Sansa Solutions — Privacy Statement & Student Data Policy

Last Updated: November 2026

At Sansa Solutions, we are dedicated to empowering individuals and clients through innovative, customized learning solutions, program management, and business consulting. When partnering with educational institutions, including the Chicago Public Schools (CPS), we prioritize the highest standards of data privacy, security, and transparency.

This Privacy Statement outlines how we collect, use, protect, and handle information—specifically focusing on student data governed by the Student Online Personal Protection Act (SOPPA) and the Family Educational Rights and Privacy Act (FERPA).

1. Information We Collect

In the provision of products and services to educational institutions, Sansa Solutions strictly limits data collection to what is necessary, reasonable, and relevant within the scope of our services.

Direct Identifiers & Authentication: Name, email address.

Rostering & Academic Context: Grade level, classroom assignment, teacher, school, student ID, and primary language. This data is utilized exclusively for matching students with proper curriculum, rostering, delivering age-appropriate content, and facilitating reporting for teachers and staff.

Survey Responses (Non-PII Only): Collected solely for benchmarking student progress or reporting on questions created by CPS staff or teachers and key performance indicator (KPI) reporting. Note: Survey data containing Personally Identifiable Information (PII) is never used for marketing purposes and is strictly prohibited under SOPPA.

Technical & Usage Data: Student-generated content (such as assessment responses, projects, and grades) is stored solely to track subject progress.

Protected Demographic Data: Gender, race, or ethnicity data is only collected and used under strict, limited circumstances—such as ensuring an equal/bias-free experience on assessments, tailoring Social Emotional Learning (SEL) counseling, or reporting for teachers and staff. Date of birth is restricted and only collected where strictly necessary to ensure age-appropriate content delivery.

2. Data Security & Integrations

We implement robust technical and organizational security measures to protect all user and student data:

Secure Integrations: Sansa Solutions integrates directly with approved institutional identity providers and single sign-on (SSO) solutions (such as Google SSO and Clever/One Roster).

Transmission & Storage Protections: Student data is never transmitted through unencrypted channels or email. Data exchange is securely accomplished via s-FTP, API, and/or encrypted web services compliant with the latest security protocols as defined by the Board of Education.

3. Disclosure of Student Data to Third Parties

Sansa Solutions maintains strict governance over data sharing:

Third-Party Sub-processors: We do not sell, trade, or rent student data. Any third-party vendors required for customer service, troubleshooting, rostering assistance, or platform configuration must be explicitly authorized.

Current Sub-processor Status: Currently, third-party data sharing for student data under institutional exhibits is designated as N/A (no unauthorized third-party sharing or storage). Any future sub processor must undergo strict vetting and compliance reviews before accessing any student information.

4. Commitment to Diversity, Equity, and Inclusion

In alignment with Sansa Solutions' core corporate values, our operational practices reflect our active DEI pledge:

Fair Practices: Ensuring equal and bias-free experiences across our learning technologies and operational workflows.

Community & Culture: Fostering inclusive digital environments that respect the unique needs and backgrounds of all clients and learners.

5. Contact Us

If you have questions regarding this Privacy Statement, our data practices, or our compliance with educational privacy laws, please reach out through our official Contact Page.