Privacy Policy
How we handle information in the CDM platform
CDM Educational Services, LLC (CDM) provides tools for managing referrals, assessments, and educational reports. This policy describes how we handle information through those services, including connected third-party services.
Information we collect
We collect information supplied by users, schools, districts, respondents, and authorized connected services. This may include names and contact details, account information, student and referral information, assessment responses and scores, uploaded documents, and generated reports. Some records may contain sensitive educational, behavioral, or health information. We also maintain activity and technical records to operate and protect the service.
How we use and share information
We use information to manage referrals and assessments, communicate with participants, track completion, prepare reports, provide support, and maintain the service's security and reliability.
Information is available to users authorized to access the relevant records and to service providers supporting CDM's operations, subject to appropriate access restrictions. We may also disclose information when required by law or necessary to address security issues. We do not sell personal information or use assessment records for advertising.
Storage and retention
We use access controls and technical safeguards to protect information stored in CDM. No system can guarantee absolute security. We retain records as needed to provide services and meet applicable recordkeeping, contractual, and legal obligations. Removing a record from active view does not necessarily erase stored files, audit history, or backups.
Connected Google services
CDM Response Automation uses an authorized Google account's email address and read-only spreadsheet access to retrieve assessment responses from configured response sheets, match them to referrals, and generate PDFs. The permission covers spreadsheets accessible to that account, but CDM requests only its configured sheets. CDM stores authorization tokens, relevant response data, and generated reports; it does not receive the account's Google password or request Gmail access.
Google-derived data is used and shared only for the authorized service and other purposes permitted by the Google API Services User Data Policy, including its Limited Use requirements. Human access is limited to affirmative user authorization or permitted exceptions. This data is not sold, used for advertising, or used to train generalized AI models. These restrictions take precedence over conflicting terms elsewhere.
You can revoke access through Google Account connections. Revoking access does not delete records already stored in CDM, and deleting a CDM record does not delete the original Google response.
Your choices and requests
Contact CDM to request access, correction, deletion, or disconnection of your information. We may need to verify your identity and authority and coordinate with the responsible school or district. Requests are subject to applicable recordkeeping and legal obligations. Schools, districts, and assessment providers may separately control their own records.
Updates and contact
We will update this policy when our practices change and provide notice or obtain consent where required. For privacy questions or requests, contact carter@cdmeducate.com.