Your privacy. Plainly stated.

Inovantics is a school transportation compliance platform providing real-time driver verification, vehicle tracking, and vendor credentialing services to school districts, transportation operators, and families. Inovantics operates in partnership with Mostro Cybersecurity & Compliance.

This Privacy Policy applies to school district administrators and staff using the platform, transportation operators and their enrolled drivers, parents and guardians who visit this website or sign up for notifications, and anyone who contacts us through this website. It does not apply to third-party websites linked from our site.

From district users

Name, title, district name, contact information, login credentials (encrypted), and platform activity logs.

From transportation operators

Company name, contact information, business credentials, fleet and vehicle information, and driver roster information.

From drivers

Full legal name, date of birth, government-issued ID, CDL number and expiration, background check authorization and results, biometric data (facial geometry, collected only after signed consent agreement), and route history.

From parents and website visitors

Name and email address if voluntarily submitted, school district name if provided, and standard anonymized web analytics data.

What we do not collect from students

Inovantics does not collect personally identifiable information directly from students. Student data processed through the platform is limited to anonymized trip identifiers provided by and controlled by the district. No student PII is collected or stored by Inovantics beyond what the district explicitly authorizes and retains ownership over.

We use information to operate and deliver the platform, verify driver identities and credentials, provide districts with live compliance dashboards and audit-ready records, send parents notifications they have requested, respond to website inquiries, maintain platform security, meet legal obligations, and improve platform functionality using aggregated anonymized usage data.

Inovantics operates as a school official under FERPA when processing data on behalf of a school district. We may only use student-related data for purposes authorized by the district and may not disclose it for any other purpose. Districts retain ownership and control of all student-related records. Upon termination of a service agreement, all student-related data is returned to the district or deleted per the Data Processing Agreement.

Inovantics does not knowingly collect personal information directly from children under 13. The platform is designed for adult district administrators, adult operators, and adult drivers. If a parent believes their child under 13 has submitted personal information to Inovantics without authorization, contact privacy@inovantics.com immediately and we will delete that information promptly.

Inovantics collects facial geometry data from enrolled drivers for identity verification. This constitutes biometric data under applicable state laws including Illinois BIPA, Texas CUBI, and Washington My Health My Data Act.

How we handle it

We collect biometric data only after a signed Biometric Data Consent Agreement. It is used solely for driver identity verification — never for any other purpose. It is encrypted in storage and in transit. It is never sold, leased, traded, or disclosed to third parties except as required to operate the verification service or as required by law. It is deleted within the retention period defined in the applicable Data Processing Agreement following enrollment termination.

We do not sell your information. We share only with service providers contractually bound to protect it, with the district that has contracted with the operator (core platform function), and when required by law or court order. We will notify affected users of legal disclosure requests where legally permitted.

We do not share information with advertisers, data brokers, or marketing platforms.

Our security program is built in partnership with Mostro Cybersecurity & Compliance and includes TLS encryption in transit, encryption at rest, role-based access controls with MFA, continuous 24/7 security monitoring, and SOC 2 Type I attestation in progress with Prescient Security as the independent audit firm.

In the event of a breach affecting your personal information, we will notify affected individuals and applicable authorities in accordance with applicable law and within required timeframes.

District and operator account data is retained for the duration of the service agreement plus the retention period defined in the service agreement. Driver credential and verification records follow the same schedule. Biometric data is deleted within the retention window defined in the applicable Data Processing Agreement following enrollment termination. Parent notification emails are retained until unsubscribed or upon deletion request. Website analytics are retained in anonymized form per our analytics retention schedule.

Right to access, correction, and deletion of personal information. Right to opt out of email notifications at any time. Biometric rights under applicable state law. Massachusetts residents have additional rights under MGL c.93H.

To exercise rights, contact privacy@inovantics.com. We respond within 30 days.

We use cookies to keep you logged in, remember preferences, and analyze traffic in aggregate anonymized form. We do not use cookies for advertising or cross-site tracking. You can control cookies through your browser settings.

We may update this policy and will update the effective date when we do. For material changes we will notify active users by email. Continued use of the platform constitutes acceptance.

We respond within one business day.