Privacy Policy for Curriculum Warehouse

---

Effective Date: August 22, 2026

Last Updated: August 23, 2026

Curriculum Warehouse is operated by NJ Data Diva LLC (“Curriculum Warehouse,” “Provider,” “we,” “us,” or “our”).

At Curriculum Warehouse, we take privacy seriously and are committed to data protection, striving to be transparent about the user information privacy surrounding the information processed when individuals visit curriculumwarehouse.com, communicate with us, or engage with the Curriculum Warehouse Platform.

This Privacy Policy outlines what information we collect or process, why we use it, who may have access to it, and the choices available to users and our Clients.

For purposes of this Policy:

“Website” refers to curriculumwarehouse.com and related public Curriculum Warehouse webpages.

“Platform” is defined as the private Curriculum Warehouse web-based curriculum management application and associated administrative, curriculum, reporting, public-display, lesson-planning, standards, audit, and instructional tools.

“Client” denotes a school district, school, educational institution, or other organization that contracts with or participates in a pilot with Curriculum Warehouse.

“Authorized User” refers to an individual authorized by a Client to access the Platform.

This Privacy Policy governs the treatment of information related to the Curriculum Warehouse privacy framework, specifically regarding: 

- visits to the Curriculum Warehouse Website; 

- requests for information, demonstrations, proposals, or support; 

- authorized use of the Curriculum Warehouse Platform; 

- account authentication and administration; 

- Platform activity and audit records; 

- active Platform session information; 

- curriculum and instructional content submitted to the Platform; 

- optional Platform features and enhancements; and 

- communications between NJ Data Diva LLC and Clients or Authorized Users regarding data protection and user information privacy. 

The Platform is primarily intended for authorized educational professionals and administrators. 

Students are not recognized as Authorized Users within the private Curriculum Warehouse Platform.

The information processed by Curriculum Warehouse depends on how an individual interacts with us, ensuring we prioritize Curriculum Warehouse privacy and data protection throughout the process.

2.1 Website Visitors and Business Contacts

When an individual contacts Curriculum Warehouse, requests a demonstration, communicates through our Website, or directly reaches out to NJ Data Diva LLC, we may receive user information such as:

- name;

- professional email address;

- telephone number, if provided;

- school, district, or organization;

- job title or professional role;

- information submitted through contact forms or correspondence;

- documents voluntarily provided for demonstration or implementation purposes; and

- information relating to requested services, proposals, implementation, or support.

We utilize this data to respond to inquiries, provide demonstrations or proposals, communicate regarding our services, and maintain appropriate business records, all while ensuring user information privacy.

2.2 Authorized User Account Information

When a Client authorizes an individual to use Curriculum Warehouse, the Platform will process necessary information to authenticate the individual and establish appropriate permissions. This information may include:

- name;

- professional email address;

- Client or district affiliation;

- assigned Platform role;

- department, course, or access assignments where applicable;

- account identifier;

- authentication provider; and

- other information required to administer the Authorized User's Platform access.

If Single Sign-On (“SSO”) is employed, authentication may occur through the Client's Google Workspace or Microsoft 365 identity provider.

Curriculum Warehouse does not receive or store a user's Google Workspace or Microsoft 365 password.

For accounts authenticated using Firebase Authentication rather than SSO, credentials are managed through the authentication services utilized by the Platform. Curriculum Warehouse personnel maintain data protection standards and do not have access to users' plain-text passwords.

2.3 Curriculum and Platform Content

Authorized Users can create, upload, edit, publish, or manage various curriculum-related information such as:

- curriculum maps;

- course information;

- unit frameworks;

- pacing guides;

- standards alignments;

- instructional activities;

- lesson-planning materials;

- instructional resources;

- uploaded documents and attachments; and

- related curriculum metadata.

Any curriculum materials uploaded or created by a Client remain the Client's property under the terms of the applicable agreement, with Curriculum Warehouse committed to maintaining data protection and user information privacy.

2.4 Technical and Usage Information

Upon accessing the Website or Platform, certain technical information may be generated or processed automatically by the Platform or its service providers. Depending on the service being used, this could include insights related to:

- authentication and sign-in activity;

- date and time of access;

- Platform sessions;

- active session duration;

- browser or device information;

- network or technical request information;

- Platform errors or performance information; and

- other technical information necessary to operate, secure, troubleshoot, administer, or enhance the service.

Curriculum Warehouse may track active session duration within the Platform for various purposes, including session management, operational visibility, usage analysis, troubleshooting, and Platform improvement. It is important to note that this active session duration is not intended to establish an individual's hours worked, attendance, compensation, or payroll status.

Website visitors may also encounter cookies or similar technologies utilized for Website functionality, security, preferences, performance measurement, or analytics. Available cookie choices are detailed in the Website's cookie notice and controls.

Curriculum Warehouse is designed as a curriculum management platform for authorized educational professionals and administrators, prioritizing Curriculum Warehouse privacy. It is not intended to collect, solicit, maintain, or store Student Identifiable Information ("SII") or student education records, thereby ensuring robust data protection Curriculum Warehouse practices.

Clients and Authorized Users must refrain from uploading or maintaining student information within Curriculum Warehouse, which includes:

- student grades;

- Individualized Education Programs (IEPs);

- student health or medical information;

- assessment records tied to identifiable students;

- disciplinary or counseling records;

- student rosters;

- student identification numbers;

- identifiable student work; or

- other confidential student information or education records.

Students are not meant to be Authorized Users of the private Curriculum Warehouse Platform, ensuring user information privacy.

Curriculum Warehouse also supports Single Sign-On ("SSO") through Client-managed identity providers such as Google Workspace or Microsoft 365. It is the responsibility of Clients to configure and manage access, ensuring that only authorized professional users receive access to the Platform.

In limited situations, a student account may attempt to authenticate due to a Client's identity-provider configuration, shared staff and student email domain, access-approval settings, or other Client-controlled configurations.

If this occurs, Curriculum Warehouse may receive limited authentication information from the identity provider, such as:

- name;

- email address;

- account identifier;

- authentication provider;

- date and time of the authentication attempt; and

- related technical or security information.

An unintended student authentication attempt does not authorize the student to access Curriculum Warehouse and does not convert the Platform into a student-facing service.

Curriculum Warehouse does not intentionally utilize information from an unintended student authentication attempt to create a student educational profile, academic record, or any other persistent student record.

If a Client identifies unintended student authentication or access, they should promptly notify Curriculum Warehouse so that appropriate access restrictions, account removal, or other remediation steps may be implemented.

Additional information about ensuring consistent Curriculum Warehouse privacy and data protection can be found in the Curriculum Warehouse Student Data Scope policy.

Curriculum Warehouse processes information as reasonably necessary to: provide and operate the Platform while ensuring Curriculum Warehouse privacy; authenticate Authorized Users to safeguard user information privacy; establish and enforce user roles and permissions; maintain separation between Client environments; provide curriculum management and instructional functionality; process Client-authorized imports and exports; administer public curriculum-display features selected by Clients; offer AI-assisted functionality where available to the applicable Client or Authorized User; provide implementation, migration, training, and support; manage Platform sessions; maintain Platform activity and audit records; troubleshoot technical issues; maintain Platform security and integrity; prevent or investigate suspected misuse or unauthorized access; uphold operational and administrative records; understand how Platform features are being used; evaluate active Platform usage and session duration; improve Platform functionality and user experience; develop future features and services using aggregated or de-identified information; communicate with Clients and Authorized Users; respond to legal or regulatory requirements; and enforce applicable agreements and policies while prioritizing data protection.

