Privacy Policy

We may collect the following types of information when you interact with our website or forms:

• Personal Identifiers: Name, email address, phone number
• Communication Data: Messages submitted through contact forms, inquiries, appointment requests
• Usage Data: Browser type, IP address, pages visited, time spent on pages (collected automatically via cookies)

We use the information we collect to:

• Respond to your inquiries and appointment requests
• Send you information about our programs, services, and updates
• Send periodic text messages (SMS) if you have opted in via our web forms
• Improve our website and services
• Comply with applicable laws and regulations

We do not sell, trade, rent, or otherwise transfer your personally identifiable information to outside parties. This includes your name, email address, phone number, and any text message information.

We may share information only in the following limited circumstances:

• With service providers who assist us in operating our website or conducting our business (under strict confidentiality agreements)
• When required by law or to protect the rights, property, or safety of Exceed Learning Center, our clients, or others

Our staff dashboard offers an optional integration that lets an authorized Exceed Learning Center administrator connect a Google account so that class, session, and event schedules can be managed alongside our own calendar. This section applies only to the Google account of a staff member who chooses to connect one. It does not apply to students, parents, or website visitors, and no student or parent is ever asked to connect a Google account.

What we access, and why. When an administrator connects an account, we request only these permissions:

• Basic profile and email address (openid, email) — to record which Google account was connected and display it in the dashboard
• See the list of calendars you own (calendar.calendarlist.readonly) — so the administrator can choose which calendar to use
• View and manage events on that calendar (calendar.events) — to read scheduled classes and to create or update class and session events

We do not request or receive access to Gmail, Google Drive, Google Contacts, Google Photos, or any other Google service.

How this data is stored and protected.

• Google access and refresh tokens are encrypted with AES-256-GCM before they are written to our database, and are decrypted only on our server at the moment a calendar request is made
• Tokens are never sent to a web browser, never exposed through a public page, and never included in analytics or logs
• Calendar data is read on demand to render the dashboard; we do not build a separate copy or archive of your calendar
• Only signed-in administrators on our approved administrator list can reach the connected calendar

How to disconnect, and what happens when you do.

• An administrator can remove a connected account from the dashboard at any time. Doing so asks Google to revoke our access and permanently deletes the stored tokens from our database
• You can also revoke access directly at myaccount.google.com/permissions

Limited Use. Exceed Learning Center’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not use Google user data for advertising, we do not sell it, we do not transfer it to third parties except as necessary to provide this feature or to comply with applicable law, and we do not allow humans to read it except with your explicit consent, for security purposes, to comply with applicable law, or where the data has been aggregated and anonymized.

Our website may use cookies and similar tracking technologies to enhance your browsing experience and analyze site traffic. You can instruct your browser to refuse cookies or to indicate when a cookie is being sent.

We implement reasonable security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

You have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of text message communications at any time by replying STOP
• Opt out of marketing emails by using the unsubscribe link in any email

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

Our website is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the "Last updated" date at the top of this page. Your continued use of our website after any changes constitutes acceptance of the updated policy.

If you have any questions or concerns about this Privacy Policy, please contact us: