Trust Center

A school partner you can trust.

Schools trust us with more than a presentation or Boot Camp. They trust us with students, relationships, and—in some programs—student information. We take that responsibility seriously.

This Trust Center explains how Test Prep America approaches student privacy, safety, technology, accessibility, and responsible school partnerships.

Plain-language commitments. Detailed policies. No buried surprises.

Editorial illustration representing student privacy, accessibility, and responsible technology.
Our standardStudent first.Specific. Restrained. Transparent.

Trust at a glance

Six commitments that shape the work.

These are the standards schools and families should be able to hold us to. The internal review register identifies which commitments still need operational or legal confirmation before publication.

01

Educational use

Student information is collected and used only when it supports the requested educational program—such as registration, instruction, diagnostics, reporting, follow-up, or support.

02

No sale of student data

We do not sell student personal information or student and family contact lists. School-provided education records are not for unrelated targeted advertising.

03

Sponsors never get student leads

Sponsors support students—not gain access to them. Reporting is aggregate, without names, contacts, individual scores, or platform behavior.

04

Human oversight of AI

AI may assist the work. People remain responsible for consequential recommendations and educational judgment.

05

Professional communication

Communication with minors stays program-related and professional, using approved channels—not staff members’ personal social-media accounts.

06

School-controlled partnerships

School agreements and district requirements can govern how school-provided information is used, reported, retained, returned, or deleted.

Student data

Collect less. Use it for a clear reason.

Depending on the program, the information needed can vary. A school presentation may require very little; a registered program with diagnostics and follow-up may require more.

Information we may need

  • Student name and contact information
  • School, grade, registration, and attendance
  • Parent or guardian information where relevant
  • ACT, SAT, PSAT, PreACT, or practice scores supplied by the student, family, or school
  • Diagnostic answers, results, strengths, and study priorities
  • Engagement, completion, scheduling, and support communications
  • Accommodation or access information when needed to deliver the program

Why we may need it

  • Enrollment and program administration
  • Instruction, assessment, and diagnostics
  • Personalized recommendations and study assignments
  • Participation and progress tracking
  • Authorized school or family reporting
  • Support, program evaluation, and improvement
  • Security and applicable legal obligations
If we do not need information to provide the educational service, we should not be collecting it.

Schools & FERPA

Built to work within school requirements.

When a school provides education-record information, Test Prep America uses it for the school-authorized educational service and follows the applicable agreement and legal requirements. Schools should provide only the information reasonably necessary for the program.

  • Use information only for the authorized institutional service
  • Limit access to people with a legitimate educational need
  • Avoid unauthorized redisclosure
  • Follow applicable school instructions on access, reporting, return, and deletion

FERPA obligations depend on the relationship, agreement, and circumstances. Test Prep America works with schools to incorporate applicable requirements into the engagement.

Privacy Policy

Sponsors & student privacy

Sponsors fund opportunity. They do not get student access.

A sponsor may help fund seats, materials, or a school program. That support does not turn students into marketing leads. Sponsors can receive appropriate aggregate impact reporting; student-level information stays outside that relationship.

Sponsors may receive
  • Students served
  • Aggregate participation
  • Aggregate completion
  • Broad or anonymized outcomes
  • Approved program-impact summaries
Sponsors do not receive
  • Student names
  • Personal email or phone
  • Parent contacts
  • Individual scores
  • Home addresses
  • Individual platform behavior
  • Student marketing lists

Responsible technology

Modern tools. Human accountability.

Technology should make education more responsive and secure—not reduce a student to a data profile or put an automated system in charge of a consequential decision.

Responsible AI

AI can assist. It does not replace judgment.

Potential supportive uses include:

  • Organize assessment results
  • Identify possible skill patterns
  • Draft practice recommendations
  • Tailor flashcard or review topics
  • Prepare internal instructional materials
  • Summarize cohort trends

AI is not the final authority on:

  • Official SAT or ACT scores
  • Accommodations or disability decisions
  • School placement
  • Discipline
  • Eligibility
  • Other significant educational decisions

Student information should not be entered into unapproved public AI systems. The formal approved-tools process still needs verification.

Security & access

Access should be limited to the people who need it.

We use administrative, technical, and organizational safeguards appropriate to the information involved and continue to review those controls as our systems evolve.

Specific controls—including MFA, encryption, training, and incident procedures—remain withheld from public claims until verified.

Service providers

Our vendors should follow the same rules.

Providers may support hosting, learning platforms, email, webinars, assessments, analytics, customer support, or AI-assisted processing. We consider what data they need, how they use it, their security practices, and whether they support appropriate access and deletion obligations.

Subprocessor listComing after vendor review
01

Retention & deletion

Keep identifiable data only as long as it serves a purpose.

Student information should be deleted, returned, or de-identified when it is no longer reasonably needed for the program, reporting, contractual obligations, or applicable legal requirements.

Exact retention periods are intentionally omitted until the proposed defaults and deletion capabilities are approved.

02

Incident response

If something goes wrong, schools should hear from us.

The priority is to contain the issue, understand what happened, work with affected partners, meet applicable notification obligations, and reduce the risk of recurrence.

  1. 1Contain
  2. 2Investigate
  3. 3Identify affected information and partners
  4. 4Notify as required
  5. 5Cooperate with the school
  6. 6Remediate

No incident-notification deadline is stated until an SLA is operationally and contractually approved.

Accessibility

Access belongs in the plan.

We want Test Prep America’s public website, student resources, and school-facing materials to be usable by as many people as practical, including people using assistive technology.

We are actively building and reviewing the site for accessibility.Accessibility

Family & student transparency

Questions about your information? Ask us.

Students and families should be able to understand how information is used and seek help with appropriate requests.

When information came from a school under a school agreement, some requests may need to be handled through the school.

  • Understand what information is collected
  • Access applicable records
  • Correct material inaccuracies
  • Request appropriate deletion or return
  • Understand relevant service providers

Policies & documents

Plain-language overview here. Details in the right place.

Read our Privacy Policy, Website Terms, and Accessibility Statement below.

District procurement

Need something for vendor review?

District privacy, technology, purchasing, and legal teams often need additional information before approving a vendor. We are happy to work through the process.

Start a Vendor Review Request
Privacy documentation
W-9 request
Insurance documentation
Data-sharing agreement or DPA review
Security or privacy question
Accessibility information

A request does not imply that every document already exists. We will confirm availability and next steps after learning what your district requires.

Frequently asked questions

Direct answers to the questions schools ask.

For a program-specific, contractual, or district question, contact us with the school and requirement involved.

Ask a trust question
Do you sell student information?

No. Our policy direction is that student personal information and student or family contact lists are not sold. This commitment remains subject to final operational data-flow verification before publication.

Can sponsors receive student contact information?

No. Sponsor reporting is aggregate or anonymized as appropriate. Sponsors do not receive student contact information, individual scores, parent information, or student marketing lists.

Does Test Prep America use AI?

Potentially, for supportive tasks such as organizing diagnostic information or drafting practice recommendations. A person should review consequential recommendations. The approved-tools process and vendor-specific data rules still require confirmation.

Is Test Prep America FERPA compliant?

FERPA applies primarily to educational institutions and governs circumstances in which education records may be disclosed to service providers. When a school provides education-record information, we work under the applicable school agreement and requirements for the authorized educational service.

What information do you collect?

Depending on the program, we may need registration, school, attendance, score, diagnostic, engagement, support, or access information. We should collect only what is reasonably needed for the applicable educational service.

How long do you keep student information?

Identifiable student information should be deleted, returned, or de-identified when it is no longer reasonably needed for the program, reporting, contractual obligations, or applicable legal requirements. Exact periods are not being published until they are operationally approved.

Can parents request deletion?

We support appropriate requests where applicable. When the information came from a school under a school agreement, the request may need to be handled through the school.

Do your presenters contact students personally?

The policy direction is to use professional, program-related channels and not staff members’ personal social-media accounts. Current practices must be confirmed before this statement is published as an operational guarantee.

What happens if a district has its own privacy agreement?

We work with districts to review applicable privacy, security, retention, incident, subcontractor, and other requirements before the engagement is finalized.

Who do I contact with a security or privacy question?

Use the general contact path and identify the question as privacy, security, safety, or accessibility. A designated privacy contact has not yet been confirmed.

A clear path forward

Trust should be easy to verify.

If your school or district has a privacy, safety, accessibility, technology, procurement, or contract question, send it to us. We would rather answer it clearly than hide it in fine print.