Privacy Policy

ABOUT -> Legal -> Privacy Policy

Date of Last Revision: July 28, 2026

We, SEMAFOX INC., (“SEMAFOX”) provide our college management system (“College Office”) through our websites located at https://login.collegeoffice.com and https://login.collegeoffice.net . Please read this Privacy Policy carefully: it explains our practices regarding the collection, use, and disclosure of information stored in College Office.

About this Privacy Policy

This Privacy Policy applies to https://login.collegeoffice.com and https://login.collegeoffice.net and covers any functionality provided by College Office to manage the information of an educational institution such as students personal information, teachers personal information, academic data and educational records, financial transactions, schedules and other data used in the management of an educational institution (the "Service").

This Privacy Policy applies to all users of College Office, both the educational institutions which use College Office to manage their institution (the "Customers"), and the individuals who have been granted access by the Customer to access and use College Office via a unique login (the customer's "Authorized Users").

By accessing our Service, you accept our Privacy Policy, and you consent to our collection, storage, use and disclosure of your personal information as described in this Privacy Policy.

EU-U.S. AND SWISS-U.S. DATA PRIVACY FRAMEWORK (DPF)

College Office stores customer data across multiple data centers depending on the customer's region. For customers based in North America, both relational data (student, academic, and financial records) and files are stored in secure data centers located in the United States. For customers based in the European Union, relational data is stored in a secure data center in Switzerland, while files are stored separately in a secure data center in the European Union. In all cases, data is processed by SEMAFOX, a company organized under the laws of the United States, in connection with providing the Service.

SEMAFOX is subject to the investigatory and enforcement powers of the US Federal Trade Commission and complies with the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework as set forth by the US Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Union and Switzerland to the United States, in reliance on the EU-U.S. DPF and the Swiss-U.S. DPF.

SEMAFOX has certified to the Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles and the Swiss-U.S. Data Privacy Framework Principles. If there is any conflict between the terms in this privacy policy and either set of Principles, the Principles shall govern. To learn more about the Data Privacy Framework program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

In compliance with the Data Privacy Framework Principles, SEMAFOX commits to resolve complaints about our collection or use of your personal information. EU and Swiss individuals with inquiries or complaints regarding our Data Privacy Framework policy should first contact SEMAFOX by emailing us at [email] or by writing to Semafox, 630 Charles Street Ave, Towson MD 21204, USA.

SEMAFOX has further committed to cooperate with the panel established by the EU Data Protection Authorities (DPAs) with regard to unresolved EU-U.S. Data Privacy Framework complaints concerning data transferred from the EU, and with the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved Swiss-U.S. Data Privacy Framework complaints concerning data transferred from Switzerland.

Pursuant to Article 27 of the European General Data Protection Regulation (GDPR), SEMAFOX has appointed DataRep as its GDPR representative in the EU. You can contact DataRep regarding matters pertaining to the GDPR:

by using DataRep's data request form: https://www.datarep.com/data-request/
by email at datarequest@datarep.com
by writing to DataRep, registered office: 77 Camden Street Lower, Dublin, D02 XE80, Ireland.

An individual has the possibility, under certain conditions, to invoke binding arbitration for complaints regarding EU-U.S. or Swiss-U.S. Data Privacy Framework compliance not resolved by any of the other applicable mechanisms, as detailed in Section C of Annex I of the respective Framework.

EU and Swiss data subjects have the right to lodge a complaint with a supervisory authority in the EU or with the FDPIC, respectively.

SEMAFOX shall remain liable under the EU-U.S. and Swiss-U.S. Data Privacy Framework Principles if its agents process personal information in a manner inconsistent with those Principles, unless SEMAFOX proves that it is not responsible for the event giving rise to the damage.

Choices and Means for Limiting Use and Disclosure

While SEMAFOX does not disclose personal data to third parties for business or marketing purposes, individuals have the following choices and means to limit use and disclosure:

Limiting Data Collection: Contact your educational institution to discuss what personal information is necessary for College Office to function. Your institution controls what data is input into the system.
Data Access and Correction: You can view your personal information in College Office (click your name in the top-left corner). To correct or modify data, contact your institution directly.
Data Deletion: To request deletion of your personal information, contact your institution. Deletions will be processed in accordance with your institution's retention policies and legal obligations.
Third-Party Processing: Your data is processed by third-party technology providers (cloud hosting and backup services) under strict data processing agreements that prohibit secondary disclosure.
Legal Disclosures: We may disclose data when legally required (law enforcement, court orders, FERPA compliance). You have the right to lodge a complaint with supervisory authorities if you believe such disclosures are improper.

Summary

This Privacy Policy clarifies how personal information is handled in College Office:

We process personal data solely on behalf of the educational institutions using College Office. Please refer to your institution’s Privacy Policy to understand how they manage your data.
Data collected via College Office is used exclusively to provide services to those educational institutions and their authorized users.
We do not share your data with third parties. However, your data is stored by trusted third-party technology providers (data centers and backup service providers).
Your data is never used for purposes beyond what’s stated here.
We may disclose personal data when legally required, such as for national security or law enforcement.
You’ll receive system-related emails about important updates; unsubscribing is not possible.
You can view your personal information by clicking your name at the top left of the home page. Academic and financial records are also accessible from the same page.
To correct or remove data, please contact your institution directly.
We take reasonable measures to protect your data, but cannot guarantee complete security.
All data is stored and processed in a U.S.-based data center.
Only essential cookies are used to manage your session; no non-essential tracking is employed.
We may update this Policy at any time, and will notify you accordingly.
By using College Office, you consent to this Privacy Policy.

The rest of this document explains those points with more details

Section 1: Customers

Customers are the institutions and their employees that use College Office to manage the records of their students and instructors. They are ultimately responsible for the information they choose to store in College Office. We only use the information stored in College Office to provide the Service of College Office to our Customers and their Authorized Users.

Section 2: Authorized Users

Authorized Users are the employees, instructors and students authorized by our Customers to access College Office. This section of the Privacy Policy applies to information that SEMAFOX may receive about Authorized Users.

2.1 What kind of information do we collect and how do we obtain this information?

The institutions that use College Office collect both “Non-Personal Information” and “Personal Information” about you and record that information into College Office.

“Non-Personal Information” includes information that cannot be used to personally identify you.

“Personal Information” includes information that can be used to personally identify you, such as your name, address, date of birth and email address.

College Office is not designed to collect sensitive information such as religious belief, ethnicity, sexual orientation or medical information, but our Customers could configure College Office in such a way as to collect this kind of information: you should contact your educational institution and read their privacy policy.

All Personal Information we receive with respect to Authorized Users is collected by and held on behalf of our Customers and for the sole purpose of providing the Service of College Office to our Customers and their Authorized Users. If you are an Authorized User, you acknowledge and agree that any Personal or other information that you provide to the Customer via College Office is received, used, and processed by us on behalf of the applicable Customer in accordance with this Privacy Policy.

This information is collected by the Customer in a way pursuant to their applicable information collection practices, which are typically outlined in a privacy policy like this one and made available on their website. We encourage all Authorized Users to read the privacy policies or statements of the applicable Customer and other online services they access or use.

2.2 How do we use information about Authorized Users?

We only use this information to provide the Service of College Office to our Customers and their Authorized Users. We will never use it for any other purpose.

2.3 Modifying or Deleting Your Information

If you are an Authorized User, you can access the Personal Information associated with your Account via your Account. In order to modify the Personal Information associated with your Account however, you must contact the Customer directly. If instructed by our Customer, we will take steps to delete the applicable information as soon as is practicable.

2.4 Data Retention Policy

Your personal and academic data is retained in College Office for as long as your institution chooses to keep it: ask your institution about their data retention policy. Once your data has been deleted from College Office by your institution it may remain in archived/backup copies for our records for several weeks or as otherwise required by law.

2.5 Access to Your Information

Users can access all their personal information on record in College Office via their web portal. To view your personal information click your name of the upper left corner of the home page.

