Schools & Institutions Privacy Notice
Last updated: August 22, 2026
Overview
This notice explains how GrowWise Omnix360 works with schools, districts, tutoring centers, and other education institutions (“Institutions”). It supplements the General Privacy Policy.
Who controls student data?
When an Institution deploys Omnix360 for its learners and staff:
| Role | Who | Responsibility |
|---|---|---|
| Controller / administrator | The Institution | Decides why and how student and staff education data is processed; sets retention and access policies; responds to parent/student requests in the first instance |
| Processor | GrowWise Omnix360 | Processes personal data on the Institution’s documented instructions to provide the Services |
Privacy questions from students or parents about school-held education records should usually go to the Institution first. GrowWise will assist the Institution under the applicable agreement.
FERPA and US school context
When Omnix360 is used by a US school or district in connection with education records, GrowWise typically acts as a “school official” with a legitimate educational interest under FERPA, as authorized by the Institution’s contract. We process education records only to provide the Services and as otherwise permitted by the agreement and law.
We do not use education records for targeted advertising. See also the United States Privacy Supplement.
What Institutions control
Institutions typically control:
- Which users are invited or rostered
- Course content, assessments, and grade visibility
- Parent linking and messaging policies
- Feature enablement within their tenant plan
- Requests to export or delete student data at contract end
What GrowWise may do with Institutional data
Subject to the customer agreement and this Privacy Center:
- Host and process data to deliver Omnix360 features (including instructional intelligence, see AI Notice)
- Maintain security, backups, and service reliability
- Use de-identified or aggregated data to improve the Services where the agreement allows
- Engage subprocessors listed in the Subprocessor List
Unless the agreement expressly allows otherwise, GrowWise does not:
- Sell student personal information
- Use student education records for behavioral targeted ads
- Use Institutional student data to train general-purpose AI models shared across unrelated customers (see AI Notice)
Data Processing Agreement (DPA)
Enterprise and school customers may receive a Data Processing Agreement or student data privacy addendum as part of contracting. That document controls if it conflicts with this notice for that customer.
Subprocessors
GrowWise uses subprocessors for cloud hosting, communications, AI inference, and related services. See the public Subprocessor List. Tenant administrators may also review subprocessors in Privacy & Compliance (/compliance) inside the product.
Retention: return, and deletion
After contract termination (or earlier upon Institution request, where feasible):
- We will return or delete Institutional personal data as described in the agreement
- Residual copies in backups are deleted or overwritten on our backup cycle
- Legal holds may delay deletion where required by law
Security and access logging
We maintain technical and organizational security measures. US Institutions may use in-product FERPA-style access log filters where enabled for their tenant.
Contact
Institutional privacy and DPA questions: connect@thegrowwise.com.