California Privacy Notice

Last updated: 8/14/2026

This California Privacy Notice explains how Parchment, an Instructure company (“Parchment,” “we,” “us”), collects, uses, and discloses personal information about California residents, and the rights you have under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). It applies only to California residents and supplements our Privacy Policy. Terms defined in the CCPA have the same meaning here. Terms we don’t define here have the meaning given in the Privacy Policy.

To make a privacy request or opt out of the sale or sharing of your personal information, see Your privacy choices.

Parchment does not knowingly collect personal information from California residents under the age of 16.

When this notice does not apply: information we handle for schools

Parchment often collects personal information about students indirectly, on behalf of a school, district, institution, or other organization that may be a “business” under the CCPA. When we process that information to order, fulfill, and deliver academic credentials and records for one of these organizations, we act as a service provider, and that processing is governed by our contract with the organization and by the organization’s own privacy policy, not by this notice. For information about how your school handles your records, please see that organization’s privacy policy.

Personal information we collect

In the past 12 months, Parchment has collected the following categories of personal information. “Personal information” means information that identifies, relates to, describes, or could reasonably be linked with a particular consumer or device.

Category Examples
Identifiers. A real name, alias, postal address, unique personal identifier, online identifier, IP address, or email address.
California customer records (Cal. Civ. Code § 1798.80(e)). A name, signature, address, telephone number, education, or employment history. Some of this may overlap with other categories.
Protected classifications under California or federal law. Age (40 or older), or gender.
Commercial information. Records of products or services purchased, obtained, or considered.
Internet or other network activity. Browsing history, search history, and how you interact with a website, application, or advertisement.
Non-public education information (FERPA, 20 U.S.C. § 1232g; 34 C.F.R. Part 99). Education records tied to a student and kept by a school or someone acting for it, such as grades, transcripts, class lists, schedules, student ID codes, or disciplinary records.

Personal information does not include publicly available government records, de-identified or aggregated information, or information excluded from the CCPA’s scope.

Sources. We collect this information directly from you, from your activity on our site and services, from the schools and organizations you interact with, and from business partners, service providers, advertising networks, and analytics providers.

Why we collect and use personal information

We use personal information to provide and improve our site and services, to fulfill the reason you gave it to us, to contact you, to analyze how our services are used, to market our services, for security, and for legal compliance. More specifically, our business purposes include auditing our interactions with you, keeping our systems secure, detecting and preventing fraud, debugging, providing services such as processing orders and payments, internal research, and maintaining and improving our services.

How we disclose personal information

We may disclose personal information to third parties for a business purpose, including designated institutions or third parties you direct us to; service providers; professional advisors; parties involved in academic research; parties where disclosure protects legal rights; a party to a business transfer; and social media services you choose to connect. In the past 12 months, we’ve disclosed the categories above for these purposes.

Selling and sharing. We and our advertising partners collect device identifiers, cookies, advertising IDs, IP addresses, and usage activity, and use them to show you more relevant ads. Under California law, this activity may count as “selling” or “sharing” your personal information for targeted advertising, even when no money changes hands. You can opt out at Your privacy choices.

Parchment does not sell member data or academic credential data, so those records are not part of any sale or sharing for advertising. We also do not sell the personal information of California residents we know to be under 16.

We may also transfer personal information to a successor entity in connection with a merger, acquisition, bankruptcy, reorganization, or sale of all or substantially all of our assets.

Your rights and choices

If you live in California, you have the rights below. You don’t need to create an account to use them, and we won’t discriminate against you for exercising them.

  • The right to know the categories and specific pieces of personal information we collect, use, disclose, and sell or share about you, where we get it, why we collect it, and who we share it with.
  • The right to correct inaccurate personal information we keep about you.
  • The right to delete the personal information we’ve collected from you.
  • The right to opt out of the sale or sharing of your personal information. If you opt out of certain sales or sharing, we may not be able to provide services that depend on it.
  • The right to non-discrimination for exercising any of these rights.

[PLACEHOLDER — VENABLE TO CONFIRM BEFORE PUBLISH. Sensitive personal information and the right to limit: if Parchment collects sensitive personal information (the main Privacy Policy references SSNs and race/ethnicity), CPRA also gives California residents the right to limit its use and disclosure, and this notice must describe that right and offer a control. If Parchment does not collect sensitive personal information for those purposes, state that instead. Delete this bracket and replace it with the confirmed language before publishing.]

How to submit a request

Make a request in either of these ways:

You can also opt out of the sale or sharing of your personal information without contacting us, using the cookie controls at Your privacy choices.

Verifying your request. We may need more information to confirm your identity or understand your request. At a minimum, please give us your full name, an email address or other contact information, and enough about your request for us to act on it. We won’t require you to create an account. If we can’t verify your identity, or if the information is too sensitive to share, we may not be able to provide it.

Authorized agents. You can name an authorized agent to make a request for you, in writing or through a power of attorney. We’ll ask the agent to prove you authorized them before we act, and we may ask you to verify your own identity.

Other California privacy rights

California’s “Shine the Light” law (Civil Code § 1798.83) lets California residents ask about our disclosure of personal information to third parties for those parties’ direct marketing. Parchment does not disclose personal information to third parties for their own direct marketing. For more information, email privacy@parchment.com.

Changes to this notice

We may update this notice from time to time. When we do, we’ll post the updated notice here and change the “Last updated” date above.

Contact us

For questions about this notice or how Parchment handles your information, reach us at:

Instructure
6330 South 3000 East Suite 700
Salt Lake City, UT 84121
Attn: General Counsel