2.6 Communications from College Office

College Office may require certain communications to Account-holders, such as periodic updates to our Privacy Policy, Service-related announcements on occasions when it is necessary to do so (for instance, if our Service is temporarily suspended for maintenance, or a new enhancement is released, which will affect the way you use our Service); these communications are considered part of College Office and you will not be able to opt out of receiving them.

You will never receive emails from College Office for marketing purposes or emails asking you to share or verify any personal information or user login information: if you do, those emails are a fraud, contact us at support@collegeoffice.com.

2.7 Communications from Customers

You may also receive communications from your Institution via College Office. Contact your Institution if you wish to opt out of these communications.

Section 3: Cookies

Cookies are small text files that are saved by your browser when you access College Office. We only use essential cookies (cookies that are technically required for the site to operate.) You will not be able to log into College Office if you configure your browser to reject cookies.

We do not share any information with any third party except as described below:

4.1 Information Shared with Third Party Service Providers

We use the services of third party companies which provide us with cloud servers and/or data storage. These companies all conform to current data privacy laws.

4.2 Merger or Acquisition

If we go out of business or enter bankruptcy or if we are acquired as a result of a transaction such as a merger, acquisition or asset sale, your Personal Information will be transferred to the third-party acquirer in connection with the transaction to enable such third-party acquirer to continue to provide the services of College Office to our Customers and their Authorized Users.

You acknowledge and consent that such transfers may occur and are permitted by this Privacy Policy, and that any acquirer of our assets may continue to process your Personal Information as set forth in this Privacy Policy. If our policy changes at any time in the future, we will inform you so that you may opt out of the new information practices.

4.3 Information Disclosed for Our Protection and the Protection of Others

It is our policy to protect you from having your privacy violated through abuse of the legal systems, whether by individuals, entities, or governments, and to contest claims that we believe to be invalid under applicable law. However, it is also our policy to cooperate with government and law enforcement officials and private parties. Accordingly, we reserve the right to disclose any information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary:

To satisfy or comply with any applicable law, regulation, or legal process or to respond to lawful requests, including subpoenas, warrants, or court orders
To protect our property, rights and safety and the rights, property and safety of third parties or the public in general
To prevent or stop activity we consider to be illegal or unethical or in violation of our Terms of Service

4.4 Family Educational Rights and Privacy Act (FERPA)

When handling student educational records as defined by the Family Educational Rights and Privacy Act (FERPA), SEMAFOX will abide by the limitations and requirements imposed by 34 CFR 99.33(a). SEMAFOX will disclose student educational records as directed by school officials, or in order to comply with a court order, subpoena, or other legitimate demand by government authorities.

Section 5: The Security of Your Information

We implement reasonable precautions and follow industry best practices in order to protect your Personal Information and ensure that such Personal Information is not accessed, disclosed, altered or destroyed. However, these measures do not guarantee that your information will not be accessed, disclosed, altered or destroyed by breach of such precautions. By using our Service, you acknowledge that you understand and agree to assume these risks.

Section 6: International Transfer

If your institution is located outside of the country where your data is stored, your Personal Information may be transferred internationally and processed accordingly. College Office maintains data centers in the United States, the European Union, and Switzerland; the specific location(s) used for your institution's data depend on your institution's region and configuration.

Section 7: Our Policy Toward Children

College Office does not knowingly collect Personal Information from people under 18. If we learn that we have collected Personal Information of a person under 18, we will take steps to delete such information from our files as soon as possible.

We are not responsible for the collection of Personal Information of children by our Customers and their Authorized Users. It is the responsibility of our Customers and their Authorized Users to utilize College Office in a manner that complies with FERPA and any similar regulations in force in the jurisdiction(s) within which our Customers operate.

Section 8: Changes to Privacy Policy

Any information stored in College Office is subject to the Privacy Policy in effect at the time such information is collected. We may, however, modify and revise this Privacy Policy from time to time. If we make any material changes to this Privacy Policy, we will notify you of such changes by posting them on College Office or by sending you an email or other notification, and we will indicate when such changes will become effective.

Section 9: Contact Information

If you have any questions about this Privacy Policy, please contact SEMAFOX at:

support@collegeoffice.com

SEMAFOX
630 Charles Street Ave
Towson, MD 21204 USA