Commands
17
Queries
51.36 ms
Query time
0
Failed Queries
| # | Time | Connection | Command |
|---|---|---|---|
| 1 | 40.47 ms | default | CONNECT tls://constellation-web-develop-cache-3ighqi.serverless.cac1.cache.amazonaws.com 6379 5 <null> 5 5 |
| 2 | 2.13 ms | default | AUTH constellation-web-develop-user %,A#o9NDcy0j7F;]+wYh |
| 3 | 1.19 ms | default | MGET -WiwMkH6Gd:DC2_REGION_nanomonx_app.entity.pagecontentmanager.informationpage_1__translations |
| 4 | 0.76 ms | default | EXISTS -WiwMkH6Gd:DC2_REGION_nanomonx_app.entity.pagecontentmanager.informationpagetranslation_1 |
| 5 | 0.67 ms | default | MGET -WiwMkH6Gd:DC2_REGION_nanomonx_app.entity.pagecontentmanager.informationpagetranslation_1 |
| 6 | 0.01 ms | default | MULTI 2 |
| 7 | 0.12 ms | default | SETEX -WiwMkH6Gd:DC2_REGION_nanomonx_app.entity.pagecontentmanager.informationpagetranslation_1 3600 O:35:"Doctrine\ORM\Cache\EntityCacheEntry":2:{s:5:"class";s:56:"App\Entity\PageContentManager\InformationPageTranslation";s:4:"data";a:14:{s:2:"id";i:1;s:4:"name";s:27:"La super top page de Joseph";s:5:"route";s:6:"joseph";s:14:"common_content";s:25531:"<h1>Privacy Policy – Nanomonx inc.</h1><h5>Version 1.3 – Effective as of August 1rst, 2022</h5><p>At Nanomonx, we believe in the privacy of our users and the protection of their data. We commit ourselves to protect the confidentiality of the data we collect from Students and Managers using our Services. We assure users of our Services that we only collect user data that is essential for educational purposes and the proper functioning of our Services. We will at no time sell or share Personally Identifiable Information (PII) with third parties. Student data will never be used for marketing purposes. </p><p>This document provides details about our Privacy Policy for data collected by the Services. This Privacy Policy is an integral part of the legal agreement binding the users and Nanomonx. It describes how Nanomonx collects, protects, uses, stores, shares and anonymizes destroys information and data generated during your use of the Services.</p><h2>Glossary</h2><p>SERVICES</p><p>The Services consist of </p><ol><li><strong>The Website</strong> : The Website can be accessed from <a href="https://nanomonx.com" rel="noopener noreferrer" target="_blank">https://nanomonx.com</a> and all its subdomains. Subdomains are separated this way : </li><li>Troubadour users, both Students and Managers use <a href="https://troubadour.nanomonx.com/" rel="noopener noreferrer" target="_blank">https://troubadour.nanomonx.com/</a></li><li>Boreal Tales Managers mostly use </li></ol><p><a href="https://constellation.nanomonx.com/" rel="noopener noreferrer" target="_blank">https://constellation.nanomonx.com/</a></p><p> This will not normally be available to students.</p><ol><li>Classroom management, subscription purchases and other administrative actions will be done on <a href="https://www.nanomonx.com" rel="noopener noreferrer" target="_blank">https://www.nanomonx.comhttps://nanomonx.com</a> by Managers. This will not normally be available to students.</li><li>For Boreal Tales only, <strong>The Boreal Tales Application</strong>: Installed on the user’s device, the Boreal Tales Application is used by Students to do their work and by Managers to create reading assignments. </li></ol><p><br></p><p> </p><p>This Privacy Policy applies to all the above-mentioned Services.</p><p>USERS</p><p>The Services are used by two types of users :</p><ol><li>Parents, teachers, tutors or school administrators that can connect to any of the previously mentioned interfaces. In this document, we will use the term Manager for any adult managing subscription packages, a class or a group.</li><li>Students or children that connect only to the Boreal Tales Application and/or the Troubadour Website. In this document, we will use the term Student for any member of the classroom that is not a Manager.</li></ol><p> </p><p>THE CLASSROOM</p><p> Collectively, the Students of a class and the Manager who manages it.</p><p> </p><p>CLASSROOM GENERATED CONTENT (CGC)</p><p> The Services consist of a game that (1) allows Students to write text later corrected by the classroom Manager, and which can be shared with other Students in the Classroom, and/or with any other person, if so allowed by the Manager, and (2) allows Managers to create challenges they can share with their Students or with other Managers. Nanomonx thus records these texts (CGCs) to ensure their availability for these purposes. The sharing of this CGC inside or outside of the Classroom is therefore also subject to the school administration’s privacy policy, and Nanomonx cannot be held liable if confidential or sensitive information is shared in this context. Nevertheless, Nanomonx takes all necessary precautions to ensure that this GCC is not shared with people not authorized by the Manager, as described in this Privacy Policy.</p><h2>Terms and conditions</h2><p>Nanomonx intends to be compliant with the requirements of Canadian and US privacy laws, such as the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and the Children’s Online Privacy Protection Act (“COPPA”). </p><p>Since regulations such as COPPA authorize the teacher to act on behalf of the parent to provide consent to the collection of children’s personal information, Nanomonx requires that either the teacher or the parent accepts the terms of this Privacy Policy before collecting any information on his or her Students and keeping them for a period longer than 24 hours. If the teacher consents, he or she is responsible for communicating the contents of this Privacy Policy to the parents of the students and must be assured of their consent. </p><p>If you do not agree to the terms and conditions of this Privacy Policy, you should not submit information to or register an account with us, or use the Services.</p><h2>Consent</h2><p>As mentioned above, consent to the collection of private information can be given either by the teacher or the parent. If the Student Account is created by a parent or teacher, accepting our User Terms will count as Consent.a consent form is provided at the time of creation.</p><p><br></p><p>We also have a system where students are able to join a Classroom through a Quick Access Code. A Student Account created this way will need to be validated within 72 24 hours by the Classroom’s Manager (parent or teacher) or it will be anonymized automatically since consent will not have been provided. </p><h2> </h2><h2 id="h_005449544135334605">Collected Data</h2><h3>Managers:</h3><p>In order to provide the Services, Nanomonx collects personal information from Managers for the purposes of :</p><ul><li>Logging in a user to the Services</li><li>Sales and billing</li><li>Services functionality</li><li>Managers submitting challenges to Students</li><li>Students submitting creations to Managers</li><li>Completing challenges as would a Student</li><li>Ensure service availability and reliability</li></ul><p>The following information, relative to the Manager, can be collected :</p><ul><li>Email address</li><li>Billing and shipping address</li><li>Browser and device used</li><li>Name of the school, school level</li><li>Payment information</li><li>Services data</li><li>Content created by the Manager (challenges, Student work corrections, comments to Students, etc.)</li><li>Service Usage Data (connections, subscription packages purchased or transferred, etc.) </li><li>Data related to errors and exceptions</li></ul><h3>Students :</h3><p>In order to provide the Services, Nanomonx collects information about Students for the purposes of :</p><ul><li>Logging in a user in the application</li><li>Services functionality</li><li>Students submitting creations to Managers or correcting their work</li></ul><p>The following information, relative to the Student, can be collected or inferred:</p><ul><li>Username, can be an email address.</li><li>Display name, selected, entered and/or approved by the Manager</li><li>School level, Manager’s name</li><li>Services data (avatar, usage time, number of words written, etc.)</li><li>Content created by the Student (worlds and text created by the Student)</li><li>Data related to errors and exceptions</li><li>Linked email, an email address used in case of a lost password. Can be the same as username, a parent’s, etc.</li></ul><p>Note that the only personally identifiable information (PII) we might collect for a Student are :</p><ol><li>Display name : This can be anything and Nanomonx does not require real names to be used. Since it is often useful for Managers to use real names, they are often used in this case.</li><li>Username : Again, the username does not have to be personally identifiable. Using a Student’s email as a username is very efficient and this information is sometimes collected.</li><li>Linked Email : For things like handling lost passwords, providing warnings before we delete students data or other essential functionality, an optional Linked Email can be added to a Student Account. This email will typically be the parent or the student’s own email. </li></ol><p>Apart from the above, we never directly ask the Student for any personally identifiable data.</p><p> </p><p>In order to provide the Services, Nanomonx does not collect the following information:</p><ul><li>Physiological and biometric data</li><li>Geolocation data</li><li>Contacts or friends list of the user</li><li>Any data about other applications’ usage on the device</li><li>Internet navigation history</li></ul><h2>Third Parties</h2><p>In order to provide the Services, Nanomonx works with third parties. The collected Student data is only shared with third parties that have privacy policies that are consistent with our own Policy. Nanomonx shares data with the following third parties:</p><p><br></p><h3>For non-student data</h3><p>For Managers, we use a more diverse set of tools to maintain the business relationship:</p><ol><li>Customer support and relationship tools</li><li>Newsletter subscriptions</li><li>Business analysis</li><li>Billing and Invoicing</li><li>Online payment of subscriptions</li></ol><p>While they are not restricted to a single vendor and geographical location, those tools and suppliers have proper privacy policies and terms of service that we can provide. </p><h3>Unity (for The Boreal Tales Application only)</h3><p>The Boreal Tales Application is developed using a software called Unity. Technical, anonymized data (data that cannot be linked to a precise user) is collected by Unity and consulted by Nanomonx. Information collected this way is solely used to find bugs, identify technical problems and improve the overall quality of the Boreal Tales Application. Note that CGC is never shared with Unity.</p><p>Unity can collect or infer the following information:</p><ul><li>Device IP address</li><li>Model platform type and operating system</li><li>Device manufacturer</li><li>Unique device identifiers</li><li>Country of install</li><li>Graphics card type</li><li>Technical details about the device’s components</li></ul><p>Link to the Privacy Policy of Unity (Note that Nanomonx does not use Unity’s Ad Services module, and that the sections of Unity’s privacy policy pertaining to this module are therefore not applicable) :</p><p><a href="https://unity3d.com/fr/legal/privacy-policy" rel="noopener noreferrer" target="_blank">Privacy Policy - Unity</a></p><p>Link to the Privacy Policy of Unity specifically addressing COPPA :</p><p><a href="https://docs.unity3d.com/Manual/UnityAnalyticsCOPPA.html" rel="noopener noreferrer" target="_blank">Unity - Manual: COPPA Compliance</a></p><h3> </h3><h3>Bugsnag (for Boreal Tales and Troubadour Services)</h3><p>Bugsnag is a platform generating automated error reports. These errors (bugs) can occur during data manipulation by the Boreal Tales Application or when interacting with Nanomonx Product Websites. Error reports are provided to Nanomonx only and are deleted after 60 days. These reports are solely used by Nanomonx to identify the causes of the errors in order to fix them and provide a better experience with the Services.</p><p>The data that can be captured by Bugsnag consists of :</p><ul><li>The username (email address of the Teacher or username of the Student)</li><li>The list of actions performed by the Teacher in the Nanomonx Product Websites prior to the error (stacktrace)</li><li>The request made on our servers</li><li>The data included in this request (this may contain CGC)</li><li>The Teacher’s browser if the error occurred in the Nanomonx Products Websites</li><li>The Teacher’s or Student’s browser if the error occurred in the Troubadour Services</li><li>Language defined by the Teacher for the use of the Services</li><li>The Teacher’s operating system if the error occurred in the Nanomonx Products Website</li><li>The Teacher’s or the Student’s operating system if the error occurred in the Troubadour Services</li></ul><p>Bugsnag neither uses nor consults the data collected, and only transfers it to us in the error reports.</p><p>Link to Bugsnag’s privacy policy:</p><p><a href="https://docs.bugsnag.com/legal/privacy-policy/" rel="noopener noreferrer" target="_blank">Bugsnag docs › Legal & terms › Privacy Policy</a></p><p><br></p><p><br></p><h2>Where do we keep the data</h2><p>All student data is stored through a central provider known as Amazon Web Services in secure environments across Canada. These devices are only accessible by our own technical staff. This also applies to backups. When you use our services, you always use a secure connection between your browser and our private environment on Amazon Web Service.</p><h2>Cookies</h2><p>Cookies are small data files that can be saved on your device when you use web pages or other online services. They are frequently used to improve web sites’ functionality. Other types of technologies can also save small amounts of data on your devices, we will integrate them to the concept of Cookies for the purpose of this document.</p><p>In order to provide the Services, Nanomonx only uses the following type of Cookies :</p><ul><li>Performance and functionality : These cookies are not essential but they help us personalize and optimize the user experience. For example, they can save a user’s preferences so they do not have to enter them more than once. They may also remember a user’s username and password so they do not have to enter them each time they access a web page.</li></ul><p><br></p><p>Our Services <strong>do not</strong> use cookies for advertising purposes.</p><h2>What does Nanomonx do with the collected data?</h2><p>Nanomonx’s business model is based on the sale of subscription packages to Teachers or educational institutions (schools, school boards or districts, etc.). This is the only way that Nanomonx generates revenue with the Services. Nanomonx will never generate revenue by selling or using its users’ data outside the scope of subscription packages sales.The information gathered is used for the following purposes :</p><ul><li>Allowing Managers to manage the Services and play with them</li><li>Allowing Students to play </li><li>Billing Managers or school administrations</li><li>Communicating Services updates or important information about the Services</li><li>Discovering bugs and fixing them</li></ul><p>Nanomonx does not share any personal information outside the Classroom except for the above cases, without the written consent of the Manager.</p><p>If authorized by the Manager, the Students can see the finished creations of other Students in their Classroom. The Managers can limit or prevent this access if they wish to.</p><p>Anonymized data, where individual users are not identifiable, is collected and is used for the purposes of :</p><ul><li>Statistics</li><li>Research and development</li><li>Customer support</li></ul><h2>Advertisements and marketing</h2><p>The Services do not show Students any advertisements, whether for other Nanomonx products or other companies’ products.</p><h2>Data deletion</h2><p>Personal information can be deleted by written request from the Manager or parent or by the Students themselves if they are 14 years old or older.</p><p><strong>Student information</strong></p><p>Otherwise, student’s personal information will be deleted in the following scenarios : </p><p>Scenario 1 : </p><p>The Student does not have a Manager adult linked to their his account with a valid email or a personal confirmed email and the student has not signed in for 23 months.</p><p>Result : The student account is automatically anonymized.</p><p> </p><p>Scenario 2 : </p><p>The Sstudent has a Managern adult linked to their his account with a valid email address or a personal confirmed email but has not signed in for 23 months.</p><p>Result : An email is sent to the email addresses linked to the account, mentioning the upcoming deletion of the account. The email contains a link to prevent the deletion, thus resetting the 23 -months period. If the link is not clicked, the student account is automatically anonymized.</p><p> </p><p>Scenario 3 :</p><p>The student creates an account via the fast access link (usually used in class) and no consent is given by the teacher or a tutor within 72 24 hours.</p><p>Result : The student account is automatically anonymized.</p><p> </p><p>Scenario 4 :</p><p>The student does not have an adult linked to his account with a valid email or a personal confirmed email, such as in scenario 1. His account becomes <em>overridable, </em>meaning that if another student wants to use the same username, the initial account will be anonymized.</p><p> </p><p><strong>Manager</strong><strong>information</strong></p><p>When the teacher, parent, tutor, school staff or any other adults has not signed in for 22 months and has no valid subscription, we will send an first email to warn of the upcoming account anonymization will be sent.</p><p>If the link to prevent the anonymization is not clicked, we will send a second email later.</p><p>If the link in the second email is not clicked, the account will be anonymized a month later for a total of 24 months of inactivity.</p><p>Both warning emails also contain a link to anonymize the account right away.</p><h2>Security policy</h2><p>Nanomonx uses industry standards of protection to prevent users’ data from being accessed, used, modified or destroyed by third parties. The methods used include, but may not be limited to:</p><ul><li>Containment of database(s) inside a Virtual Private Cloud (VPC), access to which is extremely restricted</li><li>Encryption of database data in transit and at rest</li><li>Use of SSL / HTTPS for all data transmission over the Internet</li><li>Multi-factor authentication on administrator-level access to third- party tools </li><li>Code reviews track security vulnerabilities</li><li>Firewalls, private keys, anti-virus protection, and encrypted local hard drives</li></ul><p>Note that data security cannot be 100% guaranteed due to constant advances in hacking methods and technologies. Nanomonx cannot be held responsible in the event of lost or altered user data. If any data breach occurs, concerned Manager users will be notified by email as soon as possible, and measures will be taken at the earliest opportunity to mitigate the risks associated with this data breach..</p><p> </p><h2>Classroom Generated Content</h2><p>In their use of the Services, Teachers and Students generate a lot of content (CGC). It is the Teacher’s responsibility to make sure that CGC is appropriate for their Students. Nanomonx will neither monitor nor control this GCC nor be held responsible. The Services allow the Teacher to read and control this CGC before it is shared within, or outside of, the Classroom.</p><h2>Access to personal data</h2><p>If they forget their information and cannot login, Students cannot access their own private data. They can obtain this data (display name and username) only by asking their Teacher, who can access it through the Nanomonx Products Websites. Neither the Students or their Teacher have access to the Students’ passwords, except of course at the time of its creation or reinitialization. Even though the information collected on a Student is available to the Teacher, Nanomonx can also provide this data to the Students’ parents or the Students themselves if they are 14 years old or older, upon written request.</p><h2>Change in ownership</h2><p>In the event where some or all of Nanomonx and its assets are purchased or merged with a third party, users’ personal information would be part of the transferred assets. This Privacy Policy would continue to apply and the new owner would only be allowed to manage users’ data in accordance with this Policy (unless the user agrees to a new privacy policy). Nanomonx will notify the Teacher users of such transactions in the 30 days following the transaction, either by updating its website or by email. If you do not accept the information transfer to the third party, you can request that the information be deleted and we will comply.</p><p>In the unlikely event that Nanomonx should cease its operations, all personal data will be deleted in the 12 months following the end of its operations.</p><h2>Disclosure of information to comply with legal obligations</h2><p>Nanomonx can disclose certain user personal information if it believes, in good faith, that this is mandatory to comply with certain legal obligations such as a subpoena or any other legal process. We could have the obligation to disclose personal information if it is needed in order to protect the rights, property and security of Nanomonx, its employees, its community or other, or to prevent the violation of our current contractual agreements. This includes, without restricting itself to, the sharing of information with other companies or organizations for fraud protection or to comply with governmental requirements.</p><h2>Changes and updates to this Privacy Policy</h2><p>This Privacy Policy takes effect on January August 1st, 20232 and the current version is 1.3. Nanomonx may, on rare occasions and at its sole discretion and without prior notice, update, revise, modify or add to the content of this Privacy Policy. </p><p>If Nanomonx changes this Policy in any way, a notice will be sent to the Managers subscribing to the Services with a link giving access to the new privacy policy. The new version of the policy will also be made available on Nanomonx’s website. </p><p>During a Manager's first connection to one of the Nanomonx Website products following a material change to this privacy policy, Nanomonx will request the Manager to review and confirm acceptance of this new Privacy Policy by clicking on an “I agree” button before continuing to use the Services. </p><p>As we do not collect any information that would enable us to directly communicate with the Students or their parents, and since regulations such as COPPA allow the Teacher to act on behalf of the parent to provide consent to the collection of children’s personal information, Nanomonx requires that the Teacher accepts the terms of this new Privacy Policy before collecting any information on his or her Students. It is the responsibility of the Teacher to communicate to the Students’ parents the contents of this new Privacy Policy, and to make sure they consent to them.</p><h2>Incident handling</h2><p>At Nanomonx, we take incident handling and disclosure very seriously. A Nanomonx Security Committee ensures that the data security program and the data breach action plan are updated at all times. Those documents can be provided upon request.</p><p>Here is a brief summary of our action plan in case of a data breach : </p><p><br></p><ul><li>Once the breach has been contained, the Communications Manager will be able to communicate with affected 3rd parties. </li><li>If the affected parties are internal to Nanomonx, the Product Manager will handle communications with employees.</li><li>We must communicate the following information:</li><li>Which users were affected</li><li>What types of data was accessed</li><li>E.g. Passwords, usernames, other personally identifiable information (PII)</li><li>How long the data breach has been exposed</li><li>If child data was breached</li><li>If the breach has been dealt with</li><li>Ideally, this will be done simultaneously with all affected parties. If a serious breach occurs, we will also notify users through social media. </li><li>There are also certain situations where we are <strong>legally required</strong> to report breaches to the government and to affected parties. </li><li>Link to the Canada r<a href="https://www.priv.gc.ca/en/privacy-topics/business-privacy/safeguards-and-breaches/privacy-breaches/respond-to-a-privacy-breach-at-your-business/gd_pb_201810/#_Part_1" rel="noopener noreferrer" target="_blank">egulations</a></li><li>Link to <a href="https://www.cai.gouv.qc.ca/espace-evolutif-modernisation-lois/thematiques/incidents-confidentialite/" rel="noopener noreferrer" target="_blank">the (in progress) Quebec regulations</a></li><li>There may be other regulations that apply based on the localities of the affected users. Part of this step is working out if other notifications need to be sent out. </li><li>The Quebec and Canada regulations require notification only if there is an "real risk of significant harm (RROSH) to an individual." At the time of writing this document, this is a standard that we will not follow as we do not retain this sensitive information on our users.</li></ul><p><br></p><p><br></p><h2>Consent for data collection and information management</h2><p>By accepting the terms of the Teacher Terms of Use Agreement, users expressly accept that Nanomonx will collect and use personal information in accordance with this Privacy Policy. Teacher users also declare that they have been informed of Nanomonx’s objectives when it collects, manages and uses this information, and understand how the confidentiality of this information will be protected. Teacher users also state that they understand that they are entitled to withdraw their consent to this Privacy Policy.</p><h2>Contact</h2><p>For any information concerning this Privacy Policy, contact Nanomonx at info@nanomonx.com.</p><p><br></p>";s:16:"display_as_popup";b:1;s:13:"popup_content";s:25571:"<p><span style="font-size: 32px">PRIVACY POLICY – NANOMONX INC.</span></p><h5>Version 1.3 – Effective as of August 1rst, 2022</h5><p><br></p><p>At Nanomonx, we believe in the privacy of our users and the protection of their data. We commit ourselves to protect the confidentiality of the data we collect from Students and Managers using our Services. We assure users of our Services that we only collect user data that is essential for educational purposes and the proper functioning of our Services. We will at no time sell or share Personally Identifiable Information (PII) with third parties. Student data will never be used for marketing purposes. </p><p>This document provides details about our Privacy Policy for data collected by the Services. This Privacy Policy is an integral part of the legal agreement binding the users and Nanomonx. It describes how Nanomonx collects, protects, uses, stores, shares and anonymizes destroys information and data generated during your use of the Services.</p><h2>GLOSSARY</h2><p>SERVICES</p><p>The Services consist of </p><ol><li><strong>The Website</strong> : The Website can be accessed from <a href="https://nanomonx.com/" rel="noopener noreferrer" target="_blank">https://nanomonx.com</a> and all its subdomains. Subdomains are separated this way : </li><li>Troubadour users, both Students and Managers use <a href="https://troubadour.nanomonx.com/" rel="noopener noreferrer" target="_blank">https://troubadour.nanomonx.com/</a></li><li>Boreal Tales Managers mostly use </li></ol><p><a href="https://constellation.nanomonx.com/" rel="noopener noreferrer" target="_blank">https://constellation.nanomonx.com/</a></p><p>This will not normally be available to students.</p><ol><li>Classroom management, subscription purchases and other administrative actions will be done on <a href="https://www.nanomonx.com/" rel="noopener noreferrer" target="_blank">https://www.nanomonx.comhttps://nanomonx.com</a> by Managers. This will not normally be available to students.</li><li>For Boreal Tales only, <strong>The Boreal Tales Application</strong>: Installed on the user’s device, the Boreal Tales Application is used by Students to do their work and by Managers to create reading assignments. </li></ol><p><br></p><p> </p><p>This Privacy Policy applies to all the above-mentioned Services.</p><p>USERS</p><p>The Services are used by two types of users :</p><ol><li>Parents, teachers, tutors or school administrators that can connect to any of the previously mentioned interfaces. In this document, we will use the term Manager for any adult managing subscription packages, a class or a group.</li><li>Students or children that connect only to the Boreal Tales Application and/or the Troubadour Website. In this document, we will use the term Student for any member of the classroom that is not a Manager.</li></ol><p> </p><p>THE CLASSROOM</p><p> Collectively, the Students of a class and the Manager who manages it.</p><p> </p><p>CLASSROOM GENERATED CONTENT (CGC)</p><p>The Services consist of a game that (1) allows Students to write text later corrected by the classroom Manager, and which can be shared with other Students in the Classroom, and/or with any other person, if so allowed by the Manager, and (2) allows Managers to create challenges they can share with their Students or with other Managers. Nanomonx thus records these texts (CGCs) to ensure their availability for these purposes. The sharing of this CGC inside or outside of the Classroom is therefore also subject to the school administration’s privacy policy, and Nanomonx cannot be held liable if confidential or sensitive information is shared in this context. Nevertheless, Nanomonx takes all necessary precautions to ensure that this GCC is not shared with people not authorized by the Manager, as described in this Privacy Policy.</p><h2>TERMS AND CONDITIONS</h2><p>Nanomonx intends to be compliant with the requirements of Canadian and US privacy laws, such as the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and the Children’s Online Privacy Protection Act (“COPPA”). </p><p>Since regulations such as COPPA authorize the teacher to act on behalf of the parent to provide consent to the collection of children’s personal information, Nanomonx requires that either the teacher or the parent accepts the terms of this Privacy Policy before collecting any information on his or her Students and keeping them for a period longer than 24 hours. If the teacher consents, he or she is responsible for communicating the contents of this Privacy Policy to the parents of the students and must be assured of their consent. </p><p>If you do not agree to the terms and conditions of this Privacy Policy, you should not submit information to or register an account with us, or use the Services.</p><h2>CONSENT</h2><p>As mentioned above, consent to the collection of private information can be given either by the teacher or the parent. If the Student Account is created by a parent or teacher, accepting our User Terms will count as Consent.a consent form is provided at the time of creation.</p><p><br></p><p>We also have a system where students are able to join a Classroom through a Quick Access Code. A Student Account created this way will need to be validated within 72 24 hours by the Classroom’s Manager (parent or teacher) or it will be anonymized automatically since consent will not have been provided. </p><h2> </h2><h2>COLLECTED DATA</h2><h3>Managers:</h3><p>In order to provide the Services, Nanomonx collects personal information from Managers for the purposes of :</p><ul><li>Logging in a user to the Services</li><li>Sales and billing</li><li>Services functionality</li><li>Managers submitting challenges to Students</li><li>Students submitting creations to Managers</li><li>Completing challenges as would a Student</li><li>Ensure service availability and reliability</li></ul><p>The following information, relative to the Manager, can be collected :</p><ul><li>Email address</li><li>Billing and shipping address</li><li>Browser and device used</li><li>Name of the school, school level</li><li>Payment information</li><li>Services data</li><li>Content created by the Manager (challenges, Student work corrections, comments to Students, etc.)</li><li>Service Usage Data (connections, subscription packages purchased or transferred, etc.) </li><li>Data related to errors and exceptions</li></ul><h3>Students :</h3><p>In order to provide the Services, Nanomonx collects information about Students for the purposes of :</p><ul><li>Logging in a user in the application</li><li>Services functionality</li><li>Students submitting creations to Managers or correcting their work</li></ul><p>The following information, relative to the Student, can be collected or inferred:</p><ul><li>Username, can be an email address.</li><li>Display name, selected, entered and/or approved by the Manager</li><li>School level, Manager’s name</li><li>Services data (avatar, usage time, number of words written, etc.)</li><li>Content created by the Student (worlds and text created by the Student)</li><li>Data related to errors and exceptions</li><li>Linked email, an email address used in case of a lost password. Can be the same as username, a parent’s, etc.</li></ul><p>Note that the only personally identifiable information (PII) we might collect for a Student are :</p><ol><li>Display name : This can be anything and Nanomonx does not require real names to be used. Since it is often useful for Managers to use real names, they are often used in this case.</li><li>Username : Again, the username does not have to be personally identifiable. Using a Student’s email as a username is very efficient and this information is sometimes collected.</li><li>Linked Email : For things like handling lost passwords, providing warnings before we delete students data or other essential functionality, an optional Linked Email can be added to a Student Account. This email will typically be the parent or the student’s own email. </li></ol><p>Apart from the above, we never directly ask the Student for any personally identifiable data.</p><p> </p><p>In order to provide the Services, Nanomonx does not collect the following information:</p><ul><li>Physiological and biometric data</li><li>Geolocation data</li><li>Contacts or friends list of the user</li><li>Any data about other applications’ usage on the device</li><li>Internet navigation history</li></ul><h2 id="h_8494268991707019">THIRD PARTIES</h2><p>In order to provide the Services, Nanomonx works with third parties. The collected Student data is only shared with third parties that have privacy policies that are consistent with our own Policy. Nanomonx shares data with the following third parties:</p><p><br></p><h3>For non-student data</h3><p>For Managers, we use a more diverse set of tools to maintain the business relationship:</p><ol><li>Customer support and relationship tools</li><li>Newsletter subscriptions</li><li>Business analysis</li><li>Billing and Invoicing</li><li>Online payment of subscriptions</li></ol><p>While they are not restricted to a single vendor and geographical location, those tools and suppliers have proper privacy policies and terms of service that we can provide. </p><h3>Unity (for The Boreal Tales Application only)</h3><p>The Boreal Tales Application is developed using a software called Unity. Technical, anonymized data (data that cannot be linked to a precise user) is collected by Unity and consulted by Nanomonx. Information collected this way is solely used to find bugs, identify technical problems and improve the overall quality of the Boreal Tales Application. Note that CGC is never shared with Unity.</p><p>Unity can collect or infer the following information:</p><ul><li>Device IP address</li><li>Model platform type and operating system</li><li>Device manufacturer</li><li>Unique device identifiers</li><li>Country of install</li><li>Graphics card type</li><li>Technical details about the device’s components</li></ul><p>Link to the Privacy Policy of Unity (Note that Nanomonx does not use Unity’s Ad Services module, and that the sections of Unity’s privacy policy pertaining to this module are therefore not applicable) :</p><p><a href="https://unity3d.com/fr/legal/privacy-policy" rel="noopener noreferrer" target="_blank">Privacy Policy - Unity</a></p><p>Link to the Privacy Policy of Unity specifically addressing COPPA :</p><p><a href="https://docs.unity3d.com/Manual/UnityAnalyticsCOPPA.html" rel="noopener noreferrer" target="_blank">Unity - Manual: COPPA Compliance</a></p><h3> </h3><h3>Bugsnag (for Boreal Tales and Troubadour Services)</h3><p>Bugsnag is a platform generating automated error reports. These errors (bugs) can occur during data manipulation by the Boreal Tales Application or when interacting with Nanomonx Product Websites. Error reports are provided to Nanomonx only and are deleted after 60 days. These reports are solely used by Nanomonx to identify the causes of the errors in order to fix them and provide a better experience with the Services.</p><p>The data that can be captured by Bugsnag consists of :</p><ul><li>The username (email address of the Teacher or username of the Student)</li><li>The list of actions performed by the Teacher in the Nanomonx Product Websites prior to the error (stacktrace)</li><li>The request made on our servers</li><li>The data included in this request (this may contain CGC)</li><li>The Teacher’s browser if the error occurred in the Nanomonx Products Websites</li><li>The Teacher’s or Student’s browser if the error occurred in the Troubadour Services</li><li>Language defined by the Teacher for the use of the Services</li><li>The Teacher’s operating system if the error occurred in the Nanomonx Products Website</li><li>The Teacher’s or the Student’s operating system if the error occurred in the Troubadour Services</li></ul><p>Bugsnag neither uses nor consults the data collected, and only transfers it to us in the error reports.</p><p>Link to Bugsnag’s privacy policy:</p><p><a href="https://docs.bugsnag.com/legal/privacy-policy/" rel="noopener noreferrer" target="_blank">Bugsnag docs › Legal & terms › Privacy Policy</a></p><p><br></p><p><br></p><h2>WHERE DO WE KEEP THE DATA</h2><p>All student data is stored through a central provider known as Amazon Web Services in secure environments across Canada. These devices are only accessible by our own technical staff. This also applies to backups. When you use our services, you always use a secure connection between your browser and our private environment on Amazon Web Service.</p><h2>COOKIES</h2><p>Cookies are small data files that can be saved on your device when you use web pages or other online services. They are frequently used to improve web sites’ functionality. Other types of technologies can also save small amounts of data on your devices, we will integrate them to the concept of Cookies for the purpose of this document.</p><p>In order to provide the Services, Nanomonx only uses the following type of Cookies :</p><ul><li>Performance and functionality : These cookies are not essential but they help us personalize and optimize the user experience. For example, they can save a user’s preferences so they do not have to enter them more than once. They may also remember a user’s username and password so they do not have to enter them each time they access a web page.</li></ul><p><br></p><p>Our Services <strong>do not</strong> use cookies for advertising purposes.</p><h2>WHAT DOES NANOMONX DO WITH THE COLLECTED DATA?</h2><p>Nanomonx’s business model is based on the sale of subscription packages to Teachers or educational institutions (schools, school boards or districts, etc.). This is the only way that Nanomonx generates revenue with the Services. Nanomonx will never generate revenue by selling or using its users’ data outside the scope of subscription packages sales.The information gathered is used for the following purposes :</p><ul><li>Allowing Managers to manage the Services and play with them</li><li>Allowing Students to play </li><li>Billing Managers or school administrations</li><li>Communicating Services updates or important information about the Services</li><li>Discovering bugs and fixing them</li></ul><p>Nanomonx does not share any personal information outside the Classroom except for the above cases, without the written consent of the Manager.</p><p>If authorized by the Manager, the Students can see the finished creations of other Students in their Classroom. The Managers can limit or prevent this access if they wish to.</p><p>Anonymized data, where individual users are not identifiable, is collected and is used for the purposes of :</p><ul><li>Statistics</li><li>Research and development</li><li>Customer support</li></ul><h2>ADVERTISEMENTS AND MARKETING</h2><p>The Services do not show Students any advertisements, whether for other Nanomonx products or other companies’ products.</p><h2>DATA DELETION</h2><p>Personal information can be deleted by written request from the Manager or parent or by the Students themselves if they are 14 years old or older.</p><p><strong>Student information</strong></p><p>Otherwise, student’s personal information will be deleted in the following scenarios : </p><p>Scenario 1 :</p><p>The Student does not have a Manager adult linked to their his account with a valid email or a personal confirmed email and the student has not signed in for 23 months.</p><p>Result : The student account is automatically anonymized.</p><p> </p><p>Scenario 2 :</p><p>The Sstudent has a Managern adult linked to their his account with a valid email address or a personal confirmed email but has not signed in for 23 months.</p><p>Result : An email is sent to the email addresses linked to the account, mentioning the upcoming deletion of the account. The email contains a link to prevent the deletion, thus resetting the 23 -months period. If the link is not clicked, the student account is automatically anonymized.</p><p> </p><p>Scenario 3 :</p><p>The student creates an account via the fast access link (usually used in class) and no consent is given by the teacher or a tutor within 72 24 hours.</p><p>Result : The student account is automatically anonymized.</p><p> </p><p>Scenario 4 :</p><p>The student does not have an adult linked to his account with a valid email or a personal confirmed email, such as in scenario 1. His account becomes <em>overridable, </em>meaning that if another student wants to use the same username, the initial account will be anonymized.</p><p> </p><p><strong>Manager</strong><strong>information</strong></p><p>When the teacher, parent, tutor, school staff or any other adults has not signed in for 22 months and has no valid subscription, we will send an first email to warn of the upcoming account anonymization will be sent.</p><p>If the link to prevent the anonymization is not clicked, we will send a second email later.</p><p>If the link in the second email is not clicked, the account will be anonymized a month later for a total of 24 months of inactivity.</p><p>Both warning emails also contain a link to anonymize the account right away.</p><h2>SECURITY POLICY</h2><p>Nanomonx uses industry standards of protection to prevent users’ data from being accessed, used, modified or destroyed by third parties. The methods used include, but may not be limited to:</p><ul><li>Containment of database(s) inside a Virtual Private Cloud (VPC), access to which is extremely restricted</li><li>Encryption of database data in transit and at rest</li><li>Use of SSL / HTTPS for all data transmission over the Internet</li><li>Multi-factor authentication on administrator-level access to third- party tools </li><li>Code reviews track security vulnerabilities</li><li>Firewalls, private keys, anti-virus protection, and encrypted local hard drives</li></ul><p>Note that data security cannot be 100% guaranteed due to constant advances in hacking methods and technologies. Nanomonx cannot be held responsible in the event of lost or altered user data. If any data breach occurs, concerned Manager users will be notified by email as soon as possible, and measures will be taken at the earliest opportunity to mitigate the risks associated with this data breach..</p><p> </p><h2>CLASSROOM GENERATED CONTENT</h2><p>In their use of the Services, Teachers and Students generate a lot of content (CGC). It is the Teacher’s responsibility to make sure that CGC is appropriate for their Students. Nanomonx will neither monitor nor control this GCC nor be held responsible. The Services allow the Teacher to read and control this CGC before it is shared within, or outside of, the Classroom.</p><h2>ACCESS TO PERSONAL DATA</h2><p>If they forget their information and cannot login, Students cannot access their own private data. They can obtain this data (display name and username) only by asking their Teacher, who can access it through the Nanomonx Products Websites. Neither the Students or their Teacher have access to the Students’ passwords, except of course at the time of its creation or reinitialization. Even though the information collected on a Student is available to the Teacher, Nanomonx can also provide this data to the Students’ parents or the Students themselves if they are 14 years old or older, upon written request.</p><h2>CHANGE IN OWNERSHIP</h2><p>In the event where some or all of Nanomonx and its assets are purchased or merged with a third party, users’ personal information would be part of the transferred assets. This Privacy Policy would continue to apply and the new owner would only be allowed to manage users’ data in accordance with this Policy (unless the user agrees to a new privacy policy). Nanomonx will notify the Teacher users of such transactions in the 30 days following the transaction, either by updating its website or by email. If you do not accept the information transfer to the third party, you can request that the information be deleted and we will comply.</p><p>In the unlikely event that Nanomonx should cease its operations, all personal data will be deleted in the 12 months following the end of its operations.</p><h2>DISCLOSURE OF INFORMATION TO COMPLY WITH LEGAL OBLIGATIONS</h2><p>Nanomonx can disclose certain user personal information if it believes, in good faith, that this is mandatory to comply with certain legal obligations such as a subpoena or any other legal process. We could have the obligation to disclose personal information if it is needed in order to protect the rights, property and security of Nanomonx, its employees, its community or other, or to prevent the violation of our current contractual agreements. This includes, without restricting itself to, the sharing of information with other companies or organizations for fraud protection or to comply with governmental requirements.</p><h2>CHANGES AND UPDATES TO THIS PRIVACY POLICY</h2><p>This Privacy Policy takes effect on January August 1st, 20232 and the current version is 1.3. Nanomonx may, on rare occasions and at its sole discretion and without prior notice, update, revise, modify or add to the content of this Privacy Policy. </p><p>If Nanomonx changes this Policy in any way, a notice will be sent to the Managers subscribing to the Services with a link giving access to the new privacy policy. The new version of the policy will also be made available on Nanomonx’s website. </p><p>During a Manager's first connection to one of the Nanomonx Website products following a material change to this privacy policy, Nanomonx will request the Manager to review and confirm acceptance of this new Privacy Policy by clicking on an “I agree” button before continuing to use the Services. </p><p>As we do not collect any information that would enable us to directly communicate with the Students or their parents, and since regulations such as COPPA allow the Teacher to act on behalf of the parent to provide consent to the collection of children’s personal information, Nanomonx requires that the Teacher accepts the terms of this new Privacy Policy before collecting any information on his or her Students. It is the responsibility of the Teacher to communicate to the Students’ parents the contents of this new Privacy Policy, and to make sure they consent to them.</p><h2>INCIDENT HANDLING</h2><p>At Nanomonx, we take incident handling and disclosure very seriously. A Nanomonx Security Committee ensures that the data security program and the data breach action plan are updated at all times. Those documents can be provided upon request.</p><p>Here is a brief summary of our action plan in case of a data breach : </p><p><br></p><ul><li>Once the breach has been contained, the Communications Manager will be able to communicate with affected 3rd parties. </li><li>If the affected parties are internal to Nanomonx, the Product Manager will handle communications with employees.</li><li>We must communicate the following information:</li><li>Which users were affected</li><li>What types of data was accessed</li><li>E.g. Passwords, usernames, other personally identifiable information (PII)</li><li>How long the data breach has been exposed</li><li>If child data was breached</li><li>If the breach has been dealt with</li><li>Ideally, this will be done simultaneously with all affected parties. If a serious breach occurs, we will also notify users through social media. </li><li>There are also certain situations where we are <strong>legally required</strong> to report breaches to the government and to affected parties. </li><li>Link to the Canada r<a href="https://www.priv.gc.ca/en/privacy-topics/business-privacy/safeguards-and-breaches/privacy-breaches/respond-to-a-privacy-breach-at-your-business/gd_pb_201810/#_Part_1" rel="noopener noreferrer" target="_blank">egulations</a></li><li>Link to <a href="https://www.cai.gouv.qc.ca/espace-evolutif-modernisation-lois/thematiques/incidents-confidentialite/" rel="noopener noreferrer" target="_blank">the (in progress) Quebec regulations</a></li><li>There may be other regulations that apply based on the localities of the affected users. Part of this step is working out if other notifications need to be sent out. </li><li>The Quebec and Canada regulations require notification only if there is an "real risk of significant harm (RROSH) to an individual." At the time of writing this document, this is a standard that we will not follow as we do not retain this sensitive information on our users.</li></ul><p><br></p><p><br></p><h2>CONSENT FOR DATA COLLECTION AND INFORMATION MANAGEMENT</h2><p>By accepting the terms of the Teacher Terms of Use Agreement, users expressly accept that Nanomonx will collect and use personal information in accordance with this Privacy Policy. Teacher users also declare that they have been informed of Nanomonx’s objectives when it collects, manages and uses this information, and understand how the confidentiality of this information will be protected. Teacher users also state that they understand that they are entitled to withdraw their consent to this Privacy Policy.</p><h2>CONTACT</h2><p>For any information concerning this Privacy Policy, contact Nanomonx at info@nanomonx.com.</p><p><br></p>";s:15:"display_as_page";b:0;s:12:"page_content";N;s:20:"is_marked_as_deleted";b:0;s:10:"deleted_at";N;s:19:"information_page_id";i:1;s:11:"language_id";i:14;s:16:"information_page";O:40:"Doctrine\ORM\Cache\AssociationCacheEntry":2:{s:5:"class";s:45:"App\Entity\PageContentManager\InformationPage";s:10:"identifier";a:1:{s:2:"id";i:1;}}s:8:"language";O:40:"Doctrine\ORM\Cache\AssociationCacheEntry":2:{s:5:"class";s:19:"App\Entity\Language";s:10:"identifier";a:1:{s:2:"id";i:14;}}}} |
| 8 | 1.65 ms | default | EXEC |
| 9 | 0.69 ms | default | EXISTS -WiwMkH6Gd:DC2_REGION_nanomonx_app.entity.pagecontentmanager.informationpagetranslation_5 |
| 10 | 0.69 ms | default | MGET -WiwMkH6Gd:DC2_REGION_nanomonx_app.entity.pagecontentmanager.informationpagetranslation_5 |
| 11 | 0.01 ms | default | MULTI 2 |
| 12 | 0.13 ms | default | SETEX -WiwMkH6Gd:DC2_REGION_nanomonx_app.entity.pagecontentmanager.informationpagetranslation_5 3600 O:35:"Doctrine\ORM\Cache\EntityCacheEntry":2:{s:5:"class";s:56:"App\Entity\PageContentManager\InformationPageTranslation";s:4:"data";a:14:{s:2:"id";i:5;s:4:"name";s:28:"The super top page de Joseph";s:5:"route";s:9:"joseph-en";s:14:"common_content";s:25531:"<h1>Privacy Policy – Nanomonx inc.</h1><h5>Version 1.3 – Effective as of August 1rst, 2022</h5><p>At Nanomonx, we believe in the privacy of our users and the protection of their data. We commit ourselves to protect the confidentiality of the data we collect from Students and Managers using our Services. We assure users of our Services that we only collect user data that is essential for educational purposes and the proper functioning of our Services. We will at no time sell or share Personally Identifiable Information (PII) with third parties. Student data will never be used for marketing purposes. </p><p>This document provides details about our Privacy Policy for data collected by the Services. This Privacy Policy is an integral part of the legal agreement binding the users and Nanomonx. It describes how Nanomonx collects, protects, uses, stores, shares and anonymizes destroys information and data generated during your use of the Services.</p><h2>Glossary</h2><p>SERVICES</p><p>The Services consist of </p><ol><li><strong>The Website</strong> : The Website can be accessed from <a href="https://nanomonx.com" rel="noopener noreferrer" target="_blank">https://nanomonx.com</a> and all its subdomains. Subdomains are separated this way : </li><li>Troubadour users, both Students and Managers use <a href="https://troubadour.nanomonx.com/" rel="noopener noreferrer" target="_blank">https://troubadour.nanomonx.com/</a></li><li>Boreal Tales Managers mostly use </li></ol><p><a href="https://constellation.nanomonx.com/" rel="noopener noreferrer" target="_blank">https://constellation.nanomonx.com/</a></p><p> This will not normally be available to students.</p><ol><li>Classroom management, subscription purchases and other administrative actions will be done on <a href="https://www.nanomonx.com" rel="noopener noreferrer" target="_blank">https://www.nanomonx.comhttps://nanomonx.com</a> by Managers. This will not normally be available to students.</li><li>For Boreal Tales only, <strong>The Boreal Tales Application</strong>: Installed on the user’s device, the Boreal Tales Application is used by Students to do their work and by Managers to create reading assignments. </li></ol><p><br></p><p> </p><p>This Privacy Policy applies to all the above-mentioned Services.</p><p>USERS</p><p>The Services are used by two types of users :</p><ol><li>Parents, teachers, tutors or school administrators that can connect to any of the previously mentioned interfaces. In this document, we will use the term Manager for any adult managing subscription packages, a class or a group.</li><li>Students or children that connect only to the Boreal Tales Application and/or the Troubadour Website. In this document, we will use the term Student for any member of the classroom that is not a Manager.</li></ol><p> </p><p>THE CLASSROOM</p><p> Collectively, the Students of a class and the Manager who manages it.</p><p> </p><p>CLASSROOM GENERATED CONTENT (CGC)</p><p> The Services consist of a game that (1) allows Students to write text later corrected by the classroom Manager, and which can be shared with other Students in the Classroom, and/or with any other person, if so allowed by the Manager, and (2) allows Managers to create challenges they can share with their Students or with other Managers. Nanomonx thus records these texts (CGCs) to ensure their availability for these purposes. The sharing of this CGC inside or outside of the Classroom is therefore also subject to the school administration’s privacy policy, and Nanomonx cannot be held liable if confidential or sensitive information is shared in this context. Nevertheless, Nanomonx takes all necessary precautions to ensure that this GCC is not shared with people not authorized by the Manager, as described in this Privacy Policy.</p><h2>Terms and conditions</h2><p>Nanomonx intends to be compliant with the requirements of Canadian and US privacy laws, such as the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and the Children’s Online Privacy Protection Act (“COPPA”). </p><p>Since regulations such as COPPA authorize the teacher to act on behalf of the parent to provide consent to the collection of children’s personal information, Nanomonx requires that either the teacher or the parent accepts the terms of this Privacy Policy before collecting any information on his or her Students and keeping them for a period longer than 24 hours. If the teacher consents, he or she is responsible for communicating the contents of this Privacy Policy to the parents of the students and must be assured of their consent. </p><p>If you do not agree to the terms and conditions of this Privacy Policy, you should not submit information to or register an account with us, or use the Services.</p><h2>Consent</h2><p>As mentioned above, consent to the collection of private information can be given either by the teacher or the parent. If the Student Account is created by a parent or teacher, accepting our User Terms will count as Consent.a consent form is provided at the time of creation.</p><p><br></p><p>We also have a system where students are able to join a Classroom through a Quick Access Code. A Student Account created this way will need to be validated within 72 24 hours by the Classroom’s Manager (parent or teacher) or it will be anonymized automatically since consent will not have been provided. </p><h2> </h2><h2 id="h_005449544135334605">Collected Data</h2><h3>Managers:</h3><p>In order to provide the Services, Nanomonx collects personal information from Managers for the purposes of :</p><ul><li>Logging in a user to the Services</li><li>Sales and billing</li><li>Services functionality</li><li>Managers submitting challenges to Students</li><li>Students submitting creations to Managers</li><li>Completing challenges as would a Student</li><li>Ensure service availability and reliability</li></ul><p>The following information, relative to the Manager, can be collected :</p><ul><li>Email address</li><li>Billing and shipping address</li><li>Browser and device used</li><li>Name of the school, school level</li><li>Payment information</li><li>Services data</li><li>Content created by the Manager (challenges, Student work corrections, comments to Students, etc.)</li><li>Service Usage Data (connections, subscription packages purchased or transferred, etc.) </li><li>Data related to errors and exceptions</li></ul><h3>Students :</h3><p>In order to provide the Services, Nanomonx collects information about Students for the purposes of :</p><ul><li>Logging in a user in the application</li><li>Services functionality</li><li>Students submitting creations to Managers or correcting their work</li></ul><p>The following information, relative to the Student, can be collected or inferred:</p><ul><li>Username, can be an email address.</li><li>Display name, selected, entered and/or approved by the Manager</li><li>School level, Manager’s name</li><li>Services data (avatar, usage time, number of words written, etc.)</li><li>Content created by the Student (worlds and text created by the Student)</li><li>Data related to errors and exceptions</li><li>Linked email, an email address used in case of a lost password. Can be the same as username, a parent’s, etc.</li></ul><p>Note that the only personally identifiable information (PII) we might collect for a Student are :</p><ol><li>Display name : This can be anything and Nanomonx does not require real names to be used. Since it is often useful for Managers to use real names, they are often used in this case.</li><li>Username : Again, the username does not have to be personally identifiable. Using a Student’s email as a username is very efficient and this information is sometimes collected.</li><li>Linked Email : For things like handling lost passwords, providing warnings before we delete students data or other essential functionality, an optional Linked Email can be added to a Student Account. This email will typically be the parent or the student’s own email. </li></ol><p>Apart from the above, we never directly ask the Student for any personally identifiable data.</p><p> </p><p>In order to provide the Services, Nanomonx does not collect the following information:</p><ul><li>Physiological and biometric data</li><li>Geolocation data</li><li>Contacts or friends list of the user</li><li>Any data about other applications’ usage on the device</li><li>Internet navigation history</li></ul><h2>Third Parties</h2><p>In order to provide the Services, Nanomonx works with third parties. The collected Student data is only shared with third parties that have privacy policies that are consistent with our own Policy. Nanomonx shares data with the following third parties:</p><p><br></p><h3>For non-student data</h3><p>For Managers, we use a more diverse set of tools to maintain the business relationship:</p><ol><li>Customer support and relationship tools</li><li>Newsletter subscriptions</li><li>Business analysis</li><li>Billing and Invoicing</li><li>Online payment of subscriptions</li></ol><p>While they are not restricted to a single vendor and geographical location, those tools and suppliers have proper privacy policies and terms of service that we can provide. </p><h3>Unity (for The Boreal Tales Application only)</h3><p>The Boreal Tales Application is developed using a software called Unity. Technical, anonymized data (data that cannot be linked to a precise user) is collected by Unity and consulted by Nanomonx. Information collected this way is solely used to find bugs, identify technical problems and improve the overall quality of the Boreal Tales Application. Note that CGC is never shared with Unity.</p><p>Unity can collect or infer the following information:</p><ul><li>Device IP address</li><li>Model platform type and operating system</li><li>Device manufacturer</li><li>Unique device identifiers</li><li>Country of install</li><li>Graphics card type</li><li>Technical details about the device’s components</li></ul><p>Link to the Privacy Policy of Unity (Note that Nanomonx does not use Unity’s Ad Services module, and that the sections of Unity’s privacy policy pertaining to this module are therefore not applicable) :</p><p><a href="https://unity3d.com/fr/legal/privacy-policy" rel="noopener noreferrer" target="_blank">Privacy Policy - Unity</a></p><p>Link to the Privacy Policy of Unity specifically addressing COPPA :</p><p><a href="https://docs.unity3d.com/Manual/UnityAnalyticsCOPPA.html" rel="noopener noreferrer" target="_blank">Unity - Manual: COPPA Compliance</a></p><h3> </h3><h3>Bugsnag (for Boreal Tales and Troubadour Services)</h3><p>Bugsnag is a platform generating automated error reports. These errors (bugs) can occur during data manipulation by the Boreal Tales Application or when interacting with Nanomonx Product Websites. Error reports are provided to Nanomonx only and are deleted after 60 days. These reports are solely used by Nanomonx to identify the causes of the errors in order to fix them and provide a better experience with the Services.</p><p>The data that can be captured by Bugsnag consists of :</p><ul><li>The username (email address of the Teacher or username of the Student)</li><li>The list of actions performed by the Teacher in the Nanomonx Product Websites prior to the error (stacktrace)</li><li>The request made on our servers</li><li>The data included in this request (this may contain CGC)</li><li>The Teacher’s browser if the error occurred in the Nanomonx Products Websites</li><li>The Teacher’s or Student’s browser if the error occurred in the Troubadour Services</li><li>Language defined by the Teacher for the use of the Services</li><li>The Teacher’s operating system if the error occurred in the Nanomonx Products Website</li><li>The Teacher’s or the Student’s operating system if the error occurred in the Troubadour Services</li></ul><p>Bugsnag neither uses nor consults the data collected, and only transfers it to us in the error reports.</p><p>Link to Bugsnag’s privacy policy:</p><p><a href="https://docs.bugsnag.com/legal/privacy-policy/" rel="noopener noreferrer" target="_blank">Bugsnag docs › Legal & terms › Privacy Policy</a></p><p><br></p><p><br></p><h2>Where do we keep the data</h2><p>All student data is stored through a central provider known as Amazon Web Services in secure environments across Canada. These devices are only accessible by our own technical staff. This also applies to backups. When you use our services, you always use a secure connection between your browser and our private environment on Amazon Web Service.</p><h2>Cookies</h2><p>Cookies are small data files that can be saved on your device when you use web pages or other online services. They are frequently used to improve web sites’ functionality. Other types of technologies can also save small amounts of data on your devices, we will integrate them to the concept of Cookies for the purpose of this document.</p><p>In order to provide the Services, Nanomonx only uses the following type of Cookies :</p><ul><li>Performance and functionality : These cookies are not essential but they help us personalize and optimize the user experience. For example, they can save a user’s preferences so they do not have to enter them more than once. They may also remember a user’s username and password so they do not have to enter them each time they access a web page.</li></ul><p><br></p><p>Our Services <strong>do not</strong> use cookies for advertising purposes.</p><h2>What does Nanomonx do with the collected data?</h2><p>Nanomonx’s business model is based on the sale of subscription packages to Teachers or educational institutions (schools, school boards or districts, etc.). This is the only way that Nanomonx generates revenue with the Services. Nanomonx will never generate revenue by selling or using its users’ data outside the scope of subscription packages sales.The information gathered is used for the following purposes :</p><ul><li>Allowing Managers to manage the Services and play with them</li><li>Allowing Students to play </li><li>Billing Managers or school administrations</li><li>Communicating Services updates or important information about the Services</li><li>Discovering bugs and fixing them</li></ul><p>Nanomonx does not share any personal information outside the Classroom except for the above cases, without the written consent of the Manager.</p><p>If authorized by the Manager, the Students can see the finished creations of other Students in their Classroom. The Managers can limit or prevent this access if they wish to.</p><p>Anonymized data, where individual users are not identifiable, is collected and is used for the purposes of :</p><ul><li>Statistics</li><li>Research and development</li><li>Customer support</li></ul><h2>Advertisements and marketing</h2><p>The Services do not show Students any advertisements, whether for other Nanomonx products or other companies’ products.</p><h2>Data deletion</h2><p>Personal information can be deleted by written request from the Manager or parent or by the Students themselves if they are 14 years old or older.</p><p><strong>Student information</strong></p><p>Otherwise, student’s personal information will be deleted in the following scenarios : </p><p>Scenario 1 : </p><p>The Student does not have a Manager adult linked to their his account with a valid email or a personal confirmed email and the student has not signed in for 23 months.</p><p>Result : The student account is automatically anonymized.</p><p> </p><p>Scenario 2 : </p><p>The Sstudent has a Managern adult linked to their his account with a valid email address or a personal confirmed email but has not signed in for 23 months.</p><p>Result : An email is sent to the email addresses linked to the account, mentioning the upcoming deletion of the account. The email contains a link to prevent the deletion, thus resetting the 23 -months period. If the link is not clicked, the student account is automatically anonymized.</p><p> </p><p>Scenario 3 :</p><p>The student creates an account via the fast access link (usually used in class) and no consent is given by the teacher or a tutor within 72 24 hours.</p><p>Result : The student account is automatically anonymized.</p><p> </p><p>Scenario 4 :</p><p>The student does not have an adult linked to his account with a valid email or a personal confirmed email, such as in scenario 1. His account becomes <em>overridable, </em>meaning that if another student wants to use the same username, the initial account will be anonymized.</p><p> </p><p><strong>Manager</strong><strong>information</strong></p><p>When the teacher, parent, tutor, school staff or any other adults has not signed in for 22 months and has no valid subscription, we will send an first email to warn of the upcoming account anonymization will be sent.</p><p>If the link to prevent the anonymization is not clicked, we will send a second email later.</p><p>If the link in the second email is not clicked, the account will be anonymized a month later for a total of 24 months of inactivity.</p><p>Both warning emails also contain a link to anonymize the account right away.</p><h2>Security policy</h2><p>Nanomonx uses industry standards of protection to prevent users’ data from being accessed, used, modified or destroyed by third parties. The methods used include, but may not be limited to:</p><ul><li>Containment of database(s) inside a Virtual Private Cloud (VPC), access to which is extremely restricted</li><li>Encryption of database data in transit and at rest</li><li>Use of SSL / HTTPS for all data transmission over the Internet</li><li>Multi-factor authentication on administrator-level access to third- party tools </li><li>Code reviews track security vulnerabilities</li><li>Firewalls, private keys, anti-virus protection, and encrypted local hard drives</li></ul><p>Note that data security cannot be 100% guaranteed due to constant advances in hacking methods and technologies. Nanomonx cannot be held responsible in the event of lost or altered user data. If any data breach occurs, concerned Manager users will be notified by email as soon as possible, and measures will be taken at the earliest opportunity to mitigate the risks associated with this data breach..</p><p> </p><h2>Classroom Generated Content</h2><p>In their use of the Services, Teachers and Students generate a lot of content (CGC). It is the Teacher’s responsibility to make sure that CGC is appropriate for their Students. Nanomonx will neither monitor nor control this GCC nor be held responsible. The Services allow the Teacher to read and control this CGC before it is shared within, or outside of, the Classroom.</p><h2>Access to personal data</h2><p>If they forget their information and cannot login, Students cannot access their own private data. They can obtain this data (display name and username) only by asking their Teacher, who can access it through the Nanomonx Products Websites. Neither the Students or their Teacher have access to the Students’ passwords, except of course at the time of its creation or reinitialization. Even though the information collected on a Student is available to the Teacher, Nanomonx can also provide this data to the Students’ parents or the Students themselves if they are 14 years old or older, upon written request.</p><h2>Change in ownership</h2><p>In the event where some or all of Nanomonx and its assets are purchased or merged with a third party, users’ personal information would be part of the transferred assets. This Privacy Policy would continue to apply and the new owner would only be allowed to manage users’ data in accordance with this Policy (unless the user agrees to a new privacy policy). Nanomonx will notify the Teacher users of such transactions in the 30 days following the transaction, either by updating its website or by email. If you do not accept the information transfer to the third party, you can request that the information be deleted and we will comply.</p><p>In the unlikely event that Nanomonx should cease its operations, all personal data will be deleted in the 12 months following the end of its operations.</p><h2>Disclosure of information to comply with legal obligations</h2><p>Nanomonx can disclose certain user personal information if it believes, in good faith, that this is mandatory to comply with certain legal obligations such as a subpoena or any other legal process. We could have the obligation to disclose personal information if it is needed in order to protect the rights, property and security of Nanomonx, its employees, its community or other, or to prevent the violation of our current contractual agreements. This includes, without restricting itself to, the sharing of information with other companies or organizations for fraud protection or to comply with governmental requirements.</p><h2>Changes and updates to this Privacy Policy</h2><p>This Privacy Policy takes effect on January August 1st, 20232 and the current version is 1.3. Nanomonx may, on rare occasions and at its sole discretion and without prior notice, update, revise, modify or add to the content of this Privacy Policy. </p><p>If Nanomonx changes this Policy in any way, a notice will be sent to the Managers subscribing to the Services with a link giving access to the new privacy policy. The new version of the policy will also be made available on Nanomonx’s website. </p><p>During a Manager's first connection to one of the Nanomonx Website products following a material change to this privacy policy, Nanomonx will request the Manager to review and confirm acceptance of this new Privacy Policy by clicking on an “I agree” button before continuing to use the Services. </p><p>As we do not collect any information that would enable us to directly communicate with the Students or their parents, and since regulations such as COPPA allow the Teacher to act on behalf of the parent to provide consent to the collection of children’s personal information, Nanomonx requires that the Teacher accepts the terms of this new Privacy Policy before collecting any information on his or her Students. It is the responsibility of the Teacher to communicate to the Students’ parents the contents of this new Privacy Policy, and to make sure they consent to them.</p><h2>Incident handling</h2><p>At Nanomonx, we take incident handling and disclosure very seriously. A Nanomonx Security Committee ensures that the data security program and the data breach action plan are updated at all times. Those documents can be provided upon request.</p><p>Here is a brief summary of our action plan in case of a data breach : </p><p><br></p><ul><li>Once the breach has been contained, the Communications Manager will be able to communicate with affected 3rd parties. </li><li>If the affected parties are internal to Nanomonx, the Product Manager will handle communications with employees.</li><li>We must communicate the following information:</li><li>Which users were affected</li><li>What types of data was accessed</li><li>E.g. Passwords, usernames, other personally identifiable information (PII)</li><li>How long the data breach has been exposed</li><li>If child data was breached</li><li>If the breach has been dealt with</li><li>Ideally, this will be done simultaneously with all affected parties. If a serious breach occurs, we will also notify users through social media. </li><li>There are also certain situations where we are <strong>legally required</strong> to report breaches to the government and to affected parties. </li><li>Link to the Canada r<a href="https://www.priv.gc.ca/en/privacy-topics/business-privacy/safeguards-and-breaches/privacy-breaches/respond-to-a-privacy-breach-at-your-business/gd_pb_201810/#_Part_1" rel="noopener noreferrer" target="_blank">egulations</a></li><li>Link to <a href="https://www.cai.gouv.qc.ca/espace-evolutif-modernisation-lois/thematiques/incidents-confidentialite/" rel="noopener noreferrer" target="_blank">the (in progress) Quebec regulations</a></li><li>There may be other regulations that apply based on the localities of the affected users. Part of this step is working out if other notifications need to be sent out. </li><li>The Quebec and Canada regulations require notification only if there is an "real risk of significant harm (RROSH) to an individual." At the time of writing this document, this is a standard that we will not follow as we do not retain this sensitive information on our users.</li></ul><p><br></p><p><br></p><h2>Consent for data collection and information management</h2><p>By accepting the terms of the Teacher Terms of Use Agreement, users expressly accept that Nanomonx will collect and use personal information in accordance with this Privacy Policy. Teacher users also declare that they have been informed of Nanomonx’s objectives when it collects, manages and uses this information, and understand how the confidentiality of this information will be protected. Teacher users also state that they understand that they are entitled to withdraw their consent to this Privacy Policy.</p><h2>Contact</h2><p>For any information concerning this Privacy Policy, contact Nanomonx at info@nanomonx.com.</p><p><br></p>";s:16:"display_as_popup";b:1;s:13:"popup_content";s:25571:"<p><span style="font-size: 32px">PRIVACY POLICY – NANOMONX INC.</span></p><h5>Version 1.3 – Effective as of August 1rst, 2022</h5><p><br></p><p>At Nanomonx, we believe in the privacy of our users and the protection of their data. We commit ourselves to protect the confidentiality of the data we collect from Students and Managers using our Services. We assure users of our Services that we only collect user data that is essential for educational purposes and the proper functioning of our Services. We will at no time sell or share Personally Identifiable Information (PII) with third parties. Student data will never be used for marketing purposes. </p><p>This document provides details about our Privacy Policy for data collected by the Services. This Privacy Policy is an integral part of the legal agreement binding the users and Nanomonx. It describes how Nanomonx collects, protects, uses, stores, shares and anonymizes destroys information and data generated during your use of the Services.</p><h2>GLOSSARY</h2><p>SERVICES</p><p>The Services consist of </p><ol><li><strong>The Website</strong> : The Website can be accessed from <a href="https://nanomonx.com/" rel="noopener noreferrer" target="_blank">https://nanomonx.com</a> and all its subdomains. Subdomains are separated this way : </li><li>Troubadour users, both Students and Managers use <a href="https://troubadour.nanomonx.com/" rel="noopener noreferrer" target="_blank">https://troubadour.nanomonx.com/</a></li><li>Boreal Tales Managers mostly use </li></ol><p><a href="https://constellation.nanomonx.com/" rel="noopener noreferrer" target="_blank">https://constellation.nanomonx.com/</a></p><p>This will not normally be available to students.</p><ol><li>Classroom management, subscription purchases and other administrative actions will be done on <a href="https://www.nanomonx.com/" rel="noopener noreferrer" target="_blank">https://www.nanomonx.comhttps://nanomonx.com</a> by Managers. This will not normally be available to students.</li><li>For Boreal Tales only, <strong>The Boreal Tales Application</strong>: Installed on the user’s device, the Boreal Tales Application is used by Students to do their work and by Managers to create reading assignments. </li></ol><p><br></p><p> </p><p>This Privacy Policy applies to all the above-mentioned Services.</p><p>USERS</p><p>The Services are used by two types of users :</p><ol><li>Parents, teachers, tutors or school administrators that can connect to any of the previously mentioned interfaces. In this document, we will use the term Manager for any adult managing subscription packages, a class or a group.</li><li>Students or children that connect only to the Boreal Tales Application and/or the Troubadour Website. In this document, we will use the term Student for any member of the classroom that is not a Manager.</li></ol><p> </p><p>THE CLASSROOM</p><p> Collectively, the Students of a class and the Manager who manages it.</p><p> </p><p>CLASSROOM GENERATED CONTENT (CGC)</p><p>The Services consist of a game that (1) allows Students to write text later corrected by the classroom Manager, and which can be shared with other Students in the Classroom, and/or with any other person, if so allowed by the Manager, and (2) allows Managers to create challenges they can share with their Students or with other Managers. Nanomonx thus records these texts (CGCs) to ensure their availability for these purposes. The sharing of this CGC inside or outside of the Classroom is therefore also subject to the school administration’s privacy policy, and Nanomonx cannot be held liable if confidential or sensitive information is shared in this context. Nevertheless, Nanomonx takes all necessary precautions to ensure that this GCC is not shared with people not authorized by the Manager, as described in this Privacy Policy.</p><h2>TERMS AND CONDITIONS</h2><p>Nanomonx intends to be compliant with the requirements of Canadian and US privacy laws, such as the Personal Information Protection and Electronic Documents Act (“PIPEDA”) and the Children’s Online Privacy Protection Act (“COPPA”). </p><p>Since regulations such as COPPA authorize the teacher to act on behalf of the parent to provide consent to the collection of children’s personal information, Nanomonx requires that either the teacher or the parent accepts the terms of this Privacy Policy before collecting any information on his or her Students and keeping them for a period longer than 24 hours. If the teacher consents, he or she is responsible for communicating the contents of this Privacy Policy to the parents of the students and must be assured of their consent. </p><p>If you do not agree to the terms and conditions of this Privacy Policy, you should not submit information to or register an account with us, or use the Services.</p><h2>CONSENT</h2><p>As mentioned above, consent to the collection of private information can be given either by the teacher or the parent. If the Student Account is created by a parent or teacher, accepting our User Terms will count as Consent.a consent form is provided at the time of creation.</p><p><br></p><p>We also have a system where students are able to join a Classroom through a Quick Access Code. A Student Account created this way will need to be validated within 72 24 hours by the Classroom’s Manager (parent or teacher) or it will be anonymized automatically since consent will not have been provided. </p><h2> </h2><h2>COLLECTED DATA</h2><h3>Managers:</h3><p>In order to provide the Services, Nanomonx collects personal information from Managers for the purposes of :</p><ul><li>Logging in a user to the Services</li><li>Sales and billing</li><li>Services functionality</li><li>Managers submitting challenges to Students</li><li>Students submitting creations to Managers</li><li>Completing challenges as would a Student</li><li>Ensure service availability and reliability</li></ul><p>The following information, relative to the Manager, can be collected :</p><ul><li>Email address</li><li>Billing and shipping address</li><li>Browser and device used</li><li>Name of the school, school level</li><li>Payment information</li><li>Services data</li><li>Content created by the Manager (challenges, Student work corrections, comments to Students, etc.)</li><li>Service Usage Data (connections, subscription packages purchased or transferred, etc.) </li><li>Data related to errors and exceptions</li></ul><h3>Students :</h3><p>In order to provide the Services, Nanomonx collects information about Students for the purposes of :</p><ul><li>Logging in a user in the application</li><li>Services functionality</li><li>Students submitting creations to Managers or correcting their work</li></ul><p>The following information, relative to the Student, can be collected or inferred:</p><ul><li>Username, can be an email address.</li><li>Display name, selected, entered and/or approved by the Manager</li><li>School level, Manager’s name</li><li>Services data (avatar, usage time, number of words written, etc.)</li><li>Content created by the Student (worlds and text created by the Student)</li><li>Data related to errors and exceptions</li><li>Linked email, an email address used in case of a lost password. Can be the same as username, a parent’s, etc.</li></ul><p>Note that the only personally identifiable information (PII) we might collect for a Student are :</p><ol><li>Display name : This can be anything and Nanomonx does not require real names to be used. Since it is often useful for Managers to use real names, they are often used in this case.</li><li>Username : Again, the username does not have to be personally identifiable. Using a Student’s email as a username is very efficient and this information is sometimes collected.</li><li>Linked Email : For things like handling lost passwords, providing warnings before we delete students data or other essential functionality, an optional Linked Email can be added to a Student Account. This email will typically be the parent or the student’s own email. </li></ol><p>Apart from the above, we never directly ask the Student for any personally identifiable data.</p><p> </p><p>In order to provide the Services, Nanomonx does not collect the following information:</p><ul><li>Physiological and biometric data</li><li>Geolocation data</li><li>Contacts or friends list of the user</li><li>Any data about other applications’ usage on the device</li><li>Internet navigation history</li></ul><h2 id="h_8494268991707019">THIRD PARTIES</h2><p>In order to provide the Services, Nanomonx works with third parties. The collected Student data is only shared with third parties that have privacy policies that are consistent with our own Policy. Nanomonx shares data with the following third parties:</p><p><br></p><h3>For non-student data</h3><p>For Managers, we use a more diverse set of tools to maintain the business relationship:</p><ol><li>Customer support and relationship tools</li><li>Newsletter subscriptions</li><li>Business analysis</li><li>Billing and Invoicing</li><li>Online payment of subscriptions</li></ol><p>While they are not restricted to a single vendor and geographical location, those tools and suppliers have proper privacy policies and terms of service that we can provide. </p><h3>Unity (for The Boreal Tales Application only)</h3><p>The Boreal Tales Application is developed using a software called Unity. Technical, anonymized data (data that cannot be linked to a precise user) is collected by Unity and consulted by Nanomonx. Information collected this way is solely used to find bugs, identify technical problems and improve the overall quality of the Boreal Tales Application. Note that CGC is never shared with Unity.</p><p>Unity can collect or infer the following information:</p><ul><li>Device IP address</li><li>Model platform type and operating system</li><li>Device manufacturer</li><li>Unique device identifiers</li><li>Country of install</li><li>Graphics card type</li><li>Technical details about the device’s components</li></ul><p>Link to the Privacy Policy of Unity (Note that Nanomonx does not use Unity’s Ad Services module, and that the sections of Unity’s privacy policy pertaining to this module are therefore not applicable) :</p><p><a href="https://unity3d.com/fr/legal/privacy-policy" rel="noopener noreferrer" target="_blank">Privacy Policy - Unity</a></p><p>Link to the Privacy Policy of Unity specifically addressing COPPA :</p><p><a href="https://docs.unity3d.com/Manual/UnityAnalyticsCOPPA.html" rel="noopener noreferrer" target="_blank">Unity - Manual: COPPA Compliance</a></p><h3> </h3><h3>Bugsnag (for Boreal Tales and Troubadour Services)</h3><p>Bugsnag is a platform generating automated error reports. These errors (bugs) can occur during data manipulation by the Boreal Tales Application or when interacting with Nanomonx Product Websites. Error reports are provided to Nanomonx only and are deleted after 60 days. These reports are solely used by Nanomonx to identify the causes of the errors in order to fix them and provide a better experience with the Services.</p><p>The data that can be captured by Bugsnag consists of :</p><ul><li>The username (email address of the Teacher or username of the Student)</li><li>The list of actions performed by the Teacher in the Nanomonx Product Websites prior to the error (stacktrace)</li><li>The request made on our servers</li><li>The data included in this request (this may contain CGC)</li><li>The Teacher’s browser if the error occurred in the Nanomonx Products Websites</li><li>The Teacher’s or Student’s browser if the error occurred in the Troubadour Services</li><li>Language defined by the Teacher for the use of the Services</li><li>The Teacher’s operating system if the error occurred in the Nanomonx Products Website</li><li>The Teacher’s or the Student’s operating system if the error occurred in the Troubadour Services</li></ul><p>Bugsnag neither uses nor consults the data collected, and only transfers it to us in the error reports.</p><p>Link to Bugsnag’s privacy policy:</p><p><a href="https://docs.bugsnag.com/legal/privacy-policy/" rel="noopener noreferrer" target="_blank">Bugsnag docs › Legal & terms › Privacy Policy</a></p><p><br></p><p><br></p><h2>WHERE DO WE KEEP THE DATA</h2><p>All student data is stored through a central provider known as Amazon Web Services in secure environments across Canada. These devices are only accessible by our own technical staff. This also applies to backups. When you use our services, you always use a secure connection between your browser and our private environment on Amazon Web Service.</p><h2>COOKIES</h2><p>Cookies are small data files that can be saved on your device when you use web pages or other online services. They are frequently used to improve web sites’ functionality. Other types of technologies can also save small amounts of data on your devices, we will integrate them to the concept of Cookies for the purpose of this document.</p><p>In order to provide the Services, Nanomonx only uses the following type of Cookies :</p><ul><li>Performance and functionality : These cookies are not essential but they help us personalize and optimize the user experience. For example, they can save a user’s preferences so they do not have to enter them more than once. They may also remember a user’s username and password so they do not have to enter them each time they access a web page.</li></ul><p><br></p><p>Our Services <strong>do not</strong> use cookies for advertising purposes.</p><h2>WHAT DOES NANOMONX DO WITH THE COLLECTED DATA?