When an Authorized User accesses or uses Curriculum Warehouse, the Platform automatically generates specific system and audit records related to the use of the Platform, ensuring data protection and user information privacy. Depending on the features utilized, these records may include: user account identifier; authentication and login information; session dates and times; active session duration; actions performed within the Platform; changes made to curriculum or administrative records; publishing or approval activity; exports or downloads; administrative changes; and related system-generated event information. Curriculum Warehouse may utilize active session duration and related Platform activity information for purposes including: session management; district administration; Platform security; troubleshooting; operational visibility; usage analysis; curriculum workflow management; and Platform improvement. Curriculum Warehouse does not monitor a user's browsing, communications, device activity, or online activity outside of the Curriculum Warehouse Platform, prioritizing user information privacy. Certain audit information may be available to authorized Client administrators based upon their assigned roles and permissions to support district administration, Platform security, accountability, troubleshooting, curriculum workflow management, implementation oversight, and the appropriate administration of the Client's use of the Platform. The Client determines which authorized personnel may access district-level audit information and is responsible for its use in accordance with applicable law, Board policy, employment agreements, collective bargaining obligations, and internal procedures. Authorized NJ Data Diva LLC personnel with Provider-level administrative access may access audit information only as reasonably necessary to operate, maintain, and secure the Platform; troubleshoot technical issues; respond to Client support requests; investigate suspected security incidents or misuse; maintain system and data integrity; or comply with applicable legal obligations. NJ Data Diva LLC does not independently use identifiable Client audit information to evaluate a Client's employees or make employment-related decisions concerning Client personnel. Curriculum Warehouse may use aggregated or de-identified usage information to understand Platform utilization, identify technical or usability issues, improve functionality, and inform future product development while adhering to data protection standards. Platform audit information, including active session duration, is designed primarily for system administration, session management, security, operational visibility, usage analysis, and curriculum workflow purposes. It is not intended as a payroll, attendance, or employee timekeeping system and should not be relied upon as the sole measure of an individual's attendance, hours worked, productivity, compensation eligibility, or job performance. The Client is responsible for providing any notices, acknowledgements, or consents required by applicable law, Board policy, employment agreement, collective bargaining agreement, or internal procedures regarding the use of audit or activity information.

Curriculum Warehouse employs role-based access controls to ensure that Authorized Users gain access according to their assigned Client role and permissions, reinforcing Curriculum Warehouse privacy and user information privacy. 

Current Client-level Platform access roles include:

Admin;

Supervisor;

Editor; and

Viewer.

An account may also be placed in an Inactive state, which restricts ordinary Platform access for enhanced data protection. 

A distinct Corporate Admin role is designated for authorized NJ Data Diva LLC personnel who require Provider-level access for legitimate Platform administration, configuration, security, maintenance, support, or other operational needs. 

Depending on configuration and assigned permissions, Client administrators may have the ability to:

- provision or deactivate users;

- assign roles and permissions;

- administer Client settings;

- manage curriculum access;

- review Client-level Platform activity and audit information; and

- handle other district-specific administrative functions.

Clients are accountable for determining which individuals should be granted administrative privileges and for managing their internal use of information available through those privileges, thereby upholding user information privacy. 

Curriculum Warehouse strictly prohibits one Client from accessing another Client's private Platform environment through ordinary Platform functionality, further emphasizing our commitment to data protection.

NJ Data Diva LLC utilizes third-party technology and service providers to operate, secure, host, maintain, communicate about, and support the Curriculum Warehouse, ensuring user information privacy and data protection within the platform. These providers may process information only to the necessary extent to provide their applicable services.

The private Curriculum Warehouse application is hosted through Firebase Hosting and related Google Cloud/Firebase infrastructure, safeguarding curriculum data.

The private Platform is currently accessible through the Curriculum Warehouse Firebase-hosted application environment, including curriculum-warehouse.web.app.

Google Cloud and Firebase provide crucial services that may include:

- application hosting;

- database services;

- file storage;

- authentication;

- server-side processing;

- backup and recovery infrastructure;

- security services; and

- related Platform infrastructure.

Client curriculum information and private Platform data are maintained within the secure Google Cloud/Firebase environment rather than the GoDaddy public Website environment, enhancing Curriculum Warehouse privacy.

Curriculum Warehouse employs paid Google Gemini API services, provided by Google LLC, to support AI-assisted functionality, including lesson-content generation, while upholding data protection principles. Authorized Users with access to the applicable AI functionality may initiate requests through Curriculum Warehouse. When an Authorized User uses an AI feature, information included in that request may be transmitted to Google Gemini as reasonably necessary to generate the requested output.

Depending on the request and feature utilized, the information may encompass:

- prompt or request text;

- curriculum information included in the request;

- lesson-planning information;

- instructional context; and

- related technical request information.

It's important to note that Student Identifiable Information must not be submitted to Curriculum Warehouse AI-assisted functionality to maintain privacy standards. According to Google's Paid Tier data-use terms, prompts and responses are not used to improve Google products by default, ensuring user information privacy.

NJ Data Diva LLC does not intentionally utilize Client-specific curriculum content to train external AI models or submit it to optional model-improvement data-sharing programs, safeguarding client data protection.

For further details regarding AI processing, you can refer to the Curriculum Warehouse AI Use Policy and Subprocessors notice.

GoDaddy provides hosting and website management services for the public Curriculum Warehouse marketing and legal Website at curriculumwarehouse.com. However, GoDaddy does not serve as the primary hosting environment for the private Curriculum Warehouse application or district curriculum database. Depending on website functionality, GoDaddy may process information relating to:

- Website visits;

- technical Website requests;

- Website cookies or similar technologies;

- contact-form activity; and

- information voluntarily submitted through the public Website.

Brevo offers email delivery and communication services utilized by Curriculum Warehouse. Depending on the type of communication and functionality used, Brevo may process information such as:

- recipient name;

- professional email address;

- sender information;

- email subject and message content;

- delivery status;

- bounce or error information;

- date and time of email activity; and

- limited engagement information where applicable tracking functionality is enabled.

Brevo is not the primary storage environment for Client curriculum content, preserving data protection measures.

Curriculum Warehouse may also integrate with Client-selected identity providers such as Google Workspace or Microsoft 365 for SSO authentication. Where a client selects and controls the identity provider, they maintain their own separate relationship with that provider.

Additionally, Curriculum Warehouse may engage other third-party providers for functions such as:

- technical monitoring;

- support;

- analytics;

- professional services;

- communications;

- security;

- infrastructure; or

- future Platform enhancements.

When another material provider processes Client Content or Authorized User personal information on behalf of Curriculum Warehouse in connection with a production Platform feature, the relevant provider will be identified on the Curriculum Warehouse Subprocessors page as appropriate. A current list of relevant Platform subprocessors is maintained on the Curriculum Warehouse Subprocessors page, ensuring transparency in user information privacy practices.

NJ Data Diva LLC may also employ qualified contractors or professional service providers who are subject to appropriate confidentiality and data-protection obligations.

Information may be disclosed in the following circumstances regarding Curriculum Warehouse privacy and data protection.

To the Client

Information associated with a Client-managed Platform account may be accessible to authorized Client personnel based on Platform roles and permissions, ensuring user information privacy.

To Service Providers

Information may be disclosed to service providers and subprocessors when reasonably necessary to operate, secure, maintain, communicate about, or support Curriculum Warehouse while adhering to data protection standards.

At the Client's Direction

Information may be disclosed or processed when requested or authorized by the Client, respecting Curriculum Warehouse privacy guidelines.

For Legal or Security Reasons

NJ Data Diva LLC may disclose information when reasonably necessary to:

comply with applicable law, regulation, subpoena, court order, or lawful governmental request;

investigate suspected fraud, misuse, or unauthorized access;

protect the security or integrity of Curriculum Warehouse;

protect the rights or property of NJ Data Diva LLC, its Clients, or others; or

respond to an emergency involving potential harm where disclosure is permitted by law.

Business Changes

If NJ Data Diva LLC is involved in a merger, acquisition, financing, reorganization, or sale of all or part of its business, information may be transferred as part of that transaction, subject to applicable confidentiality and legal requirements, ensuring continued adherence to Curriculum Warehouse privacy and data protection principles.

Curriculum Warehouse offers AI-assisted functionality within supported Platform features and may modify or enhance these features over time, always prioritizing the privacy and protection of user information. The availability of AI functionality can vary based on Client configuration, subscription details, enabled features, assigned permissions, or the implementation stage. 

Where AI-assisted functionality is available: AI-generated material is designed to act as a draft or instructional support tool. Client personnel are responsible for reviewing and approving content prior to official use. Additionally, the Client must ensure compliance with their own Board policies, acceptable-use requirements, and necessary AI governance requirements. Importantly, Student Identifiable Information must not be submitted to AI-assisted functionality, and any information provided to an AI-assisted feature may be processed as reasonably necessary to deliver the requested functionality. 

Curriculum Warehouse employs paid Google Gemini API services to facilitate its production AI-assisted functionality. When an applicable AI-assisted feature is activated, the information included in the request may be transmitted to and processed by Google Gemini as necessary to generate the intended output. Under Google's paid Tier data-use terms, prompts and responses are not utilized to improve Google products by default, reinforcing our commitment to Curriculum Warehouse privacy. 

NJ Data Diva LLC ensures that Client-specific curriculum content is not intentionally used to train external AI models or submitted to optional model-improvement data-sharing programs, thereby enhancing data protection for our users. Google Gemini is recognized as an AI service provider on the Curriculum Warehouse Subprocessors page. 

AI Processing, Data Isolation, and NAfAI Standard Compliance: Curriculum Warehouse uses paid Google Gemini API services to support production AI-assisted features. According to applicable paid API terms, prompts, responses, uploaded files, and related customer inputs, collectively referred to as "Covered Data," are not utilized to train, fine-tune, or enhance external commercial AI models or to create synthetic datasets. Covered Data is processed solely to generate requested outputs, and when strictly necessary, under narrowly defined exceptions that address security incidents or safety threats. The provider maintains accurate system records to ensure any processing remains focused solely on these security and safety objectives. 

Further requirements related to AI-assisted functionality are outlined in the Curriculum Warehouse AI Use Policy, which emphasizes our commitment to user information privacy and data protection.

Curriculum Warehouse may create or use aggregated or de-identified information that does not reasonably identify an individual or Client, ensuring data protection and user information privacy. 

Such information may be used to: 

evaluate Platform performance; 

understand feature utilization; 

analyze general usage patterns; 

identify usability trends; 

improve Platform functionality; 

plan future product development; and 

prepare general operational or business analytics.

Curriculum Warehouse will not intentionally re-identify information that has been properly de-identified for these privacy-focused purposes.

Curriculum Warehouse employs commercially reasonable administrative, technical, and organizational safeguards to ensure the privacy of user information and protect data from unauthorized access, alteration, disclosure, or destruction. 

Our platform security practices involve several key measures, including: 

- private application hosting through Google Cloud/Firebase; 

- encrypted network connections; 

- encryption of cloud-stored data where supported by the hosting environment; 

- role-based access controls; 

- district-separated platform architecture; 

- authentication controls; 

- administrative access restrictions; 

- system and audit logging; and 

- automated backup and recovery processes. 

The private Curriculum Warehouse application, along with Client curriculum data, is securely maintained using the Google Cloud/Firebase infrastructure rather than through the public GoDaddy-hosted marketing website. 

All primary Curriculum Warehouse platform data is hosted on United States-based infrastructure. It's important to note that this statement pertains specifically to the primary Google Cloud/Firebase hosting environment, and does not imply that every third-party service provider, integration, communication service, or optional platform feature processes data exclusively within the same Google Cloud region or geographic location. 

Data processed by third-party providers, such as Google Gemini and other disclosed providers, remains subject to the respective provider’s service configuration, infrastructure, and contractual terms. 

It’s essential to understand that no online system can guarantee absolute security. 

Clients and authorized users are also responsible for safeguarding their:  

- devices;  

- accounts;  

- identity-provider settings;  

- authentication credentials;  

- local networks; and  

- client-controlled access configurations. 

For more detailed information, please refer to the Curriculum Warehouse Security & Data Protection policy.

Curriculum Warehouse prioritizes Curriculum Warehouse privacy by retaining information only for as long as reasonably necessary for the specified purposes, including platform operation, authentication, session management, security, support, troubleshooting, contractual obligations, dispute resolution, legal requirements, and legitimate business administration.

Retention periods for user information privacy may vary depending on the type of information, applicable provider, and Client agreement.

For instance:

- Authorized User account information may be maintained as long as the relevant account or Client relationship is active.

- Platform activity, active-session, authentication, and security information may be retained as deemed necessary for administration, security, troubleshooting, accountability, and operational needs.

- Authentication records linked to unintended student authentication attempts may be preserved when required for security, access administration, investigation, or remediation.

- Client curriculum content may remain accessible throughout the duration of the applicable subscription or Pilot Term.

- Certain agreements may allow for a post-termination period in which Client information is available for export or transition purposes.

- Some information may exist within protected backup or disaster-recovery systems even after deletion from active systems, until it is overwritten, rotated, or otherwise removed per the relevant backup processes.

Data processed through a third-party service provider may also be subject to unique technical retention practices specific to that service.

The deletion of Client-specific Platform information following termination may necessitate an authorized administrative process and will be executed in line with the applicable Client agreement and Curriculum Warehouse offboarding procedures.

Clients are encouraged to review their relevant agreements for detailed offboarding or retention provisions that apply to Client Content.

For accounts created or managed by a Client, the Client generally controls the individual's authorization to use Curriculum Warehouse, ensuring user information privacy. Authorized Users seeking to: correct their account information; change their role or permissions; deactivate their account; or request information relating to their Client-managed Curriculum Warehouse account should ordinarily contact their Client or district administrator first. NJ Data Diva LLC will reasonably cooperate with Clients when necessary to address appropriate account or privacy requests related to data protection. Individuals who have provided information directly to NJ Data Diva LLC through the Website, a demonstration request, support inquiry, email communication, or other direct interaction may contact us regarding the correction or deletion of that information, where appropriate. Depending upon applicable law and the individual's location, additional rights concerning personal information may apply.

The public Curriculum Warehouse Website, along with the third-party services that support its operation, may utilize cookies or similar technologies for various purposes, including enhancing website functionality, ensuring security, managing visitor preferences, measuring website performance, conducting aggregated traffic analysis, and performing other essential functions related to Website management. 

To inform visitors about applicable Website cookies and tracking, the Website currently offers a cookie notice. This is an essential part of our commitment to Curriculum Warehouse privacy and user information privacy.

Visitors can also manage certain cookies through their browser settings and available controls. For further details regarding cookies and related technologies, please refer to the Curriculum Warehouse Cookie Policy, which outlines our approach to data protection.

The private Curriculum Warehouse Platform is specifically designed for authorized educational professionals and administrators, and it is not intended for general consumer use or for students. Therefore, students are not considered Authorized Users of the private Platform.

Clients are responsible for properly configuring access and authentication settings to ensure that only authorized professional users can access the Platform. This is crucial for maintaining Curriculum Warehouse privacy and user information privacy.

Curriculum Warehouse does not actively solicit Student Identifiable Information during the normal use of the Platform and must not be utilized as a repository for student-identifiable records or sensitive student information.

In rare cases, an unauthorized student account may attempt to authenticate through a Client-managed SSO environment. Such attempts might generate limited authentication or security information as outlined in Section 3 of this Privacy Policy and the Curriculum Warehouse Student Data Scope, which emphasizes the importance of data protection.

An unintended authentication attempt does not grant authorization for student use of the Platform.

Certain Curriculum Warehouse features enable Clients to make selected curriculum information publicly available, all while prioritizing Curriculum Warehouse privacy and data protection standards. The Client decides which curriculum information to publish using the public-display functionality. Clients and Authorized Users must review the content before publication to ensure that the material selected for public display does not contain: 

- Student Identifiable Information; 

- Confidential student information; 

- Restricted Client information; 

- Unintended personal information; or 

- Other information that should not be publicly disclosed.

While Curriculum Warehouse provides the technical publishing functionality, it does not independently determine what Client curriculum content meets the legal requirements for public disclosure, particularly regarding user information privacy.

NJ Data Diva LLC may update this Privacy Policy from time to time to reflect changes in: platform functionality; business practices; technology; service providers; security practices; or applicable requirements pertaining to data protection and user information privacy within the Curriculum Warehouse. The current version will be posted on the Curriculum Warehouse Website with an updated “Last Updated” date. Where a change materially affects contractual rights or obligations of an existing Client, the change will be handled consistent with the applicable Client agreement and applicable law.

For any questions, concerns, or requests regarding the Curriculum Warehouse privacy policy or our data protection practices, please reach out to: NJ Data Diva LLC, Curriculum Warehouse. You can email us at jackie@curriculumwarehouse.com or visit our website at curriculumwarehouse.com. 

If you have a client-managed account, we recommend contacting your district or organizational administrator first, especially for inquiries related to account permissions, curriculum information, user information privacy, or activities controlled by the district on the Platform.