Instructure Community Privacy Notice

Effective Date: 2025-23-05

Instructure, Inc. and its affiliates and subsidiaries (“Instructure,” “we,” “our,” or “us”) prepared this Instructure Community Privacy Notice (“Notice”) to describe how we collect, use, and share the information of individuals who visit our website at https://community.canvaslms.com/ (the “Site” or “Community”).

The Site allows you to join the Instructure Community to explore, question, converse, and collaborate with education enthusiasts from around the world as we use Instructure products and improve the learning experience together.

You can learn more about our specific Products and how personal information may be disclosed through those Products here. You can find the Community's Guidelines here.

Information Collection

When using our Site, you may provide information about yourself, including your first and last name, username, and any other information you choose to provide. For example, we collect this information when you create an account, build your profile, post or respond to posts, contact us, or interact with us for any other purpose.

We (and other entities) automatically collect information relating to your interactions with us and our Site, including browser type, IP address, pages visited and other activities on the Site, device type, and time and date of visit, and other information we collect through the use of cookies and similar technology. See the “Analytics” section of this privacy policy to learn more about the use of this information and the choices available to you.

Information Use

We may use your information for any lawful purpose, including the following:

• To operate the Community site, including reviewing and responding to your posts;
• To operate and improve our products and services;
• To operate, personalize, and improve the Site, including for analytics purposes;
• To promote and market our products and services, including to send updates, promotions, and materials that may be of interest to you;
• To comply with the law and to maintain the security of our Site; or
• With your consent, or as otherwise disclosed at the time information is collected.

We may use information that has been de-identified or aggregated without limitation.

Information Sharing

We may share the information we collect with other parties, including the following:

• With third-party service providers who process information on our behalf, such as data hosting services, or with our legal or business advisors;
• With any affiliates or joint venture partners that we may have in the future;
• As part of a corporate sale, merger, or acquisition, or other transfer of all or part of our assets, including as part of a bankruptcy proceeding;
• Pursuant to a subpoena, court order, governmental inquiry, or other legal process or as otherwise required by law, to protect our rights or the rights of third parties, or to protect the safety or security of any person or entity;
• With your consent or as otherwise disclosed at the time of data collection or sharing.

We may share information that has been de-identified or aggregated without limitation.

The Community is your place to discuss and network about all things Canvas and Mastery Connect. The Community may offer interactive features, such as the ability to communicate with other Site visitors, to submit and post your own content, and engage with an AI-powered chatbot that provides support. If you disclose information in one of these forums, this information can be viewed, collected, and used by others.

Analytics

Instructure may work with third parties, such as the website provider, that collect data about your use of the Site for non-advertising purposes. We may also use other third-party services, such as Google Tag Manager and Meta Pixel, to improve the performance of the Site and for analytics and marketing purposes.

Additionally, your browser may offer tools to limit the use of cookies or to delete cookies; however, if you use these tools, our Site may not function as intended.

State Privacy Rights

You may have certain rights under state privacy laws with respect to personal information we collect. If you are subject to the privacy law of such states, this section of the Privacy Policy contains disclosures required by law and explains rights that may be available to you.

Personal Information We Collect and Disclose.

In the preceding 12 months, Instructure collected and disclosed the following categories of personal information:

• Personal and online identifiers (such as real name, alias, postal address, IP address, and/or email address);
• Internet or other electronic network activity information (such as browsing history, search history, interactions with a website, application, or advertisement);
• Professional or employment-related information;
• Education information;
• Commercial or transactions information (such as records of products or services purchased, obtained, or considered); and
• Other information about you that is linked to the personal information above.

We do not “sell” or “share" the personal information we collect as defined by state laws, including personal information of individuals under 16.

Categories of Sources.

We collect personal information from different sources as further described above in the “Information Collection” section of this Privacy Policy.

Our Purposes for Processing Personal Information.

We use and disclose the personal information we collect for our commercial and business purposes, as further described above in the “Information Use” section of this Privacy Policy.

We may use and share de-identified information to the extent permitted by applicable law. When we use de-identified information, we maintain and use the information in de-identified form and do not attempt to re-identify it, except to check whether our deidentification processes satisfy the requirements of applicable law.

Recipients of Personal Information.

We disclose the categories of personal information designated above to the categories of third parties listed above in the “Information Sharing” section of this Privacy Policy for commercial and business purposes.

Your Rights.

Residents of certain states have rights with respect to the personal information collected by Instructure. You may be able to exercise the following rights regarding personal information, subject to certain exceptions and limitations.

• The right to know the categories of personal information we collect or disclose about you; the categories of sources of such information; the business or commercial purpose for collecting your personal information; and the categories of third parties with whom we disclose personal information.
• The right to confirm whether we are processing personal information about you.
• The right to receive a portable and readily usable copy of certain personal information we have collected about you, to the extent feasible.
• The right to correct or update personal information we have collected about you.
• The right to delete certain personal information we have collected about you.
• The right to information about the financial incentives that we offer to you, if any.
• The right not to receive discriminatory treatment for the exercise of the above privacy rights.

To exercise any of the above rights, please contact us using the following information and submit the required verifying information, as further described below:

• By phone at (844) 515-2272.
• By emailing us at privacy@instructure.com

Appeal Rights:

Depending on applicable law, you may have the right to appeal our decision to deny your request, if applicable. To exercise such an appeal right, please contact privacy@instructure.com.

Verification Process and Required Information:

Note that we may need to request additional information from you to verify your identity or understand the scope of your request. You will not be required to create an account with us to submit a request or have it fulfilled. We will require you to provide, at a minimum, your name and email address.

Authorized Agent:

Depending on your jurisdiction, you may be permitted to designate an authorized agent to submit certain requests on your behalf. In order for an authorized agent to be verified, you must provide the authorized agent with signed, written permission to make such requests or a power of attorney. We may also follow up with you to verify your identity before processing the authorized agent's request.

Retention

We will retain your information for as long as your account on the Community is active or as needed to provide you Services. We will also retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Personal information that is subject to an access request will be retained even if access is denied in accordance with applicable privacy laws until the requestor has exhausted all recourses and/or appeal mechanisms under such laws. Where personal information is no longer needed and the requests identified above have been complied with, the personal information will be securely destroyed or de-identified.

Changes to this Privacy Notice

If our information practices change, we will post these changes on this page. We encourage you to visit this page periodically to learn of any updates.

Contact Information

Instructure welcomes your comments or questions regarding this Privacy Notice. Please email us at community@instructure.com, or contact us at the following address, or phone number.

To contact our Data Protection Officer, please use the following email address privacy@instructure.com.