Cascade Technology Alliance Privacy Policy
Cascade Technology Alliance (CTA) is a partnership of the Multnomah Education Service District and the Northwest Regional Education Service District Technology Departments.
This page will inform application visitors of our policies with the collection, use, and disclosure of Personal Information. If you choose to use our Service, then you agree to the collection and use of information in relation to this policy. The personal information that we collect is used to provide and improve the service. We will not use or share your information with anyone except as described in this Privacy Policy.
Information Collection and Use
For a better experience while using our Service, we may require you to provide us with certain personally identifiable information. The information that we collect may be used to contact or identify you.
We may import and manage confidential student and program data from Client in the performance of some services, in alignment with the Family Education Rights and Privacy Act (“FERPA”, 20 U.S.C. § 1232g), and in alignment with Oregon Administrative Rules 518-021-025, -260, -330, -340, and -350.
Disposition of Data Upon Termination
Generally, upon termination of service, CTA will cease to upload Client data. Data that is legally permitted to be destroyed will be destroyed; however, CTA shall keep data for auditing and emergency backup purposes where required by contract, statute, Client policy, best industry practices and/or Client request. Alternate disposition requirements and procedures for each service may be listed in the Service Description Instrument.
Log Data
We want to inform you that whenever you use our applications or web services, we collect information that your browser sends to us, that is called Log Data. This Log Data may include information such as your computer's Internet Protocol (“IP”) address, browser version, pages of our Services that you visit, the time and date of your visit, the time spent on those pages, and other statistics.
Cookies
Cookies are files with a small amount of data that is commonly used as an anonymous, unique identifier. These are sent to your browser from the website that you visit and are stored on your computer's hard drive. Our website uses these “cookies” to collect information and to improve our Service. You have the option to either accept or refuse these cookies, and know when a cookie is being sent to your computer. If you choose to refuse our cookies, you may not be able to use some portions of our Services.
Service Providers
We may partner with third-party agencies for the following reasons:
We want to inform our users that these third parties may have access to your Personal Information. The reason is to perform the tasks assigned to them on our behalf based on the Service agreement.
Notwithstanding the above, text messaging originator opt-in data and consent, including your mobile phone number and SMS consent, are not shared with any third parties or affiliates for marketing or promotional purposes.
SMS Text message Notifications
Cascade Technology Alliance offers optional SMS text notifications to staff through our internal applications.
Consent: SMS notifications are off by default. Staff opt in within an application's notification settings by enabling SMS and providing their mobile number; we send a one-time confirmation message to verify the number before enabling notifications.
Information collected: Your mobile phone number and your consent to receive messages.
How we use it: Solely to deliver operational notifications from our internal applications. We do not use it for marketing.
No sharing of mobile information: Mobile information (your phone number and SMS consent) will not be sold, rented, or shared with third parties or affiliates for marketing or promotional purposes. We share your mobile number only with our SMS delivery provider, solely to transmit the messages you requested.
Disclaimer on sign-up page: The following information must be displayed when the user is signing up for SMS notifications: Message frequency varies. Message and data rates may apply.
Disclaimer in text: The following information must be included in every SMS sent: Reply STOP to cancel, reply HELP for help.
Google Calendar Privacy Notice
Data Accessed:
The Cascade Technology Alliance ("CTA"), a service of the Northwest Regional Education Service District (NWRESD), accesses limited Google Calendar data only after a user has explicitly authorized access through Google's OAuth authorization process. The application is read-only and does not create, modify, or delete calendar events. Depending on the permissions granted by the user, the application may access the following Google Calendar information:
Data Usage
Google Calendar data is accessed and processed solely to provide customer relationship management (CRM) functionality for authorized users. Calendar information may be used to:
Google Workspace API data is not:
Data Sharing
CTA does not sell, rent, or disclose Google Workspace user data to third parties for advertising, marketing, or commercial purposes. Google Calendar data may be shared only in the following circumstances:
Data Storage and Protection
Google Calendar data is stored on CTA-managed on-premises systems located within facilities controlled by the Northwest Regional Education Service District.CTA employs administrative, technical, and physical safeguards designed to protect user information from unauthorized access, disclosure, alteration, or destruction. These safeguards include:
Data Retention and Deletion
Google Calendar data is retained only for the duration of the customer's active account and only as necessary to provide the requested services. CTA will delete Google Calendar data within a reasonable period unless retention is required by applicable law, including Oregon public records retention requirements, litigation hold, audit, or other legal obligations. Users may revoke the application's access to their Google Account at any time through their Google Account security settings. Users may also request deletion of stored Google Calendar data by contacting:
Cascade Technology Alliance
Northwest Regional Education Service District
Website: https://www.cascadetech.org
Email: [email protected]
Compliance with Google's API Services User Data Policy
CTA's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google Workspace API data is accessed only to provide user-requested functionality, is not used for advertising, is not sold, and is not used to develop, improve, or train generalized artificial intelligence or machine learning models.
