Replit Student Privacy Notice

This Student Privacy Notice (“Notice”) explains how Replit handles the information we collect about individuals under the age of 18 that are using Replit’s educational products and services (“Educational Services”) under an agreement between Replit and a school, school district, or other educational institution.

We refer to the individuals under the age 18 using the Educational Services as “Student Users,” and we refer collectively to the educational institutions as “Educational Institution Customers.” As used in this Notice, “Student User Personal Information” is personally identifiable information linked directly or indirectly to a Student User, as well as other information when it is both collected and maintained on an individual level and is linked to personally identifiable information. This Notice supplements our general Privacy Policy. In the event of a conflict between the Privacy Policy and this Notice, this Notice governs.

Please note that when Replit enters into agreements with Educational Institution Customers, Replit includes its U.S. Student Data Protection Addendum, pursuant to which Replit agrees to process Student User data in accordance with applicable U.S. federal and state student privacy laws (i.e., FERPA). To the extent there is any conflict between such contracts and the terms of this K-12 Privacy Statement, the terms of our contracts with Educational Institution Customers will control.

Replit is a signatory to the K-12 Student Privacy Pledge (“Student Privacy Pledge”) with respect to its Educational Services. Click here to learn more about the Student Privacy Pledge.

Collection of Student User Personal Information

We collect Student User Personal Information from Student Users only in order to provide the Educational Services as directed by our Educational Institution Customers. In connection with our Educational Services, we collect the following from Student Users: usernames, IP addresses, and log information.

Use of Student User Personal Information

Replit will not use Student User Personal Information for any purposes other than to provide the Educational Services and for our Educational Institution Customers’ purposes unless such data is first de-identified such that it no longer personally identifies, either directly or indirectly, a Student User.

We do not use Student User Personal Information for behaviorally-targeted advertising purposes, and we do not sell or rent Student User Personal Information to third parties for any purposes.

Sharing of Student User Personal Information

Replit does not share Student User Personal Information with third parties other than as described in this section, and only with entities that maintain privacy practices that are consistent with this Notice.

• With Consent

We will share Student User Personal Information with companies, organizations, or individuals when we have consent and in compliance with applicable laws (including FERPA).

• With or As Directed by Educational Institution Customers

Educational Institution Customers have access to Student User Personal Information in connection with their use of our Educational Services. Educational Institution Customers may also direct us to share Student User Personal Information with others.

• To Provide Our Services

We provide Student User Personal Information to third-party service providers to help us provide the Educational Services. Such service providers are prohibited from using Student User Personal Information for any reason other than to provide the contracted-for services, and are required to adhere to privacy protections that are at least as restrictive as those contained in this Notice.

• For Certain Corporate Transactions

We may share Student User Personal Informationwhere, whether for strategic or other business reasons, Replit decides to sell, buy, merge, or otherwise reorganize its businesses, in which case, we may need to disclose Student User Personal Information. In such transactions, Student User Personal Information will remain subject to this Notice unless consent is obtained to use Student User Personal Information for other purposes or the Student User Personal Information is first deleted.

• For Legal Reasons

We share Student User Personal Information if we believe that access, use, preservation or disclosure of Student User Personal Information is reasonably necessary to:

• comply with any applicable law, regulation, legal process or enforceable governmental request.
• enforce applicable provisions of our Terms of Service or Privacy Policy.
• detect, prevent, or otherwise address fraud, security or technical issues.
• protect against harm to the rights, property or safety of Replit, our users or the public as required or permitted by law, including to help prevent the loss of life or serious injury of anyone.

Information Security

Replit maintains a comprehensive security program that is reasonably designed to protect the security, privacy, confidentiality, and integrity of Student User Personal Information against risks – such as unauthorized access or use, or unintended or inappropriate disclosure – through the use of administrative, technological, and physical safeguards appropriate to the sensitivity of the information. As examples, Replit conducts annual reviews of our security program and security policies, and requires employees to participate in annual security training. Replit also conducts third-party security and vulnerability testing on a periodic basis. However, please note that no security measures are guaranteed to protect information from unauthorized disclosure or misuse.

Information Retention

Replit retains Student User Personal Information for as long as necessary to deliver the Educational Services to Educational Institution Customers, and/or for satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for fraud prevention purposes. When Student User Personal Information is no longer needed for these purposes, we will delete or de-identify it.

Access and Deletion of Student User Personal Information

If a Student User, Educational Institution Customer (as applicable), or a Student User’s parent would like to request to access, review, refuse further collection of ,or delete a Student User’s Personal Information, we will facilitate such requests in accordance with applicable legal requirements and the Student Privacy Pledge, and in collaboration with our Educational Institution Customers.

Notice of Changes to this Notice

We will post any adjustments to this Student Privacy Notice on this page, and the revised version will be effective when it is posted. If we materially change the ways in which we process information, we will provide you with notice in the application and via email in accordance with applicable legal requirements.

Additionally we will comply with all Student Privacy Pledge requirements. Such requirements include providing email notification of the changes, announcement in the application, and seeking consent, where necessary.

Summary of Changes to this Notice

August 16, 2021 – Original Student Privacy Notice created.

How to Contact Us

If you have any questions, please email us at [email protected] or write to us at 767 Bryant St. #210, San Francisco, CA 94107.