education records and account data for as long as an educator's account is active and as necessary to provide services, consistent with the terms of any applicable Data Privacy Agreement.

Upon expiration or termination of a service agreement, or upon written request from a New York educational agency, Suntara will return or securely destroy student PII in accordance with 8 N.Y.C.R.R. § 121.9, unless retention is required by law. Educators may also delete their account data at any time through their account settings or by contacting us.

10. FERPA Rights of Parents and Eligible Students

FERPA grants parents and eligible students (students aged 18 or older, or those attending post-secondary institutions) certain rights with respect to education records. These rights are exercised through the educational institution, not directly through Suntara. Such rights include:

  • The right to inspect and review education records
  • The right to request amendment of inaccurate or misleading records
  • The right to consent to disclosures of education records, except to the extent FERPA authorizes disclosure without consent
  • The right to file a complaint with the U.S. Department of Education regarding an alleged FERPA violation

Parents and eligible students should direct requests regarding these rights to the school, district, or educator who uses Suntara on their behalf.

11. NY Education Law 2-d: How to File a Complaint

Parents, eligible students, and educational agency employees who believe that student PII has been released in violation of NY Education Law § 2-d may file a complaint with the New York State Education Department. Information about filing a complaint is available at:

New York State Education Department
89 Washington Avenue
Albany, New York 12234
www.nysed.gov

Complaints may also be directed to Suntara using the contact information in Section 15 below. We will investigate and respond to complaints in a timely manner.

12. Children's Privacy

Suntara is a platform for educators, not for direct use by students. We do not knowingly collect personal information directly from students under the age of 13. Student data we receive is provided by educators and processed solely for educational purposes. If you believe a child has provided personal information to us directly without appropriate authorization, please contact us immediately using the information in the "Contact Us" section below.

13. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our platform, maintain user sessions, and improve functionality. We do not use tracking technologies to build advertising profiles from student data or to track students outside of our platform, consistent with the prohibitions on commercial use of student data under NY Education Law § 2-d.

You may configure your browser to refuse cookies, though doing so may affect the functionality of the platform.

14. Third-Party Services and Subcontractors

Suntara may use third-party infrastructure and technology providers (such as hosting services) to operate the platform. Any subcontractor that may access student PII is required to:

  • Enter into a written agreement with Suntara imposing data privacy and security obligations consistent with NY Education Law § 2-d and FERPA
  • Use student PII only to provide the services for which they were engaged
  • Implement reasonable data security protections
  • Notify Suntara promptly of any breach or unauthorized disclosure of student PII
  • Return or destroy student PII upon termination of the subcontract

A list of subcontractors authorized to access student PII is available upon request and will be provided to New York educational agencies in connection with any Data Privacy Agreement.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify educators via email or a prominent notice on the platform prior to the changes taking effect. The updated policy will include a revised effective date. Any changes that affect the processing of student PII will be reflected in updated Data Privacy Agreements with affected educational agencies. Continued use of Suntara after any changes constitutes acceptance of the updated policy.

16. Contact Us

If you have questions about this Privacy Policy, your education records, our FERPA compliance practices, or our compliance with NY Education Law § 2-d, please contact us at:

Suntara, LLC
www.suntara.io
Email: privacy@suntara.io

For questions specifically related to NY Education Law § 2-d and the rights of parents or eligible students, you may also contact the New York State Education Department at www.nysed.gov.

Home Privacy Policy Terms & Conditions

© 2026 Suntara. All rights reserved.