Public Records and Legal Obligations
The Cascade Technology Alliance is a service of the Northwest Regional Education Service District, an Oregon public agency. As such, records maintained by CTA may be subject to the Oregon Public Records Law (ORS Chapter 192) and other applicable state and federal laws governing the retention, disclosure, and protection of public records. While CTA is committed to protecting the privacy and confidentiality of user information, certain records may be retained or disclosed when required by law, court order, lawful public records request, audit, litigation hold, or other legal obligation.CTA will evaluate all requests for records in accordance with applicable law and will assert all applicable exemptions and protections available under Oregon law to safeguard confidential, proprietary, and personally identifiable information. Information will not be disclosed unless required or authorized by law. Nothing in this Privacy Notice limits CTA's legal obligations as a public agency or diminishes the privacy protections afforded to users under applicable state and federal law.
Links to Other Sites
Our Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We advise you to review this page periodically for any changes and view the last updated date. The changes are effective immediately, after they are posted on this page.
Contact Us
If you have any questions or suggestions about our Privacy Policy, email: [email protected]
This page will inform application visitors of our policies with the collection, use, and disclosure of Personal Information. If you choose to use our Service, then you agree to the collection and use of information in relation to this policy. The personal information that we collect is used to provide and improve the service. We will not use or share your information with anyone except as described in this Privacy Policy.
Information Collection and Use
For a better experience while using our Service, we may require you to provide us with certain personally identifiable information. The information that we collect may be used to contact or identify you.
We may import and manage confidential student and program data from Client in the performance of some services, in alignment with the Family Education Rights and Privacy Act (“FERPA”, 20 U.S.C. § 1232g), and in alignment with Oregon Administrative Rules 518-021-025, -260, -330, -340, and -350.
Disposition of Data Upon Termination
Generally, upon termination of service, CTA will cease to upload Client data. Data that is legally permitted to be destroyed will be destroyed; however, CTA shall keep data for auditing and emergency backup purposes where required by contract, statute, Client policy, best industry practices and/or Client request. Alternate disposition requirements and procedures for each service may be listed in the Service Description Instrument.
Log Data
We want to inform you that whenever you use our applications or web services, we collect information that your browser sends to us, that is called Log Data. This Log Data may include information such as your computer's Internet Protocol (“IP”) address, browser version, pages of our Services that you visit, the time and date of your visit, the time spent on those pages, and other statistics.
Cookies
Cookies are files with a small amount of data that is commonly used as an anonymous, unique identifier. These are sent to your browser from the website that you visit and are stored on your computer's hard drive. Our website uses these “cookies” to collect information and to improve our Service. You have the option to either accept or refuse these cookies, and know when a cookie is being sent to your computer. If you choose to refuse our cookies, you may not be able to use some portions of our Services.
Service Providers
We may partner with third-party agencies for the following reasons:
- To facilitate Single Sign-On Integration
- To share data with partners at the customer's request
We want to inform our users that these third parties may have access to your Personal Information. The reason is to perform the tasks assigned to them on our behalf based on the Service agreement.
Notwithstanding the above, text messaging originator opt-in data and consent, including your mobile phone number and SMS consent, are not shared with any third parties or affiliates for marketing or promotional purposes.
SMS Text message Notifications
Cascade Technology Alliance offers optional SMS text notifications to staff through our internal applications.
Consent: SMS notifications are off by default. Staff opt in within an application's notification settings by enabling SMS and providing their mobile number; we send a one-time confirmation message to verify the number before enabling notifications.
Information collected: Your mobile phone number and your consent to receive messages.
How we use it: Solely to deliver operational notifications from our internal applications. We do not use it for marketing.
No sharing of mobile information: Mobile information (your phone number and SMS consent) will not be sold, rented, or shared with third parties or affiliates for marketing or promotional purposes. We share your mobile number only with our SMS delivery provider, solely to transmit the messages you requested.
