Parents' Bill of Rights for Data Privacy and Security

New York schools are required to share a Parents’ Bill of Rights for Data Privacy and Security with any vendor, like the Tech in Schools Initiative (TSI), that handles student data on the school’s behalf. This page sets out TSI Hub’s version of that Bill of Rights, describing our own classroom-portal product in plain terms so a school can post or attach it as part of its own notice to parents.

1. What Student Data TSI Hub Collects

TSI Hub is a classroom portal — it is not a curriculum or assessment tool, so it does not collect grades or test scores. For a student account, TSI Hub collects only:

• the student’s name;
• an email address, used to sign in;
• the student’s school (entered as free text when the account is set up);
• the student’s grade level; and
• a log of the student’s activity within TSI Hub — which links they clicked, which resources they viewed, and which files they downloaded — so teachers can see what is actually being used in class.

No other personal information is requested from students to use TSI Hub.

2. Student Data Is Never Sold

TSI does not sell student data, and we do not use it for advertising or marketing, to students or to anyone else. Student data is used only to operate TSI Hub for the school that has chosen to use it — for example, showing a student their class’s apps and files, or letting a teacher see which resources their students have opened.

3. Security Safeguards

TSI Hub protects student data with layered technical safeguards, including:

• Passwords are never stored in plain text — they are one-way hashed before storage.
• Data in transit between a user’s browser and TSI Hub is encrypted (HTTPS).
• Access to student accounts and data is limited by role, so a student account cannot see another class’s data, and only authorized school staff and TSI administrators can see school-wide information.
• Data is hosted with established infrastructure providers rather than on any individual’s personal device or server.

A fuller technical description is available on the Security & Data Handling page.

4. A Parent’s Right to Inspect and Correct

A parent or guardian may ask to review the personal information TSI Hub holds about their child, and may ask us to correct it if it is inaccurate (for example, a misspelled name or the wrong grade level). Because student accounts are set up through a school, the fastest path is usually to ask the school’s TSI Hub administrator, who can look up or correct the record directly. Parents may also reach TSI directly using the contact information below, and we will work with the school to verify the request and respond.

5. Filing a Complaint

A parent who believes TSI Hub has not handled their child’s data consistent with this Bill of Rights, or with their school’s own data privacy policy, may file a complaint in either of these ways:

• with the school or district directly, following the school’s own data-privacy complaint process; or
• directly with TSI at privacy@mytsi.org, describing the concern and the student’s school.

TSI will acknowledge complaints it receives directly and work with the relevant school to investigate and respond.

Contact

Questions about this Bill of Rights, or about a specific student’s data, can be sent to privacy@mytsi.org.