Privacy Policy

WorkQuest ("we," "us," or "our") is a workplace skills training platform operated by Employee of Choice, Inc. We are committed to protecting the privacy of all users — students, educators, parents, and professionals alike. This Privacy Policy explains what data we collect, how we use it, and your rights.

If you have questions or concerns, contact us at info@employeeofchoice.com.

1 Data We Collect

We collect only what's needed to run the platform and track your progress.

Data Type	Examples	Why We Collect It
Account Data	Username, email address, password (hashed), role (student/teacher/parent)	Authentication and account management
Gameplay Data	Scenario responses, XP earned, grades (S–D), badges, leaderboard position	Progress tracking and gameplay
Usage Data	Pages visited, session duration, device type, browser	Platform performance and analytics
Classroom Data	Teacher-created class rosters, student progress visible to their teacher	Educational oversight and reporting
Child Account Data	Username, age range, gameplay progress (linked to parent account)	Parental oversight; no email required for child accounts

2 How We Use Your Data

3 Data Sharing

We share data only in limited circumstances:

• Service providers: Infrastructure providers (hosting, database) under strict data processing agreements. They access data only to operate the platform.
• Teachers and school administrators: Classroom progress data is visible to the teacher who created the class. School administrators may access aggregate data for their institution.
• Parents/guardians: Parents can view and manage their child's account data.
• Legal requirements: We may disclose data if required by law or to protect the safety of users.

We do not sell, rent, or trade personal information to any third party.

4 FERPA Compliance

Our FERPA Commitments

• Legitimate educational interest: Student data is accessed solely to provide educational services — gameplay, progress tracking, and classroom management.
• No unauthorized disclosure: Student education records are not disclosed to any third party without proper authorization.
• No data monetization: We do not sell or use student data for advertising, profiling, or any commercial purpose outside the educational context.
• Scoped teacher access: Teachers and administrators can only view data for students in their own classrooms or institution. Cross-school data access is not permitted.
• Parent rights: Parents and eligible students (18+) may request access to, correction of, or deletion of education records by contacting us at info@employeeofchoice.com.
• Data security: Student data is stored with encryption at rest and in transit.
• Data retention: Student data is retained only as long as the institution has an active relationship with WorkQuest. Schools may request data deletion at any time.

5 COPPA Compliance (Users Under 13)

WorkQuest serves teens and young adults. We take our obligations under the Children's Online Privacy Protection Act (COPPA) seriously.

How Child Accounts Work

• A parent or guardian creates the primary account
• The parent sets up the child's account within their dashboard
• Child accounts do not require an email address
• Child accounts have limited data collection: only username, age range, gameplay progress, and badges
• No behavioral tracking or analytics beyond core gameplay for child accounts
• Children are not shown advertising of any kind

Parental Rights

• Access: Parents can view all data collected about their child's account at any time through the parent dashboard
• Correction: Parents can update their child's username and account information
• Deletion: Parents can delete a child account at any time — all associated data is permanently removed within 30 days
• Withdrawal of consent: Parents may withdraw consent and request full data deletion by emailing info@employeeofchoice.com

School-Based Child Accounts

When WorkQuest is used in a K-12 school setting, schools may provide consent on behalf of parents under the school consent exception in COPPA — but only for educational use within the school context. Schools are responsible for obtaining appropriate parent consent per their local policies.

6 Data Retention & Deletion

Data Type	Retention Period
Active account data (profile, progress, XP)	Retained while account is active
Deleted account data	Permanently removed within 30 days of account deletion
Child account data	Deleted within 30 days of parent's deletion request
School/classroom data	Deleted within 30 days of institution's request
Server logs (usage, errors)	Retained up to 90 days for security and debugging
Aggregated analytics (no personal data)	Retained indefinitely for platform improvement

To delete your account, go to your Profile Settings → Delete Account. To request data deletion for an institutional deployment, email info@employeeofchoice.com.

7 Security

We implement industry-standard security measures to protect your data:

• Encryption at rest: All sensitive data is encrypted using AES-256
• Encryption in transit: All data is transmitted over HTTPS/TLS
• Password security: Passwords are hashed using bcrypt — we never store plain-text passwords
• Access controls: Data access is scoped per role — teachers see only their students, parents see only their children
• Infrastructure: Hosted on Render (SOC 2 compliant infrastructure) with Neon PostgreSQL

No system is 100% secure. If you believe you've found a security vulnerability, please report it to info@employeeofchoice.com immediately.

8 Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Portability: Request your data in a machine-readable format
• Objection: Object to certain processing of your data
• FERPA rights: See Section 4 above for education record rights
• COPPA rights: See Section 5 above for parental rights regarding child accounts

To exercise any of these rights, email info@employeeofchoice.com with your request. We will respond within 30 days.

9 Cookies & Tracking

We use minimal cookies to keep you logged in and remember your preferences.

• Session cookies: Required for login and authentication. Cannot be disabled without breaking the platform.
• Preference cookies: Remember your settings (e.g., display preferences). Can be cleared via browser settings.
• Analytics: We use anonymous usage analytics to improve the platform. This data is not tied to your personal identity.

We do not use third-party advertising cookies or cross-site tracking.

10 Changes to This Policy

We may update this Privacy Policy from time to time. When we do:

• We will update the "Last Updated" date at the top of this page
• For material changes, we will notify users by email or a prominent notice on the platform
• Continued use of WorkQuest after changes constitutes acceptance of the updated policy

11 Contact Us

For any privacy-related questions, data requests, FERPA inquiries, or COPPA matters: