Welcome to the Loretta Technologies, Inc. ("Company," “we,” “our”) website (loretta.tech, the “Site”). This Privacy Policy explains how the Company collects, uses, and protects your information when you access and use our managed IT services for schools including our Site and software (collectively, the "Services"). We are committed to protecting the privacy of the teachers, administrators, and other school staff ("users," “you,” “your”) who access our Services. The use of information collected through our Service is limited to the purpose of providing the services for which the applicable school or school district has engaged us.

1. Information We Collect and Our Commitment to Data Minimization

To provide our Services, we collect and process information that you or your school provides to us. We adhere to the principle of data minimization, which means we collect only the information that is necessary to provide and improve our Services. This includes:

• Account Information: When your account is created, we collect Personal Information, which is any information that identifies, relates to, or is reasonably capable of being associated with you. This includes your name, school affiliation, email address, and phone number. This information is necessary to set up and manage your account.

• Usage Data: We automatically collect data about how you use the Services. This usage data includes information like your device’s IP address, browser type, operating system, and a record of the web pages you visit or the features you use. We use cookies and similar technologies to help us collect this data. Cookies are small data files placed on your device that help us authenticate users, remember your preferences, and analyze how the Services are used. You can manage your browser settings to control cookies, but certain parts of the Service may not function properly without them.

2. How We Use and Share Information

We only use the information we collect for the following purposes:

• To provide the Services: We use your Personal Information to give you access to the Services, manage your account, and provide technical support. As an operator for Michigan schools, we will only use and disclose your information for authorized K-12 school purposes, as defined by Michigan's Student Online Personal Protection Act. This means we will not use your data for targeted advertising, to create profiles for non-educational purposes, or sell your information.

• For internal operations and improvements: We use usage data to monitor the performance of our Services, diagnose technical issues, and improve the user experience. In some cases, we may use de-identified or aggregated data for internal analysis and product improvement. This means we remove any information that could be used to identify you or your school.

• To comply with legal obligations: We will use and disclose your information as required by law. 

• For any other purpose with your consent.

We will not share your Personal Information with third parties except as necessary to provide the Services on behalf of your school. This may include sharing data with:

• Related Companies: We may share your Personal Information with our subsidiaries and affiliates. 

• Subcontractors: We may engage subcontractors, which are natural or legal persons who assist us in providing the Services. Any such subcontractor is required to protect your information and only use it for the purposes we specify.

• Other Service Providers: We may share data with other service providers, which are third parties that process data for us (for example, our hosting provider). Any such provider is required to protect your information and only use it for the purposes we specify.

• Third Parties at the School's Request: With the express permission of your school, we may disclose your information to a third party to assist with the provision of support services or other K-12 school purposes.

• Legal: We may share your Personal Information to comply with any court order, law, or legal process, including to respond to any government or regulatory request.

• For any other purpose with your consent.

3. Choices About How We Use and Disclose Your Information

We strive to provide you with choices regarding the Personal Information you provide to us. We have created mechanisms to provide you with the following control over your information. You can use the Site without providing any Personal Information. This will require You to turn off cookies in Your browser. If You disable or refuse cookies, please note that some parts of this site may then be inaccessible or not function properly. In addition, if You choose not to provide any Personal Information, You may not be able to use certain Services or access certain resources..

4. Use of Agentic Artificial Intelligence

The Service utilizes agentic artificial intelligence (AI) to enhance its functionality and efficiency. An agentic AI is an autonomous system that can perceive its environment, reason about its actions, and act independently to achieve a goal.

We use this technology to:

• Categorize and route support requests by analyzing incoming tickets and directing them to the appropriate resolution path.

• Automate simple troubleshooting steps such as password resets, app reinstalls, or device setting adjustments when common issues arise.

• Generate and schedule reports for administrators, including device health summaries, content filtering compliance, and software usage by grade level.

• Detect and summarize patterns in support requests to help identify recurring technical issues across classrooms or devices.

• Assist with device management by suggesting optimal configurations, monitoring update needs, and grouping devices for deployment tasks.

• Support administrative workflows by recommending efficiencies in processes such as classroom technology setup or application deployment.

• Enhance communication by drafting notices for staff or families regarding IT updates, which are reviewed and approved by administrators before distribution.

The AI operates within a secure, controlled environment and is subject to the same data minimization, security, and use limitations as outlined in this policy. It does not make any consequential decisions (e.g., decisions about employment, eligibility, or access to resources) on its own without human oversight.

5. Data Ownership. Schools and their users retain all rights, title, and interest in and to all data they create, submit, or store through the Services. We use such data only for the purposes outlined in this policy and our agreement with your school.

6. Data Security and Retention. We take the security of your information seriously. We have implemented reasonable administrative, technical, and physical security measures to protect your data from unauthorized access, use, or disclosure.

We will keep your Personal Information for as long as your school maintains an account with us and as needed to comply with our legal obligations. If your school’s account is terminated, or if your school requests that we delete your data, we will do so in a commercially reasonable timeframe and as required by law.

7. Our Policy on Children's Privacy. 

Our services are provided to schools and educational institutions for use by teachers and school administrators. We do not knowingly collect personal information directly from children under the age of 13. We act as a service provider for schools and collect student information, which may include a child’s first name, last name, account name, and account password, only as directed by the school.

The school is responsible for obtaining all necessary parental consent for the collection and use of this information, in accordance with applicable laws.

We use this information solely to provide our Services to the school as outlined in our agreement with them. We do not use this information for any other purpose, and we do not share or sell this information to third parties, except as necessary to provide our services to the school (e.g., with sub-processors who are contractually obligated to protect the data) or as required by law.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact their school directly. You may also contact us to request the deletion of that information.

8. Your Rights. You have the right to access and correct the Personal Information we hold about you. You may also be able to request that your information be deleted. To exercise these rights, please contact your school administrator or us directly. We will work with your school to fulfill your request in accordance with our legal obligations.

9. Changes to this Privacy Policy. We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify your school administrator of any material changes by email or through a prominent notice on our Site at least 30 days before the changes take effect. We also maintain an archive of previous versions of this policy for your review.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: legal@loretta.tech