California Privacy Notice | Policy

Last Updated 20 September 2023

This California Privacy Notice (“CA Privacy Notice”) contains disclosures required by the California Consumer Privacy Act (“CCPA”) and applies only to California residents.

This Privacy Notice describes Instructure’s collection, use, and disclosure of personal information as defined in the CCPA, as well as your rights with respect to that personal information. It applies when Instructure is acting as a “business” as defined by the CCPA, for example, when we collect personal information through our corporate websites, and it pertains to and supplements the Instructure Marketing Privacy Policy.

Instructure also processes personal information through our products on behalf of our customers, in order to provide services to our customers. Under the CCPA, when Instructure acts on behalf of its customers, Instructure processes personal information as a “service provider,” a designation which is not subject to the disclosures and rights set forth in this Privacy Notice. To exercise your rights with respect to that personal information, you must contact the relevant Instructure customer—for example, the school you attended or company you worked for when you used an Instructure product. Instructure will cooperate with that business to fulfill your request if they request that we do so. To learn more about how Instructure treats personal information when acting as a service provider, please view the Instructure Product Privacy Policy.

Consumers with disabilities may access this notice by using a screen reader or contacting Instructure for further assistance.

1. Personal Information We Collect, Disclose for a Business Purpose, and Sell.

In the past 12 months, we collected, disclosed for a business purpose, sold, or shared the following categories of personal information about California consumers.

Sensitive Personal Information. We do not use or disclose sensitive personal information for purposes other than those specified in the CCPA.

Categories Of Sources. We collect this personal information from the following categories of sources:

• Consumers;
• Advertising networks;
• Analytics providers;
• Businesses and education institutions associated with consumers;
• Business partners;
• Service providers; and
• Affiliates not under the Instructure brand.

2. Why We Collect, Use, Sell, and Share California Information. 

We use and disclose all categories of personal information we collect for our commercial and business purposes, as further described in the Instructure Marketing Privacy Policy. These commercial and business purposes for which we use and disclose these categories of personal information include, without limitation:

Our commercial purposes, which include:

• Personalized marketing and advertising, including sending surveys and promotional communications and soliciting feedback;
• Enabling commercial transactions and sending administrative email;
• Responding to requests made by consumers including to respond to comments and inquiries; and
• Operating, maintaining, and improving our websites and services including personalization.

Our business purposes as identified in the CCPA, which include:

• Auditing related to our interactions with you;
• Ensuring the security and integrity of our systems;
• Legal compliance;
• Detecting and protecting against security incidents, fraud, and illegal activity;
• Debugging;
• Performing services (for us or our service provider) such as account servicing, processing orders and payments, and analytics;
• Internal research for technological improvement;
• Internal operations;
• Activities to maintain and improve our services; and 
• Other one-time uses.

We sold or shared personal information to third parties for the following business or commercial purposes:

• Analytics related to the use of the Site and marketing; and
• Advancing our commercial or economic interests, including by marketing our product and services.

We do not sell the personal information of minors we know to be under 16 years of age.

3. Recipients Of California Personal Information. 

We disclose the categories of personal information designated above to the categories of third parties listed below for business purposes: 

• Service providers;
• Affiliates not under the Instructure brand; 
• Third parties at your request or direction;
• Data analytics providers;
• Partners; and
• Social networks.

We sell or share the categories of personal information designated above to the categories of third parties listed below:

• Advertising/marketing companies;
• Advertising networks;
• Business services/agencies;
• Business to business companies;
• Marketing data companies;
• Data analytics providers;
• Social networks; and
• Educational institutions & companies.

4. Your Rights Regarding Personal Information. 

California residents have certain rights with respect to the personal information collected by businesses. If you are a California resident, you may exercise the following rights regarding your personal information, subject to certain exceptions and limitations:

• The right to know the categories and specific pieces of personal information we collect, use, disclose, and sell about you, the categories of sources from which we collected your personal information, our purposes for collecting or selling your personal information, the categories of your personal information that we have either sold or disclosed for a business purpose, and the categories of third parties with which we have shared personal information;
• The right to correct inaccurate personal information that we maintain about you;
• The right to request that we delete the personal information we have collected from you;
• The right to opt out of our sale or sharing of your personal information. Please note that if you opt out of certain types of sales or sharing, we will be unable to provide you with the services that rely on such sales or sharing; and
• The right not to receive discriminatory treatment for the exercise of the privacy rights conferred by the CCPA.

To exercise any of the above rights, please contact us using the following information and submit the required verifying information, as further described below:

• By phone at 1 (800) 203-6755
• By accessing our webform at CA Privacy Rights link
• By accessing our Do Not Sell or Share My Personal Information link
• By email at privacy@instructure.com

5. Verification Process and Required Information. 

Note that we may need to request additional information from you to verify your identity or understand the scope of your request, although you will not be required to create an account with us to submit a request or have it fulfilled. We will require you to provide, at a minimum, your full name, email address or other contact information, and information about your relationship with Instructure. If we cannot successfully verify your identity, or if the information would be too sensitive to disclose, we may not be able to provide the personal information to you.

6. Authorized Agent. 

You may designate an authorized agent to make a CCPA request on your behalf by designating such an agent in writing or through a power of attorney. We will require the agent to provide us with proof that you have authorized the agent to make a CCPA request on your behalf prior to processing the request. We may request additional information to verify the request.

7. Changes to this CA Privacy Notice.

We may change this Privacy Notice from time to time. If we make any changes to this Notice, we will change the “Effective Date” above. If such changes are material, a notice of the changes will be posted along with the revised CA Privacy Notice. Once we update this CA Privacy Notice, the updates will be effective 7 days after the “Last Updated” date. We encourage you to visit this page from time to time for the latest on our privacy practices. 

8. Contact For More Information.  

For questions or concerns about Instructure’s privacy policy or practices, please contact us at:

Instructure, Inc.
6330 S 3000 E, Suite 700
Salt Lake City, UT 84121

Phone: (800) 203-6755
Email: privacy@instructure.com