LAST UPDATED: 01/05/25
Welcome to Bookji, operated by Bookji, Inc. ("Bookji"). We provide students, teachers and school staff with online access to tools and resources designed to inspire a love of reading and foster a safe, engaging educational experience through our website, and other services (collectively our "Services"). At Bookji, we prioritize safety and respect your privacy.
This Privacy Policy outlines how we collect, use, disclose, share, or otherwise process your personally identifiable information ("PII" or "personal data") when you visit our website or use our other Services. The categories of information we collect and how it is used will depend on your interactions with us.
If you use our student-facing features, please refer to our Student Data Policy for more information about how we process student data. If you are a teacher, school, school district, or other educational institution (“Educational Institution”) using our student-facing services for educational purposes, the use of these services is subject to our student data privacy practices as outlined in this policy. Should your Educational Institution enter into a separate agreement with us, those terms will govern the handling of student data and may include additional protections.
1.
What Data We Collect
At Bookji, we prioritize your privacy and are committed to only collecting the personal data that is necessary to provide our services. Below are the categories of data we may collect when you visit our website, use our platform, or interact with our services.
a.
Information We Collect via Technological Means
Our servers, hosted by a third-party provider, automatically collect certain technical data about your device and software, including your browser type, operating system, IP address (a number that is automatically assigned to your device when you access the internet, which may indicate your general location), domain name, and/or the time of your visit. We store this data in log files whenever you visit our website or use our platform. Unless you have provided PII by creating an account or using specific features of the platform, we cannot use this technical data to identify you personally.
We may also use third-party analytics tools to measure traffic and user activity across the platform. This analytics data is collected in aggregate form and cannot be used to identify individual users.
b.
Cookies, Web Beacons, and Other Tracking Technologies
To enhance your experience on our platform, we may use cookies, web beacons, and other tracking technologies. These tools help us understand how users interact with our services and improve our offerings.
We may link the information we store in cookies or through other mechanisms to the PII you submit while using our Services. We may use both session cookies (which expire once you close your web browser) and persistent cookies (which stay on your computer until you delete them) to provide you with a more personal and interactive experience on our Services. You can remove persistent cookies at any time by following the directions in the "Help" section of your Internet browser. You can also disable all cookies on your Internet browser. If you choose to disable cookies, be advised that you can still visit our Websites, but some components of our Services may not be available or work properly.
We do not allow third-party advertisers to collect data from users on our platform for targeted advertising or profiling. We use third-party analytics and tracking tools solely to improve our services, and these service providers are prohibited from using your personal data for any other purpose.
c.
Information You Provide When Using Our Services
While you may visit our website without creating an account or providing personal information, certain features of our platform may request details from you to enhance your experience. For instance, when signing up for Bookji, we may collect some or all of the following personal data:
If you choose to contact us (e.g., through feedback or support requests), we will collect your name, email address, and any content shared in your communication with us. If you request any paid services, we may also collect billing information through secure third-party payment processors.
We may combine the information we collect from you with data from third-party sources to improve our services and offer a more personalized experience, in accordance with this Privacy Policy.
We may link the information we store in cookies or through other mechanisms to the PII you submit while using our Services. We may use both session cookies (which expire once you close your web browser) and persistent cookies (which stay on your computer until you delete them) to provide you with a more personal and interactive experience on our Services. You can remove persistent cookies at any time by following the directions in the "Help" section of your Internet browser. You can also disable all cookies on your Internet browser. If you choose to disable cookies, be advised that you can still visit our Websites, but some components of our Services may not be available or work properly.
We do not allow third-party advertisers to collect data from users on our platform for targeted advertising or profiling. We use third-party analytics and tracking tools solely to improve our services, and these service providers are prohibited from using your personal data for any other purpose.
d.