</h2><p>Nanomonx’s business model is based on the sale of subscription packages to Teachers or educational institutions (schools, school boards or districts, etc.). This is the only way that Nanomonx generates revenue with the Services. Nanomonx will never generate revenue by selling or using its users’ data outside the scope of subscription packages sales.The information gathered is used for the following purposes :</p><ul><li>Allowing Managers to manage the Services and play with them</li><li>Allowing Students to play </li><li>Billing Managers or school administrations</li><li>Communicating Services updates or important information about the Services</li><li>Discovering bugs and fixing them</li></ul><p>Nanomonx does not share any personal information outside the Classroom except for the above cases, without the written consent of the Manager.</p><p>If authorized by the Manager, the Students can see the finished creations of other Students in their Classroom. The Managers can limit or prevent this access if they wish to.</p><p>Anonymized data, where individual users are not identifiable, is collected and is used for the purposes of :</p><ul><li>Statistics</li><li>Research and development</li><li>Customer support</li></ul><h2>ADVERTISEMENTS AND MARKETING</h2><p>The Services do not show Students any advertisements, whether for other Nanomonx products or other companies’ products.</p><h2>DATA DELETION</h2><p>Personal information can be deleted by written request from the Manager or parent or by the Students themselves if they are 14 years old or older.</p><p><strong>Student information</strong></p><p>Otherwise, student’s personal information will be deleted in the following scenarios : </p><p>Scenario 1 :</p><p>The Student does not have a Manager adult linked to their his account with a valid email or a personal confirmed email and the student has not signed in for 23 months.</p><p>Result : The student account is automatically anonymized.</p><p> </p><p>Scenario 2 :</p><p>The Sstudent has a Managern adult linked to their his account with a valid email address or a personal confirmed email but has not signed in for 23 months.</p><p>Result : An email is sent to the email addresses linked to the account, mentioning the upcoming deletion of the account. The email contains a link to prevent the deletion, thus resetting the 23 -months period. If the link is not clicked, the student account is automatically anonymized.</p><p> </p><p>Scenario 3 :</p><p>The student creates an account via the fast access link (usually used in class) and no consent is given by the teacher or a tutor within 72 24 hours.</p><p>Result : The student account is automatically anonymized.</p><p> </p><p>Scenario 4 :</p><p>The student does not have an adult linked to his account with a valid email or a personal confirmed email, such as in scenario 1. His account becomes <em>overridable, </em>meaning that if another student wants to use the same username, the initial account will be anonymized.</p><p> </p><p><strong>Manager</strong><strong>information</strong></p><p>When the teacher, parent, tutor, school staff or any other adults has not signed in for 22 months and has no valid subscription, we will send an first email to warn of the upcoming account anonymization will be sent.</p><p>If the link to prevent the anonymization is not clicked, we will send a second email later.</p><p>If the link in the second email is not clicked, the account will be anonymized a month later for a total of 24 months of inactivity.</p><p>Both warning emails also contain a link to anonymize the account right away.</p><h2>SECURITY POLICY</h2><p>Nanomonx uses industry standards of protection to prevent users’ data from being accessed, used, modified or destroyed by third parties. The methods used include, but may not be limited to:</p><ul><li>Containment of database(s) inside a Virtual Private Cloud (VPC), access to which is extremely restricted</li><li>Encryption of database data in transit and at rest</li><li>Use of SSL / HTTPS for all data transmission over the Internet</li><li>Multi-factor authentication on administrator-level access to third- party tools </li><li>Code reviews track security vulnerabilities</li><li>Firewalls, private keys, anti-virus protection, and encrypted local hard drives</li></ul><p>Note that data security cannot be 100% guaranteed due to constant advances in hacking methods and technologies. Nanomonx cannot be held responsible in the event of lost or altered user data. If any data breach occurs, concerned Manager users will be notified by email as soon as possible, and measures will be taken at the earliest opportunity to mitigate the risks associated with this data breach..</p><p> </p><h2>CLASSROOM GENERATED CONTENT</h2><p>In their use of the Services, Teachers and Students generate a lot of content (CGC). It is the Teacher’s responsibility to make sure that CGC is appropriate for their Students. Nanomonx will neither monitor nor control this GCC nor be held responsible. The Services allow the Teacher to read and control this CGC before it is shared within, or outside of, the Classroom.</p><h2>ACCESS TO PERSONAL DATA</h2><p>If they forget their information and cannot login, Students cannot access their own private data. They can obtain this data (display name and username) only by asking their Teacher, who can access it through the Nanomonx Products Websites. Neither the Students or their Teacher have access to the Students’ passwords, except of course at the time of its creation or reinitialization. Even though the information collected on a Student is available to the Teacher, Nanomonx can also provide this data to the Students’ parents or the Students themselves if they are 14 years old or older, upon written request.</p><h2>CHANGE IN OWNERSHIP</h2><p>In the event where some or all of Nanomonx and its assets are purchased or merged with a third party, users’ personal information would be part of the transferred assets. This Privacy Policy would continue to apply and the new owner would only be allowed to manage users’ data in accordance with this Policy (unless the user agrees to a new privacy policy). Nanomonx will notify the Teacher users of such transactions in the 30 days following the transaction, either by updating its website or by email. If you do not accept the information transfer to the third party, you can request that the information be deleted and we will comply.</p><p>In the unlikely event that Nanomonx should cease its operations, all personal data will be deleted in the 12 months following the end of its operations.</p><h2>DISCLOSURE OF INFORMATION TO COMPLY WITH LEGAL OBLIGATIONS</h2><p>Nanomonx can disclose certain user personal information if it believes, in good faith, that this is mandatory to comply with certain legal obligations such as a subpoena or any other legal process. We could have the obligation to disclose personal information if it is needed in order to protect the rights, property and security of Nanomonx, its employees, its community or other, or to prevent the violation of our current contractual agreements. This includes, without restricting itself to, the sharing of information with other companies or organizations for fraud protection or to comply with governmental requirements.</p><h2>CHANGES AND UPDATES TO THIS PRIVACY POLICY</h2><p>This Privacy Policy takes effect on January August 1st, 20232 and the current version is 1.3. Nanomonx may, on rare occasions and at its sole discretion and without prior notice, update, revise, modify or add to the content of this Privacy Policy. </p><p>If Nanomonx changes this Policy in any way, a notice will be sent to the Managers subscribing to the Services with a link giving access to the new privacy policy. The new version of the policy will also be made available on Nanomonx’s website. </p><p>During a Manager's first connection to one of the Nanomonx Website products following a material change to this privacy policy, Nanomonx will request the Manager to review and confirm acceptance of this new Privacy Policy by clicking on an “I agree” button before continuing to use the Services. </p><p>As we do not collect any information that would enable us to directly communicate with the Students or their parents, and since regulations such as COPPA allow the Teacher to act on behalf of the parent to provide consent to the collection of children’s personal information, Nanomonx requires that the Teacher accepts the terms of this new Privacy Policy before collecting any information on his or her Students. It is the responsibility of the Teacher to communicate to the Students’ parents the contents of this new Privacy Policy, and to make sure they consent to them.</p><h2>INCIDENT HANDLING</h2><p>At Nanomonx, we take incident handling and disclosure very seriously. A Nanomonx Security Committee ensures that the data security program and the data breach action plan are updated at all times. Those documents can be provided upon request.</p><p>Here is a brief summary of our action plan in case of a data breach : </p><p><br></p><ul><li>Once the breach has been contained, the Communications Manager will be able to communicate with affected 3rd parties. </li><li>If the affected parties are internal to Nanomonx, the Product Manager will handle communications with employees.</li><li>We must communicate the following information:</li><li>Which users were affected</li><li>What types of data was accessed</li><li>E.g. Passwords, usernames, other personally identifiable information (PII)</li><li>How long the data breach has been exposed</li><li>If child data was breached</li><li>If the breach has been dealt with</li><li>Ideally, this will be done simultaneously with all affected parties. If a serious breach occurs, we will also notify users through social media. </li><li>There are also certain situations where we are <strong>legally required</strong> to report breaches to the government and to affected parties. </li><li>Link to the Canada r<a href="https://www.priv.gc.ca/en/privacy-topics/business-privacy/safeguards-and-breaches/privacy-breaches/respond-to-a-privacy-breach-at-your-business/gd_pb_201810/#_Part_1" rel="noopener noreferrer" target="_blank">egulations</a></li><li>Link to <a href="https://www.cai.gouv.qc.ca/espace-evolutif-modernisation-lois/thematiques/incidents-confidentialite/" rel="noopener noreferrer" target="_blank">the (in progress) Quebec regulations</a></li><li>There may be other regulations that apply based on the localities of the affected users. Part of this step is working out if other notifications need to be sent out. </li><li>The Quebec and Canada regulations require notification only if there is an "real risk of significant harm (RROSH) to an individual." At the time of writing this document, this is a standard that we will not follow as we do not retain this sensitive information on our users.</li></ul><p><br></p><p><br></p><h2>CONSENT FOR DATA COLLECTION AND INFORMATION MANAGEMENT</h2><p>By accepting the terms of the Teacher Terms of Use Agreement, users expressly accept that Nanomonx will collect and use personal information in accordance with this Privacy Policy. Teacher users also declare that they have been informed of Nanomonx’s objectives when it collects, manages and uses this information, and understand how the confidentiality of this information will be protected. Teacher users also state that they understand that they are entitled to withdraw their consent to this Privacy Policy.</p><h2>CONTACT</h2><p>For any information concerning this Privacy Policy, contact Nanomonx at info@nanomonx.com.</p><p><br></p>";s:15:"display_as_page";b:0;s:12:"page_content";N;s:20:"is_marked_as_deleted";b:0;s:10:"deleted_at";N;s:19:"information_page_id";i:1;s:11:"language_id";i:15;s:16:"information_page";O:40:"Doctrine\ORM\Cache\AssociationCacheEntry":2:{s:5:"class";s:45:"App\Entity\PageContentManager\InformationPage";s:10:"identifier";a:1:{s:2:"id";i:1;}}s:8:"language";O:40:"Doctrine\ORM\Cache\AssociationCacheEntry":2:{s:5:"class";s:19:"App\Entity\Language";s:10:"identifier";a:1:{s:2:"id";i:15;}}}} |
| 13 | 1.52 ms | default | EXEC |
| 14 | 0.66 ms | default | MGET -WiwMkH6Gd:DC2_REGION_nanomonx_app.entity.pagecontentmanager.informationpage_1__translations |
| 15 | 0.01 ms | default | MULTI 2 |
| 16 | 0.02 ms | default | SETEX -WiwMkH6Gd:DC2_REGION_nanomonx_app.entity.pagecontentmanager.informationpage_1__translations 3600 O:39:"Doctrine\ORM\Cache\CollectionCacheEntry":1:{s:11:"identifiers";a:2:{i:0;O:33:"Doctrine\ORM\Cache\EntityCacheKey":3:{s:4:"hash";s:58:"app.entity.pagecontentmanager.informationpagetranslation_1";s:10:"identifier";a:1:{s:2:"id";i:1;}s:11:"entityClass";s:56:"App\Entity\PageContentManager\InformationPageTranslation";}i:1;O:33:"Doctrine\ORM\Cache\EntityCacheKey":3:{s:4:"hash";s:58:"app.entity.pagecontentmanager.informationpagetranslation_5";s:10:"identifier";a:1:{s:2:"id";i:5;}s:11:"entityClass";s:56:"App\Entity\PageContentManager\InformationPageTranslation";}}} |
| 17 | 0.65 ms | default | EXEC |