Privacy

Policy

SynergyPlus is built around data minimization. StudentVUE information is used only to provide the features you request and is not collected into a SynergyPlus student database. We aim to keep sensitive StudentVUE data on your device whenever technically possible and limit third-party exposure to what is necessary to connect to StudentVUE.

Who we are

SynergyPlus is an independent, website-only client for StudentVUE®. It is not affiliated with Edupoint Educational Systems, LLC or a school district. Questions about this policy can be sent to synergyplusappp@gmail.com.

What information we collect about you

The app processes the information needed to show StudentVUE: your username, password, session token, profile name and photo, grades, assignments, attendance, documents, messages, and school information. It also stores a local theme preference and, if selected, a local preference to hide your profile picture.

Credentials and student records

Credentials and StudentVUE responses are handled in browser memory while the app is open. “Remember me” is optional. If you enable it, your StudentVUE domain, username, and password are stored in this browser’s local storage so a later visit can sign you in again. Use it only on a trusted device and browser profile. Saved credentials could be exposed if that browser, device, or the SynergyPlus site itself were compromised.

SynergyPlus does not write grades, assignments, messages, documents, session tokens, or profile pictures to local storage. Logging out clears saved credentials, the local display preferences, and the in-memory StudentVUE session. Clearing site data in your browser also removes any saved credentials and preferences.

How we interact with StudentVUE®

StudentVUE requests run from a Web Worker in your browser. When the libcurl transport is enabled, libcurl.js establishes the HTTPS/TLS connection in WebAssembly and carries encrypted bytes through a Wisp WebSocket relay to the approved Edupoint host. The relay is restricted to ca-pleas-psv.edupoint.com on port 443.

What we do not do

The SynergyPlus application has no StudentVUE login API, database, server action, or application backend for student data. It does not send readable StudentVUE credentials, grades, assignments, documents, messages, cookies, or session tokens to a SynergyPlus application server. It does not include client analytics for StudentVUE data, sell student information, or attempt to bypass StudentVUE access controls.

What subprocessors touch your data

Edupoint’s StudentVUE service receives the StudentVUE requests and credentials required to operate your account, under its own terms and privacy practices. If the libcurl transport is enabled, the configured Wisp relay operator carries encrypted TLS traffic. It cannot read the TLS-protected StudentVUE request or response content, but a relay operator can observe connection metadata such as its IP address, timing, size, and destination. Your deployment host may separately process standard web-request metadata under its own policy; it does not receive StudentVUE application data from this codebase.

How we protect your data

The transport only permits HTTPS connections to the approved Edupoint host and rejects other destinations and nonstandard ports. It requires a secure wss:// relay URL, keeps cookies and mobile tokens inside the worker, closes the worker session on logout, and disables relay request logging in the included relay implementation. These controls reduce exposure but cannot make a shared or compromised browser safe. Use a trusted device, keep it updated, and disable “Remember me” on shared computers.

Children’s privacy

SynergyPlus is intended for students who are authorized to use their school’s StudentVUE service. It does not create accounts or knowingly collect student records into a SynergyPlus database. If you are a parent, guardian, or school official with a concern, contact us at the address above and clear the site data from the affected browser.