Privacy Policy

1. Introduction

Kyber Systems LLC ("KyberGate," "we," "us," or "our") operates the KyberGate platform, including KyberFilter and KyberPulse services. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our services.

We are committed to protecting student privacy and complying with the Family Educational Rights and Privacy Act (FERPA), the Children's Internet Protection Act (CIPA), the Children's Online Privacy Protection Act (COPPA), and applicable state privacy laws.

2. Information We Collect

2.1 School Administrator Information

Name, email address, school/district name, job title, and contact information provided during account creation and support interactions.

2.2 Student Browsing Data

When web traffic is routed through KyberGate, we collect: domain names, URLs, timestamps, content categories, filtering actions (allowed/blocked), and device identifiers. This data is used solely for content filtering, safety monitoring, and reporting.

2.3 Device Information

Device type, operating system, UDID (for MDM-managed devices), IP address, and network information necessary for filtering and device management.

2.4 Safety Monitoring Data

Search queries and browsing patterns that match safety keywords (self-harm, cyberbullying, violence, substance abuse) are flagged and stored as safety alerts. Only flagged content is retained; general browsing content is not stored.

3. How We Use Information

• Provide and maintain content filtering services
• Generate activity reports and analytics for school administrators
• Detect and alert on student safety concerns
• Enable classroom management features
• Improve our filtering accuracy and reduce false positives
• Provide technical support
• Comply with legal obligations including CIPA requirements

4. Data Sharing and Disclosure

We do not sell, rent, or trade student data to any third party. We may share information only in these limited circumstances:

• With your school/district: Administrators can access browsing logs, safety alerts, and device information for their organization.
• Service providers: We use industry-leading cloud infrastructure, email delivery, and billing service providers. These providers process data only as directed by us.
• Legal requirements: We may disclose information when required by law, subpoena, or court order, or to protect safety.
• Safety emergencies: We may disclose information to law enforcement or emergency services when we believe there is an imminent threat to student safety.

5. FERPA Compliance

KyberGate operates as a "school official" under FERPA with a legitimate educational interest in the data we process. We use student data only for the purposes specified by the school district. We do not use student data for advertising, marketing, or any purpose unrelated to providing our educational technology services.

6. COPPA Compliance

We do not knowingly collect personal information directly from children under 13. All student data is collected through the school's use of our services, with the school acting as the agent of consent under COPPA.

7. Student Data Privacy Pledge

KyberGate is committed to the Student Privacy Pledge. We pledge to:

• Not sell student personal information
• Not behaviorally target advertising to students
• Not build personal profiles of students other than for authorized educational purposes
• Not change privacy policies without notice and choice
• Not use student data for purposes other than those authorized by the school
• Enforce strict limits on data retention
• Support access to and deletion of data by authorized parties
• Maintain comprehensive data security standards
• Be transparent about data collection and use practices

8. State Privacy Law Compliance

KyberGate is designed to comply with state student privacy laws, including but not limited to:

• New York Education Law §2-d: Student data privacy and security, parent bill of rights
• California (SOPIPA/CalOPPA): Student Online Personal Information Protection Act
• Illinois (ISSPA/BIPA): Illinois Student Online Personal Protection Act
• Connecticut PA 16-189: Student data privacy
• Colorado HB 16-1423: Student data transparency and security

We are willing to sign Data Processing Agreements (DPAs) with school districts as required by state law. Contact us at privacy@kybergate.com to request a DPA.

9. Data Security

We implement industry-standard security measures including: encryption in transit (TLS 1.2+), encryption at rest, access controls, audit logging, and regular security reviews. Our infrastructure runs on Google Cloud (Firebase) with SOC 2 Type II certified data centers.

10. Data Retention

Browsing logs are retained for the duration specified by the school district (default: 90 days). Safety alerts are retained for one school year. Account data is retained for the duration of the subscription. Upon termination, all data is deleted within 30 days unless a longer retention period is required by law.

11. Your Rights

School administrators can access, export, and delete their organization's data at any time through the KyberGate dashboard. Parents may request access to their child's data through their school district. For data deletion requests, contact us at privacy@kybergate.com.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at: