Traffic Lite Privacy Policy

What Traffic Lite Does

Traffic Lite is a Chrome Extension and web application operated by Leading Edge Learning, LLC (“Traffic Lite,” “we,” “us,” or “our”). Traffic Lite integrates with Google Classroom and allows schools and educators to display an AI-usage policy indicator (for example, Green / Orange / Yellow / Red) on Google Classroom posts, including Assignments, Quiz Assignments, Questions, and Materials.

Traffic Lite is designed to help schools communicate AI-usage expectations consistently within Google Classroom and to provide authorized educator/admin visibility into policy-indicator metadata. Traffic Lite is intended for educator and administrator use, and student installation is not required. Traffic Lite does not collect student submissions or student private communications from Google Classroom. Traffic Lite does not store assignment body or instruction content. When an educator intentionally uses Traffic Lite GPS, teacher-authored assignment title and instructions displayed in the Google Classroom composer may be processed transiently as described below. Separately, when an educator applies an AI-usage policy indicator, Traffic Lite may store the associated Google Classroom course name and post title as policy-indicator metadata.

Traffic Lite GPS:

Traffic Lite GPS is an optional, educator-initiated feature that provides AI-usage policy recommendations for teacher-authored Google Classroom content. GPS does not automatically analyze Classroom content. An authorized educator must intentionally activate the feature to request a recommendation.

When an educator uses GPS, Traffic Lite may transiently process the teacher-authored assignment title and instructions displayed in the Google Classroom composer. This content is sent to Google's Gemini API solely to generate the requested AI-usage policy recommendation. Traffic Lite does not retrieve Google Drive file contents or Classroom attachment metadata for GPS analysis.

Traffic Lite does not retain the teacher-authored assignment title or instruction content processed through GPS after the recommendation is returned. GPS does not access or analyze student submissions or student private communications.

Traffic Lite uses Google's paid Gemini API service for this functionality. Content processed through GPS is not used by Traffic Lite or its AI service provider to train general-purpose artificial intelligence or machine-learning models.

Optional Google Workspace Staff Directory Sync

Authorized school or district administrators may optionally connect Traffic Lite to their Google Workspace directory to provision and organize staff accounts. This feature is admin-initiated and is not required for ordinary teacher use of Traffic Lite.

When enabled, Traffic Lite requests limited read-only Google Admin SDK Directory permissions to access administrator-selected organizational units, Google Groups and group memberships, and user directory information needed for staff provisioning and synchronization.

When an authorized administrator enables Google Workspace Sync, Traffic Lite may process limited Google Workspace directory information needed to create, match, organize, and maintain authorized staff accounts. This may include organizational unit names, Google Group names and membership relationships, and, for administrator-selected staff sources, staff name, primary email address, Google user identifier, account suspension status, and synchronization status/timestamps.

Traffic Lite stores only the directory information needed to provision and maintain authorized staff accounts and associated Traffic Lite Groups. Traffic Lite does not use Workspace Sync to access Gmail content, Google Drive content, Google login history, home addresses, phone numbers, or other unrelated Google Workspace data.

Traffic Lite Workspace Sync is designed for staff provisioning, not student rostering. Administrators select specific organizational units or Google Groups to synchronize, and Traffic Lite applies safeguards intended to prevent student-designated sources from being selected. Traffic Lite does not intentionally store student directory accounts through Workspace Sync. If an administrator selects a mixed directory source containing both staff and student accounts, limited directory information may be processed temporarily while Traffic Lite evaluates the selected source, and Traffic Lite seeks to exclude likely student accounts from being stored.

FERPA & COPPA Compliance

Traffic Lite is designed for use by schools and educators and operates as a school-authorized educational tool.

FERPA (Family Educational Rights and Privacy Act):

Where applicable, under FERPA, schools may disclose education records to a provider that performs institutional services or functions on the school’s behalf, subject to FERPA requirements and school authorization. Traffic Lite acts as a service provider to schools and educators and processes limited classroom metadata only as necessary to provide the service.

Traffic Lite:

• Uses data only to provide and operate the Service, including Google Classroom policy-indicator functionality, educator-initiated Traffic Lite GPS, optional Google Workspace Directory Sync, account support, security, and related service operations

• Does not sell data or use student information for advertising or marketing

• Does not access or analyze student submissions or student private communications from Google Classroom

• Supports school and educator requests to delete associated data

Schools and districts remain responsible for determining FERPA applicability and for authorizing use consistent with their policies and agreements.

Traffic Lite is also designed to align with applicable state student data privacy laws, including but not limited to New York Education Law § 2-d, Illinois SOPPA, and the Colorado Student Data Transparency and Security Act, as applicable to the schools and districts we serve.

COPPA (Children’s Online Privacy Protection Act):

Traffic Lite may be used in classrooms that include students under age 13.

Where COPPA applies, schools may provide consent on behalf of parents for operators to collect students' personal information for school-authorized educational purposes.

Traffic Lite:

• Collects only the limited information necessary to operate the service

• Does not collect children’s personal information for commercial purposes

• Does not display advertising

• Does not build behavioral profiles of students

Traffic Lite relies on school or educator authorization for classroom use where students may be under age 13.

UK Data Protection (UK GDPR)

Traffic Lite is designed to align with applicable United Kingdom data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

When used by schools in the UK:

• Schools act as the data controller

• Traffic Lite acts as a data processor, handling data only on behalf of the school

• Traffic Lite processes only the minimum personal data necessary to provide its authorized educational functionality, including limited account, Google Classroom, policy, usage, and — where enabled by a school administrator — staff directory metadata.

• We rely on lawful bases such as: Public task (delivery of education by schools), and/or Legitimate interests in providing an educational service

Traffic Lite does not use personal data for advertising, profiling, or unrelated purposes.

Children’s Data (UK):

Traffic Lite is designed to align with the Age Appropriate Design Code (Children’s Code).

In particular:

• We apply data minimization principles and collect only what is necessary

• We do not profile or track student behavior

• We do not use children’s data for marketing or commercial purposes

• We design the service to operate under school direction and oversight

Traffic Lite is intended for use within an educational setting and relies on schools to authorize its use with students.

Data We Do NOT Collect

Traffic Lite does not collect:

• Passwords

• Payment or financial account data

• Student submissions or student-authored assignment content from Google Classroom

• Teacher-authored assignment body or instruction content for storage or retention; such content is processed only transiently when an educator intentionally uses Traffic Lite GPS as described above.

• Student private communications from Google Classroom

• Web browsing history unrelated to Traffic Lite functionality

• Precise location data

• Health or biometric information

Traffic Lite may collect user-submitted support/issue text and optional attachments only when a user intentionally submits a feedback/issue report. Traffic Lite may process IP address and derive approximate location (city/region/country) for security and account-install notification purposes.

Cookies & Local Storage

Traffic Lite uses Chrome’s extension storage to save basic preferences and session state so the experience persists between sessions. Traffic Lite does not store Google account passwords in local storage. Traffic Lite also does not store OAuth refresh tokens in local storage.

Chrome Extension Permissions

Traffic Lite’s production extension requests the following Chrome permissions: storage, identity, alarms, activeTab, scripting, tabs, notifications, and windows. These permissions are used only to support authentication, extension operation in Google Classroom, policy-indicator functionality, and service reliability/security.

How We Use Data

We use collected data only to:

• Authenticate users via Google

• Identify the user and authorized role/access level

• Associate AI-policy indicators with relevant Google Classroom courses/posts

• Store limited Google Classroom course names and post titles associated with AI-policy indicators

• Display AI-usage policy indicators in context

• Provide authorized reporting views of policy-indicator metadata

• Process and respond to user-submitted feedback/issue reports

• Record extension telemetry such as install heartbeat, extension last-seen timestamp, and interaction/click activity count to support reliability, security, and account support

• Maintain basic application and extension functionality, reliability, and security

• Provision, match, synchronize, and organize authorized staff accounts using administrator-selected Google Workspace organizational units or Google Groups, when Workspace Sync is enabled by an authorized administrator

• Identify inactive or missing staff accounts and support administrator-directed account maintenance, archiving, and removal

• Process teacher-authored assignment titles and instructions transiently, when an educator intentionally uses Traffic Lite GPS, to generate the requested AI-usage policy recommendation

• When domain-cluster alerts are enabled, process school or organization email domains and related account-volume information to identify new institutional usage, including limited Google Gemini API and Google Search-grounded research of publicly available institution and administrator contact information for internal operational alerts. This processing is not required for ordinary school or educator use of Traffic Lite.

Traffic Lite does not use collected data for advertising, profiling, or unrelated commercial purposes.

A current list of subprocessors may be found on our Security page.

Data Sharing (all parties)

We do not sell personal data and do not share personal data with advertisers. We share data only as necessary to operate Traffic Lite, including with:

1) Google (Authentication, Google Classroom APIs, optional Google Workspace Directory APIs, and Gemini API): To enable sign-in, authorized Classroom functionality, optional staff-directory synchronization, and educator-initiated Traffic Lite GPS recommendations. When an educator uses GPS, limited teacher-authored assignment title and instruction content is transmitted to Google's paid Gemini API solely to generate the requested recommendation. When domain-cluster alerts are enabled, Traffic Lite may also use Google's paid Gemini API, including Google Search grounding, to identify publicly available institution and administrator contact information associated with a school or organization email domain.

