VENDOR DATA SAFETY — TERMS OF SERVICE AND PRIVACY POLICY

Last Updated: September 29, 2026

Welcome to Vendor Data Safety. Please read these Terms of Service and Privacy Policy ("Terms") carefully before using our websites located at vendordatasafety.org and admin.vendordatasafety.org (collectively, the "Platform").

PART I: TERMS OF SERVICE

1. Acceptance of Terms

By accessing or using any part of the Platform, you agree to be bound by these Terms. If you do not agree to all of these Terms, you are prohibited from accessing the Platform.

2. Purpose & National Legal Safeguard Disclaimer

The Platform is a discussion concept and screening support tool designed to make EdTech vendor safety and evidence baselines visible. The visual labels, weighted risk matrix calculations, confidence scores, and safety spectrums (0-100) are screening signals only.

• Not Legal Advice: The Platform does not provide legal, data privacy, security maturity, or formal procurement determinations.
• No District Approval: Use of this tool does not replace or constitute formal regulatory, state-specific, or local school district legal counsel approvals. School districts across all jurisdictions must verify original vendor contracts, local state registry records, or the National Data Privacy Agreement (NDPA) filings independently before authorizing any vendor product for classroom use.

3. Account Registration & Vendor Profile Claims

To access certain admin areas or claim a vendor profile, you must register using a verifiable business or institutional email address. We reserve the right to revoke vendor profile access or verification links if business affiliation cannot be independently corroborated by an authorized district reviewer.

4. Intellectual Property and Proprietary Frameworks

Except for third-party materials and user-submitted content, Vendor Data Safety owns or licenses the Platform's original content, software code, text, graphics, visual labels, and the original selection and arrangement of those elements. This includes the original expression in the "Vendor progression ladder," screening-band displays, reporting matrices, confidence-score displays, and safety-spectrum displays. These materials are protected to the extent applicable by copyright, trademark, and other intellectual property laws. Nonpublic backend algorithms, database structures, and weighting parameters may also be protected as confidential information or trade secrets where maintained as such. This section does not claim exclusive rights in facts, ideas, concepts, methods of operation, or mathematical formulas.

5. Prohibited Uses and Anti-Cloning Restrictions

Except where permitted by applicable law or with our prior written authorization, you agree not to, and not to permit a third party acting on your behalf to:

• Copy, mirror, or substantially reproduce the Platform's original text, graphics, visual-label designs, screening-band presentation, or reporting matrix in a competing service.
• Reverse-engineer, decompile, disassemble, or attempt to obtain nonpublic source code, database structures, algorithmic parameters, or risk-matrix weighting logic.
• Use robots, spiders, crawlers, scrapers, or systematic manual extraction to harvest vendor profiles, metadata, scoring outputs, or evidence registers to build a competing index, service, or software tool.
• Frame or co-brand the Platform, or present its scoring outputs as your own, without authorization.
• Attempt to bypass Cloudflare Access security controls or brute-force admin authentication codes.
• Submit fraudulent, unverified, or misleading security attestations, SOC 2 statuses, or compliance framework claims.

6. Limitation of Liability

To the maximum extent permitted by law, Vendor Data Safety shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or institutional standing, arising out of or resting upon your reliance on any Platform scores or risk matrices.

PRIVACY POLICY

1. Information We Collect

We limit data collection to what is strictly necessary to run the Platform's screening capabilities:

• Account & Claim Information: Name, business email address, corporate title, vendor profile details, and organization website URL submitted during the vendor verification request.
• Log & Security Data: IP addresses, browser types, and access codes collected automatically via Cloudflare Access to protect our administration systems from unauthorized entry.

2. Compliance with Federal and State Student Privacy Frameworks

We explicitly recognize the strict data handling requirements governing educational technologies across the United States. The Platform acts exclusively as a business-to-business (B2B) screening index and metadata repository.

• No Commercial Data Monetization: We do not sell, rent, trade, or share user, district, or vendor contact data with third-party advertising grids or data brokers.
• Student Information: The Platform is designed to collect screening metadata, not student records. Users must not submit student names, identifiers, education records, or other student personal information. This includes information protected under the Family Educational Rights and Privacy Act (FERPA), the Children's Online Privacy Protection Act (COPPA), or state-level student privacy statutes (including but not limited to California's SOPIPA, New York's Ed Law 2-d, or Illinois' SOPPA).

3. Data Security & Storage

We utilize standard security mechanisms, including Cloudflare encryption-in-transit, isolated database environments, and secure access-link codes to prevent unauthorized access to your backend profile information.

4. Governing Law

These Terms and Privacy Policy shall be governed by and construed in accordance with the laws of the State of Massachusetts, without giving effect to any principles of conflicts of law.

5. Revisions to these Terms

We reserve the right to update or modify these Terms at any time without prior notice. Continued use of the Platform following any modifications constitutes your acceptance of the updated terms.