Information Through Embedded YouTube Videos
Bookji includes educational video content via embedded YouTube players, with specific privacy measures to comply with COPPA (Children's Online Privacy Protection Act). Bookji is registered as a child-directed service with YouTube to comply with the COPPA in the following ways:
Within Bookji, teachers can set a student's age category to 12 and under, 13 and above, or leave it as unset. Bookji defaults to showing only 'Made for Kids' videos to comply with COPPA and maintain a safer online environment for younger students. Additionally, students can not set their own age, they can only be set by a teacher or school administrator.
d.
Information Through Embedded Audio Players
Bookji also offers educational audio content via embedded players from Google Drive. Schools can control the display of these players with the following options:
Google may collect usage data, such as IP addresses and access times, but Bookji does not collect any personal information from students in relation to the audio players. Schools are responsible for managing the content and ensuring compliance with COPPA.
2.
How We Use the Data We Collect
At Bookji, we use your personal data to enhance your experience with our platform, respond to your requests, and ensure the security and functionality of our services. We use your personal information for the following purposes, as necessary and permitted by applicable law:.
We may also compile anonymized, non-personally identifiable data and use or transfer such information for various purposes, including research or analysis, provided the data cannot be traced back to an individual. We may use this anonymized data to improve our platform, inform product decisions, or share general trends about usage.
All user data is encrypted both at rest and in transit to ensure its security.
Third-Party Online Analytics Services
To improve Bookji's services, we may use third-party analytics tools, like Google Analytics, to gather information about your use of our website. These tools help us understand user behavior and diagnose any technical issues. The domain gobookji.com is tagged on Google as a child-directed site/service for enhanced privacy. For more information on how Google Analytics collects and processes data, you can visit https://policies.google.com/technologies/partner-sites.
Third-Party Services: OpenAI Integration
Bookji leverages OpenAI's application programming interface ("API") to enhance platform functionality, including moderating user-generated content through our Digital Citizenship Features. These features are designed to promote safe and responsible digital interactions among students by reviewing content for compliance with our community guidelines before it is stored or shared. For more details, please refer to OpenAI's API Privacy Policy to understand their data handling practices. More information on how we use OpenAI's API:
Data Shared with OpenAI: When users create content for "posts" or "messages"—user-generated content that may be shared with other students within a user's school—Bookji uses OpenAI's API to review this content. Specifically, the following data may be sent to OpenAI:
Sharing Data with Third Parties
We work with trusted partners, vendors, and service providers to maintain, protect, and improve Bookji's services. These partners may have limited access to your data only as necessary to provide specific services on our behalf. However, we do not share your personal data with third parties for their marketing purposes, and we do not permit third-party advertisements or promotional content on Bookji.
We also comply with relevant regulations, including the Google API Services User Data Policy, to ensure that any information we transfer adheres to strict security and privacy standards.
No Personalized Advertising
Bookji does not use student data for targeted advertising purposes. We are committed to protecting student privacy and ensuring that their data is not shared with third-party advertisers or used to create profiles for advertising.
Automated Decision-Making
Bookji does not engage in automated decision-making or profiling that would produce legal effects or significantly affect users in a manner governed by data protection laws.
3.
Information Sharing and Disclosure
To the extent permitted by applicable law, Bookji may disclose your PII in the following circumstances:
a.
Service Providers
We may engage affiliates or trusted third-party organizations to support us in providing and maintaining the Bookji platform. These include hosting providers, analytics services, payment processors, and subcontractors. These third-party service providers will only have access to the information necessary to perform their services and are contractually obligated to protect your information under terms no less protective than those outlined in this Privacy Policy.
b.
Legal Compliance and Law Enforcement
Bookji may disclose your PII when required to do so by law, regulation, legal process, or in response to lawful requests by public authorities. This includes disclosures necessary to:
c.
Business Transfer
In the event of a merger, acquisition, bankruptcy, dissolution, reorganization, or sale of some or all of Bookji’s assets, or during related due diligence, your PII may be shared with the involved parties. Should such a transfer occur, we will take appropriate steps to ensure the confidentiality and protection of your information and notify you before your PII becomes subject to a different privacy policy.
d.
Prior Consent
In any circumstances not outlined above, Bookji will only disclose your PII with your explicit, prior, and informed consent.
4.
How We Protect Your Data — Security
At Bookji, we are deeply committed to protecting the security and confidentiality of information shared through our platform, including PII. We implement reasonable and appropriate administrative, technical, and physical security measures to safeguard your data against unauthorized access, misuse, or disclosure. If we collect PII from you, our security practices are designed to protect your information from unauthorized access or breaches, and maintain the integrity and availability of the data. These practices include, but are not limited to:
While we strive to provide robust security, no system can be guaranteed to be 100% secure. Therefore, Bookji cannot warrant or guarantee the absolute security of your PII in all circumstances. If you create an account, you are responsible for keeping your account credentials and passwords secure and not allowing others to use your account.
5.
Your Data, Your Choice
If you are a California resident, please see Section 6, "Additional Information for California Residents," for more information about your privacy rights under California law.
a.
Opt-Out
We offer you choices regarding the collection, use, and sharing of your Personal Information (PII). Where permitted by applicable law, we may periodically send you newsletters and emails that directly promote the use of our products or services. When you receive newsletters or promotional communications from us, you may indicate a preference to stop receiving further communications and "opt-out" by following the unsubscribe instructions provided in the email or by contacting us directly.
Despite your email preferences for other matters, we may still send you administrative notices, such as updates to our Terms of Use or Privacy Policy, and similar account-related notices.
b.
Your Rights to Access, Correct, or Delete Your Personal Information.
You may edit any of your PII in your account on Bookji, including contact information and/or notification settings, by updating your account profile. Depending on applicable law, you may also have the right to make other requests related to your personal data that we hold, including accessing, transferring, correcting, deleting (erasure), restricting, or objecting to its use, and to not be retaliated against for exercising your rights. To make a request or for questions regarding your personal data, please contact us at support@gobookji.com. We will do our best to honor your requests. If we deny a request, and you have the right to appeal, we will provide instructions on how to exercise that right in our response.
You may request that we delete your account information by sending an email to support@gobookji.com. However, please note that we may be required (by law or otherwise) to retain certain information and not delete it immediately. In such cases, we will comply with your deletion request only after we have fulfilled any legal or compliance obligations. When we delete account information, it will be removed from our active database, but it may remain in our archives for a limited time. We will retain your information for as long as your account is active, as needed to provide you with the Services you have requested, or as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. Bookji will respond to account deletion requests within thirty (30) days or sooner, if required by applicable law.
Upon request by the school, we can transfer any students' personally identifiable information we held to the school or its designated third party. A school can request such a transfer not more than once a year.
After the product is no longer in use by the school, we will delete all PII we hold within 1 year.
6.
Additional Information for California Residents
While our business does not currently meet the legal requirements for the California Consumer Privacy Act, or "CCPA", we want to provide transparency regarding how we collect, use, and share your "personal information" (as defined in CCPA).
a.
How We Source, Use, and Disclose Information for Business Purposes
The chart below outlines the categories of personal information we collect, the sources of such information, and how we use and share it for business purposes.
| Categories of Personal Information Collected | Sources of Personal Information | Purposes for Use of Personal Information | Disclosures of Personal Information for Business Purposes |
|---|---|---|---|
| Contact information (e.g., name, email address, organization, role, phone number, mailing address including state/province, country) | You |
* Provide the services requested and customer service * Communicate with you * Analyze use of and personalize the services * Improve the services * Provide security, prevent fraud, and for de-bugging * Comply with legal requirements |
* Service providers * Law enforcement in the event of a lawful request * With entities in the event of a business transaction * With your consent |
| Financial and transactional information (e.g., payment account information and donation history) | You, Payment processors |
* Process service fees * Communicate with you * Comply with legal requirements |
* Payment processors * Law enforcement in the event of a lawful request * With entities in the event of a business transaction * With your consent |
| Login information (e.g., your account name and password) | You |
* Provide the services and customer service * Provide security, prevent fraud, and for de-bugging * Comply with legal requirements |
* Law enforcement in the event of a lawful request * With entities in the event of a business transaction * With your consent |
| Device and online identifier information (e.g., IP address, browser type, operating system, general location inferred from IP address, and similar information) | You, through your device |
* Provide the services and customer service * Analyze use of and personalize the services * Improve the services * Provide security, prevent fraud, and for de-bugging * Comply with legal requirements |
* Service providers * Law enforcement in the event of a lawful request * With entities in the event of a business transaction * With your consent |
| Service usage information (e.g., the dates and times you use the services, how you use the services, and the content you interact with on the services) | You, through your device |
* Provide the services and customer service * Analyze use of and personalize the services * Improve the services * Provide security, prevent fraud, and for de-bugging * Comply with legal requirements |
* Service providers * Law enforcement in the event of a lawful request * With entities in the event of a business transaction * With your consent |
b.
Please note that the above chart does not describe the Student Data that we process. For more information about our privacy practices regarding Student Data, please refer to our Student Data Policy. In short, Student Data is collected and processed primarily for educational purposes.
c.
Your California Privacy Rights
If you are a California resident, the CCPA provides certain rights regarding your personal information. While we do not currently meet the thresholds that require us to fully comply with CCPA, we are committed to being transparent about how we collect, use, and disclose personal information. If you have any questions or concerns regarding your personal information, including the categories we collect, how we use it, or with whom we share it, please feel free to reach out to us. We are dedicated to respecting your privacy and complying with applicable laws.
The CCPA allows you to make the following requests about your personal information:
If you believe you have rights under the CCPA and wish to make a request, please contact us directly, and we will review your request to determine how we can assist you.
The CCPA further provides you with the right not to be discriminated against (as provided for in applicable law) for exercising your rights. Please note that certain information may be exempt from such requests under California law. For example, we need certain information in order to provide our services to you. We also will take reasonable steps to verify your identity before responding to a request. In doing so, we may ask you for verification information so that we can match at least two verification points with information we maintain in our files about you. If we are unable to verify you through this method, we shall have the right, but not the obligation, to request additional information from you.
Please also note that if your personal information has been collected by Bookji as a result of a Customer's (e.g., educator, school) use of our services, Bookji collects and maintains your personal information under the directions of the relevant Customer. If these circumstances apply to you and you wish to access or delete any personal information that we have collected about you, please direct your query to the relevant Customer, as this may expedite the completion of your request. We nevertheless provide reasonable assistance to our Customers to give effect to consumer choices as appropriate and required by applicable laws.
If you would like further information regarding your legal rights under California law or would like to exercise any of them, or if you are an authorized agent making a request on a California consumer's behalf, please contact us at support@gobookji.com.
The CCPA provides certain rights if a company "sells" personal information, as such term is defined under the CCPA. We do not engage in activities that would be considered "sales" of personal information under the CCPA.
Shine the Light Disclosure
The California "Shine the Light" law gives residents of California the right, under certain circumstances, to request information from us regarding the manner in which we share certain categories of personal information (as defined in the Shine the Light law) with third parties for their direct marketing purposes. We do not share your personal information with third parties for their own direct marketing purposes.
Do Not Track Signals
Bookji does not track users over time and across third-party websites and therefore does not respond to Do Not Track ("DNT") signals from web browsers. Further, because there currently is no industry standard concerning what, if anything, a service should do when they receive such signals, we currently do not take action in response to these signals.
7.
Other State Laws
Data protection laws change and update frequently, and we endeavor to always comply with applicable laws where we operate. If you have any questions, concerns, or requests regarding the handling of your personal information, please contact us at support@gobookji.com. Please note that we may take reasonable steps to verify your identity and the authenticity of the request.
8.
Changes to Our Privacy Policy
Bookji reserves the right to change this Privacy Policy. We will notify you of any material changes to this Privacy Policy through our website and, where appropriate, when you log in to your account or by email to any email address we may have on file.
The “LAST UPDATED” legend at the top of this page indicates when this Privacy Policy was last revised. Your use of the Services following these changes means that you accept the revised Privacy Policy.
9.
Jurisdiction and Applicable Law
This policy and all matters arising out of or related to this policy shall be governed by the substantive laws of the State of Colorado, USA, without regards to conflicts of laws and principles thereof. Any controversy, claim or dispute between you and Bookji arising out of or relating to this policy shall be subject to the exclusive jurisdiction of the courts of the State of Colorado, USA.
10.
Your Consent
By using Bookji, you expressly consent to our Privacy policy.
11.
Contact
If you would like to contact us with questions or feedback, please contact us at:
Bookji, Inc.
Will Peters
125 Cortina, Suite #3, Mountain Village, Colorado 81435
For inquiries related to other operators collecting data through our platform, please contact us, and we will respond on their behalf.
12.
Supplemental Incident Response Plan Overview
The information below provides an overview of Bookji's basic incident response plan. For the full detailed policy, please contact support@gobookji.com.
Bookji's incident response plan follows a structured process to address data breaches and security incidents. Initially, the IT Security Team is responsible for detecting and identifying the incident and promptly documenting relevant details upon detection. Following this, the Data Protection Officer and IT Security Team assess the scope and impact of the incident within 24 hours, determining the types of data affected and the number of individuals involved.
The containment phase involves immediate action to prevent further data loss, which may include isolating affected systems or revoking access privileges. This is carried out by the IT Security Team and Network Administrators as soon as possible post-identification. Notification to relevant internal stakeholders is the responsibility of the Legal Department and Data Protection Officer, with specific procedures in place for any incidents involving student or teacher personally identifiable information (PII), ensuring compliance with applicable education laws and data protection regulations.
The investigation phase involves a thorough inquiry into the cause of the incident, with evidence preservation for potential legal actions or regulatory inquiries. This task is performed by the IT Security Team, and external forensic experts may be involved if necessary. Remediation efforts, including vulnerability mitigation and security policy updates, are handled by the IT Department and Data Protection Officer, with immediate implementation and ongoing review.
Documentation of all actions taken, timelines, decisions, and lessons learned is continuously maintained by the Data Protection Officer and Legal Department throughout the process. Communication with affected individuals and addressing media inquiries is carried out by the Communications Department and Legal Department according to the incident response plan's guidelines.
Finally, a post-incident review, led by Senior Management, the IT Security Team, and the Data Protection Officer, assesses the response's effectiveness and guides adjustments to policies, training, and technical safeguards within one month post-incident.
13.
Change of Control
Over time, Bookji may grow and reorganize. We may share your information, including personal information, with affiliates such as a parent company, subsidiaries, joint venture partners, or other companies that we control or that are under common control with us. In such cases, we will require those companies to agree to use your personal information in a way that is consistent with this Privacy Policy.
In the event of a change to our organization such that all or a portion of Bookji or its assets are acquired by or merged with a third party, or in any other situation where personal information we have collected from users would be one of the assets transferred to or acquired by that third party, this Privacy Policy will continue to apply to your information. Any acquirer would only be able to handle your personal information as per this policy (unless you consent to a new policy). We will provide you with notice of an acquisition within thirty (30) days following the completion of such a transaction, by posting on our homepage and by email to the email address you provided to us. If you do not consent to the use of your personal information by such a successor company, subject to applicable law, you may request its deletion from the company.
In the unlikely event that Bookji goes out of business or files for bankruptcy, we will protect your personal information and will not sell it to any third party.