2) Infrastructure and Service Providers: For example, hosting and delivery providers, database providers, transactional email providers, and limited geolocation/security support providers used to operate and secure Traffic Lite (such as Netlify, Railway, MongoDB Atlas, and Resend).

These providers process data on our behalf under appropriate contractual or legal protections. We may also disclose information if required by law, legal process, or to protect rights, safety, and security.

Google API Services & Limited Use

Google API Services & Limited Use

When Traffic Lite connects to authorized Google services, including Google Classroom and optional Google Workspace Directory Sync, Traffic Lite uses Google user data only to provide and improve the user-facing functionality requested by the user or school.

Traffic Lite uses Google authorization in the following production contexts:

A) Standard Traffic Lite / Google Classroom scopes

• userinfo.email

• userinfo.profile

• classroom.courses.readonly

• classroom.courseworkmaterials

• classroom.topics

• (and standard OpenID/OAuth identity flow fields as required)

Traffic Lite does not request Google Classroom roster/member-email scopes in this production configuration.

B) Optional Google Workspace Directory Sync scopes (requested only when an authorized administrator deliberately connects Workspace Sync)

• admin.directory.user.readonly

• admin.directory.group.readonly

• admin.directory.group.member.readonly

• admin.directory.orgunit.readonly

These Directory scopes are read-only and are not required for ordinary teacher use of Traffic Lite.

Traffic Lite does not use Google user data for advertising, profiling, or marketing purposes.

Traffic Lite’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

More information: https://developers.google.com/terms/api-services-user-data-policy

Children, Students, & School Use

Traffic Lite is intended for use by schools and educators.

The service operates under the direction of a teacher, school, or district administrator as part of school-authorized use of Google Classroom.

Traffic Lite does not knowingly collect personal information directly from children outside school-authorized educational use.

Schools and authorized educators may request deletion of associated data at any time.

Data Retention & Deletion

AI-policy metadata is retained while the associated account is active, unless a shorter period is required by law/school agreement or deletion is requested.

When an authorized administrator removes an installed staff user from the active roster, Traffic Lite may archive the user account and retain limited historical usage or policy metadata needed for reporting, security, record integrity, or contractual purposes. Archived users no longer have active access to Traffic Lite. Associated information remains subject to applicable deletion requests, school agreements, legal requirements, and Traffic Lite’s general retention practices. Users who never installed Traffic Lite may be deleted outright rather than archived. Disconnecting Google Workspace Sync removes Traffic Lite’s Directory authorization credentials and sync settings for that domain; previously provisioned staff accounts remain in Traffic Lite unless separately removed by an administrator or through a deletion request.

User-submitted feedback/issue report records (including optional attachments) are retained only as needed to operate, troubleshoot, secure, and support the service, unless a shorter period is required by law/school agreement or deletion is requested.

Local extension/browser settings remain on the user’s device until removed (for example, by uninstalling the extension or clearing extension/browser storage).

Deletion requests can be submitted to: derek@trafficliteedu.com (please include teacher and school details).

Following account termination, service discontinuation, or a verified deletion request, Traffic Lite will work with the school or district to securely delete or transfer applicable data within commercially reasonable timeframes and in accordance with applicable school agreements and law.

Security

Traffic Lite uses industry-standard safeguards designed to protect personal information, including encryption in transit (TLS/HTTPS) and industry-standard safeguards designed to protect data at rest, where applicable.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Traffic Lite does not use student data, teacher data, district data, or Google Classroom data to train general-purpose artificial intelligence or machine learning models.

In the event of a confirmed data breach affecting school or educator data, Traffic Lite will notify the affected school or district as soon as practicable and in no event later than seventy-two (72) hours after confirming the breach, unless earlier notice is required by applicable law or agreement.

Legal basis (for EEA / UK Users)

Where applicable, we process personal data under one or more of the following legal bases:

• Legitimate interests in providing and securing an educational service

• Performance of a contract (for example, with schools or educators)

• Compliance with legal obligations

• Consent, where required by applicable law

Your Choices & Rights

Subject to applicable law, teachers and schools may request:

• Access to personal data

• Correction of personal data

• Deletion of personal data

• Export of personal data

Requests may be sent to: derek@trafficliteedu.com. Please include teacher and school details so we can verify and process your request. Users may also stop further extension-based collection by removing the extension.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the Effective Date above and provide additional notice where required by law.

Contact

If you have questions about this Privacy Policy or our data practices, contact: Derek Tranchina | derek@trafficliteedu.com

Traffic Lite is operated by Leading Edge Learning, LLC.