Skip to main content
Privacy

Your Privacy Rights

Depending on where you live and which laws apply (including the EU/UK GDPR, the California CCPA/CPRA, and U.S. state privacy laws such as the Colorado, Connecticut, and Virginia acts), you have rights over the personal information we hold. This page explains each right in plain language and how to exercise it. It supplements the Privacy Policy.

How to exercise any right: submit a privacy request, or email us at registration@revolutioned.ai. We verify your identity first and respond within 30 days (we may extend this for complex requests and will tell you if so).
Students and education records. If your request concerns a student's education records, RevolutionEd acts only as the school's or district's data processor. We route the request to the school/district, which is the controller of those records and decides it (FERPA; New York Education Law § 2-d). Requests about a staff or educator account, an alumni account, or a website visitor are handled by RevolutionEd directly.

Your rights

Right to know and access

Ask what personal information we hold about you and get a copy of it.

How to exercise: Submit a privacy request (type: Access).

Legal basis: GDPR Art. 15; CCPA §§ 1798.100, 1798.110

Right to correct

Ask us to fix personal information about you that is inaccurate or incomplete.

How to exercise: Submit a privacy request (type: Correct). Fulfilled under B.4.15.

Legal basis: GDPR Art. 16; CPRA § 1798.106

Right to delete

Ask us to delete personal information about you.

How to exercise: Submit a privacy request (type: Delete). Fulfilled under B.4.4.

Legal basis: GDPR Art. 17; CCPA § 1798.105

Right to data portability

Receive a portable, machine-readable copy of your data, or have it sent onward where feasible.

How to exercise: Submit a privacy request (type: Port). Fulfilled under B.4.12.

Legal basis: GDPR Art. 20; CCPA § 1798.100(d)

Right to restrict or object to processing

Ask us to pause certain processing, or object to it, in the circumstances the law allows.

How to exercise: Submit a privacy request (type: Restrict or Object).

Legal basis: GDPR Art. 18, Art. 21

Right to opt out of sale, sharing, and targeted advertising

Opt out of the “sale” or “sharing” of personal information, of targeted advertising, and of profiling with significant effects. We do not sell or share personal information or use it for targeted advertising; you can still record your choice, and we honor Global Privacy Control.

How to exercise: Use the “Do Not Sell or Share My Personal Information” link or a privacy request. Honored under B.4.13.

Legal basis: CCPA §§ 1798.120, 1798.135; state targeted-ad / profiling opt-outs

Right to limit use of sensitive personal information

Direct us to limit the use of sensitive personal information to what is necessary to provide the service.

How to exercise: Submit a privacy request, or use the opt-out controls.

Legal basis: CPRA § 1798.121

Right to withdraw consent

Where processing is based on your consent (such as non-essential cookies), withdraw it at any time.

How to exercise: Change your cookie/consent choices, or submit a privacy request.

Legal basis: GDPR Art. 7(3)

Right against discrimination

We will not deny service, charge a different price, or provide a different quality of service because you exercised a privacy right.

How to exercise: This applies automatically; contact us if you believe it was not honored.

Legal basis: CCPA § 1798.125

Right to appeal

If we decline your privacy request, you may appeal that decision and we will review it again.

How to exercise: Submit a privacy request (type: Appeal), or reply to our decision.

Legal basis: Colo. Rev. Stat. § 6-1-1306(3); Va. Code § 59.1-577(C); Conn. P.A. 22-15 § 4(e)

Right to lodge a complaint

Contact your state Attorney General or your data-protection supervisory authority if you are unsatisfied with how we handled your request.

How to exercise: Contact the relevant authority directly; see our privacy policy for details.

Legal basis: GDPR Art. 77; CCPA (complaint to the Attorney General / CPPA)

Appealing a decision

We decline (deny) a privacy request, in whole or in part. Appeal by submitting a privacy request of type “Appeal” (referencing the original request) or by replying to our decision. The appeal is logged as a tracked ticket with its own response clock. We aim to decide an appeal within 45 days. The Privacy Officer (independent of the original decision-maker where practicable).

If the appeal is also denied, you may contact your state Attorney General or your data-protection supervisory authority (GDPR Art. 77). You can find the relevant authorities in the "Complaints and Supervisory Authorities" section of our Privacy Policy.

No retaliation

We will never deny you service, charge you a different price, or give you a lower quality of service because you exercised a privacy right.