Disclaimer on sign-up page: The following information must be displayed when the user is signing up for SMS notifications: Message frequency varies. Message and data rates may apply.
Disclaimer in text: The following information must be included in every SMS sent: Reply STOP to cancel, reply HELP for help.
Google Calendar Privacy Notice
Data Accessed:
The Cascade Technology Alliance ("CTA"), a service of the Northwest Regional Education Service District (NWRESD), accesses limited Google Calendar data only after a user has explicitly authorized access through Google's OAuth authorization process. The application is read-only and does not create, modify, or delete calendar events. Depending on the permissions granted by the user, the application may access the following Google Calendar information:
- Event dates and times
- Event organizer information
- Event attendee names and email addresses
- The authenticated user's Google email address
- Meeting location information, including whether a meeting is virtual or in person
- Event descriptions
- Event attachments or links associated with calendar events
Data Usage
Google Calendar data is accessed and processed solely to provide customer relationship management (CRM) functionality for authorized users. Calendar information may be used to:
- Associate meetings and appointments with customer or organizational records.
- Record meeting participants and scheduling information.
- Support customer engagement and relationship management workflows.
- Display meeting details within the CRM.
- Improve the efficiency and effectiveness of customer interactions.
Google Workspace API data is not:
- Sold to any third party.
- Used for advertising or marketing purposes.
- Used to develop, improve, or train generalized artificial intelligence or machine learning models.
- Used for any purpose other than providing the application's stated functionality.
Data Sharing
CTA does not sell, rent, or disclose Google Workspace user data to third parties for advertising, marketing, or commercial purposes. Google Calendar data may be shared only in the following circumstances:
- With authorized CTA employees who require access to provide, maintain, or support the application.
- With contracted service providers performing services on behalf of CTA, provided those providers are contractually obligated to protect the confidentiality and security of the information and use it only for the services requested by CTA.
- When disclosure is required by applicable law, regulation, court order, or other legal process.
Data Storage and Protection
Google Calendar data is stored on CTA-managed on-premises systems located within facilities controlled by the Northwest Regional Education Service District.CTA employs administrative, technical, and physical safeguards designed to protect user information from unauthorized access, disclosure, alteration, or destruction. These safeguards include:
- Encryption of data transmitted over public networks using industry-standard TLS encryption.
- Encryption of sensitive stored data where appropriate.
- Role-based access controls that restrict access to authorized personnel.
- User authentication and authorization controls.
- System logging and monitoring.
- Regular security updates, vulnerability management, and system maintenance.
Data Retention and Deletion
Google Calendar data is retained only for the duration of the customer's active account and only as necessary to provide the requested services. CTA will delete Google Calendar data within a reasonable period unless retention is required by applicable law, including Oregon public records retention requirements, litigation hold, audit, or other legal obligations. Users may revoke the application's access to their Google Account at any time through their Google Account security settings. Users may also request deletion of stored Google Calendar data by contacting:
Cascade Technology Alliance
Northwest Regional Education Service District
Website: https://www.cascadetech.org
Email: [email protected]
Compliance with Google's API Services User Data Policy
CTA's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google Workspace API data is accessed only to provide user-requested functionality, is not used for advertising, is not sold, and is not used to develop, improve, or train generalized artificial intelligence or machine learning models.
Public Records and Legal Obligations
The Cascade Technology Alliance is a service of the Northwest Regional Education Service District, an Oregon public agency. As such, records maintained by CTA may be subject to the Oregon Public Records Law (ORS Chapter 192) and other applicable state and federal laws governing the retention, disclosure, and protection of public records. While CTA is committed to protecting the privacy and confidentiality of user information, certain records may be retained or disclosed when required by law, court order, lawful public records request, audit, litigation hold, or other legal obligation.CTA will evaluate all requests for records in accordance with applicable law and will assert all applicable exemptions and protections available under Oregon law to safeguard confidential, proprietary, and personally identifiable information. Information will not be disclosed unless required or authorized by law. Nothing in this Privacy Notice limits CTA's legal obligations as a public agency or diminishes the privacy protections afforded to users under applicable state and federal law.
Links to Other Sites
Our Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We advise you to review this page periodically for any changes and view the last updated date. The changes are effective immediately, after they are posted on this page.
Contact Us
If you have any questions or suggestions about our Privacy Policy, email: [email protected]
