Supplement to the ChiwiQ Terms of Service, Privacy Policy, and Cookie Policy.
This Education Addendum (the "Addendum") is issued by ChiwiQ LLC, a New Jersey limited liability company ("ChiwiQ"). It supplements the ChiwiQ Terms of Service, Privacy Policy, and Cookie Policy, and any order form or service agreement between ChiwiQ and an Education Customer (together, the "Governing Documents"). It describes how ChiwiQ protects data when schools and other educational institutions use the Services.
This Addendum applies to any school, school district, or other educational institution that uses the Services with students under 18 and identifies itself as an educational institution at signup, in an order form, or by written notice to ChiwiQ (an "Education Customer").
This Addendum applies to all ChiwiQ products used by an Education Customer, including CIRP, the ChiwiQ operations platform, and its AI agent JUVA.
"Customer Data" means all data an Education Customer or its authorized users provide to, or generate through, the Services, including operational, inventory, sales, and account data.
"Student Data" means any Customer Data that identifies or could reasonably be linked to an individual student, including names, user identifiers, schedules, hours worked, attendance records, voice recordings, text entered into the Services, purchase records, and device or usage records associated with a student.
"Services" means all ChiwiQ platforms, AI agents, dashboards, software, support, and educational simulation environments provided to an Education Customer. ChiwiQ AI agents, including JUVA, serve the Education Customer's staff and authorized users.
"Security Incident" means any confirmed unauthorized access to, or acquisition, disclosure, alteration, or loss of, Customer Data.
"Subprocessor" means any third party that processes Customer Data on ChiwiQ's behalf.
If this Addendum conflicts with any Governing Document, this Addendum controls for Education Customers. Any "entire agreement" clause in the Governing Documents does not exclude this Addendum.
Each Education Customer owns its Customer Data. ChiwiQ acquires no ownership rights in Customer Data.
ChiwiQ processes Customer Data to provide, secure, support, and improve the Services, as described in this Addendum, and will not use it for any other purpose except with the Education Customer's prior written consent.
ChiwiQ may use Customer Data, including usage, performance, and interaction data, to maintain, improve, and develop the Services and to develop, train, and improve AI models. Before any Student Data is used for these purposes, it will be deidentified so that it can no longer reasonably be linked to any student, and ChiwiQ will not attempt to reidentify it. ChiwiQ will not disclose Customer Data to third parties in any form that identifies an Education Customer or any individual, except as permitted by this Addendum.
ChiwiQ will not:
ChiwiQ collects only the data needed to deliver the Services. Schedule B describes the categories of data processed.
Payments processed through the Services are handled by Stripe, Inc. Full payment card numbers and security codes are held by Stripe and are never stored on ChiwiQ's systems. ChiwiQ receives only the transaction records needed to operate the Services, such as items sold, amounts, dates, and payment status. Any buyer name or email address included with a transaction is used only to complete, record, and support that transaction, and is never used for marketing or AI training in identifiable form.
The Services are not directed to children under 13, and Education Customers will not permit users under 13 to use the Services.
At an Education Customer's request, ChiwiQ will create individual, role based accounts for student users using the minimum identifying information the Education Customer chooses, such as a first name or school assigned identifier.
Educational simulations and training environments use synthetic or sample data by default. Real Customer Data is used in a simulation only if the Education Customer directs it.
For Education Customers, ChiwiQ uses only strictly necessary cookies and similar technologies needed for secure login and core functionality. Sections 3.2 through 3.6 of the Cookie Policy (performance and analytics, functional, targeting and advertising, third party, and AI and data processing cookies) do not apply to Education Customer accounts.
Customer Data is hosted and stored in the United States.
ChiwiQ, its personnel, contractors, and Subprocessors may access Customer Data from other countries where they operate, only as needed to provide, support, maintain, and secure the Services. All such access is limited to authorized persons bound by written confidentiality obligations and is subject to safeguards no less protective than this Addendum. ChiwiQ remains responsible for all access by its personnel and contractors.
ChiwiQ maintains reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the data, including:
On request, ChiwiQ will provide an Education Customer with a written summary of its security practices.
ChiwiQ will notify the affected Education Customer in writing within seventy two (72) hours after confirming a Security Incident affecting its Customer Data.
The notice will describe, to the extent known, what happened, the data affected, the steps taken to contain the incident, and a contact person. ChiwiQ will provide updates as more information becomes available.
ChiwiQ will cooperate with the Education Customer's investigation, will not notify students or families about the incident without coordinating with the Education Customer unless required by law, and will take reasonable steps to prevent recurrence.
Education Customers, and students or parents and guardians through their Education Customer, may request access to, correction of, or deletion of Customer Data and Student Data.
ChiwiQ will fulfill verified requests from an Education Customer within thirty (30) days. If ChiwiQ receives a request directly from a student, parent, or guardian, it will refer the request to the Education Customer.
Requests may be sent to info@chiwiq.com.
ChiwiQ AI agents provide recommendations and automate routine tasks. Actions that affect purchasing, finances, or student workers require approval by an authorized staff member of the Education Customer before they take effect.
The Services will not make any decision with a significant effect on a student, including decisions about scheduling, discipline, or employment, without human review by the Education Customer's staff.
Authorized users may view Customer Data and the analytics generated by the Services through the dashboards provided as part of the Services. No separate reports or data sets are required under this Addendum.
ChiwiQ uses third party AI model providers only under terms that prohibit them from training on Customer Data.
If ChiwiQ receives a subpoena, court order, or government request for Customer Data, it will notify the affected Education Customer promptly, unless legally prohibited, so the Education Customer may seek protection.
ChiwiQ will comply with federal and state privacy laws applicable to its handling of Customer Data, including applicable student privacy laws. To the extent the Family Educational Rights and Privacy Act applies to an Education Customer, ChiwiQ will act as a school official with a legitimate educational interest, under the Education Customer's direct control regarding the use and maintenance of education records.
ChiwiQ may engage, add, or replace Subprocessors as needed to provide and improve the Services. Each Subprocessor is bound by data protection obligations no less protective than this Addendum, and ChiwiQ remains responsible for their performance. Schedule A lists ChiwiQ's current Subprocessors. An updated list is available on request at info@chiwiq.com.
ChiwiQ retains Customer Data only for as long as the Education Customer uses the Services.
Upon termination, ChiwiQ will delete Customer Data from active systems within sixty (60) days and from backups within ninety (90) days. ChiwiQ is not required to return or deliver copies of Customer Data.
ChiwiQ's written notice of termination will state the deletion timeframe. No further notices regarding deletion are required.
Each Education Customer is responsible for retaining any records it needs from the Services before the termination date.
Nothing in this Addendum expands the liability of ChiwiQ beyond the limitation of liability in the Governing Documents. ChiwiQ does not agree under this Addendum to pay, reimburse, or indemnify any costs, losses, or damages arising from a Security Incident, except as required by applicable law.
ChiwiQ may update this Addendum from time to time and will revise the "Last updated" date when it does. Changes that reduce the protections in this Addendum take effect for existing Education Customers thirty (30) days after ChiwiQ gives notice by email or through the Services. All other changes take effect when posted.
This Addendum applies for as long as ChiwiQ holds an Education Customer's Customer Data. Sections 5, 6, 11, 14, 16, and 17 survive termination of an Education Customer's use of the Services.
This Addendum is governed by the laws of the State of New Jersey, without regard to conflict of law principles.
Questions about this Addendum may be sent to ChiwiQ LLC at info@chiwiq.com.
This list may change as described in Section 15.
Not required: ChiwiQ does not require Education Customers to provide student academic, grade, health, or disciplinary records, biometric data, precise geolocation, or advertising identifiers. ChiwiQ does not store full payment card numbers or security codes.