Date of Last Revision: May 18, 2023.
Privacy is important to us. As such, it is the policy of American Public University System, Inc., its members, American Public University (APU) and American Military University (AMU), the Center for Professional and Continuing Education and American Public Education, Inc. (collectively, APUS, we, our, or us), to collect, process, and retain personal information responsibly in the course of providing information and services to students, student prospects, alumni, applicants and employees, including when visiting or using our website and certain APUS mobile applications. This privacy policy describes our collection and use of personal information about you, including on our websites, blogs, message boards, social media pages, and mobile applications that link to this policy (collectively, the Services) (the privacy policy will be accessible in the settings tab of our mobile applications). We may also offer Services that have their own privacy policies. Please refer to the privacy policy associated with the Service you are using for the governing privacy policy. For the purposes of this policy, personal information is defined as information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular person.
Consistent with this policy, we collect information in the following ways:
Information We Collect About You
Voluntarily Provided Information
Categories of personal information we may collect about you include:
- full name
- email address
- postal address
- social security number
- tax identification number
- identification number
- date of birth
- sex
- race
- ethnicity
- phone number
- course assignments (e.g., papers), and tests
- employer
- job title
- citizenship
- alien registration number
- financial data and documents
- academic data and documents
- identity verification data and documents
Please see Appendix A below for additional information on the categories of personal information that we collect.
We collect many of the types of personal information listed above directly from you when you use the Services or otherwise interact with us, especially as a student or applicant. In some cases, if you are enrolling in a course or program or buying books, or utilizing online commerce functions to purchase goods or services, you may be required to provide credit card information for billing purposes. If making a request for registration, admission or transfer credit, you may also be required to provide information related to prior academic history, employment, or military service. If you choose not to provide this personal information, you may be unable to receive some of the services we offer.
We also collect personal information when you voluntarily provide it or make it available to us by (1) logging into, or creating an account on one of our online Services; (2) providing feedback to us through a feedback tool; (3) posting a review or making other comments on any Interactive Features (hereinafter defined) available in our online Services; or (4) logging-in to our online Services through a social media platform or similar tool, if available. Each manner in which we collect personal information about you identified above occurs only when you voluntarily provide information to us.
We may offer through our online Services public forums, newsfeeds, blogs, message boards, social media pages and similar tools (collectively, “Interactive Features”). The posts or comments you make on Interactive Features may be public and viewed by others. As such, you should use care before posting information about yourself, including personal information, online. You acknowledge and understand that you have no expectation of privacy or confidentiality in the content you submit to Interactive Features. Except where required by applicable law, we assume no obligation to remove personal information from postings to Interactive Features and you disclose any personal information in your postings at your own risk.
Information Created in the Course of Your Use of the Services
We also create information that becomes subject to this privacy policy. This includes, for example, assignment grades, test scores, class grades, transcripts, persistence data, and communications with you.
Cookies and Automatically Collected Information
We may collect the following information automatically through your use of the online Services:
- IP/MAC address
- online identifiers
- log-in details
- E-campus and course activity data.
For certain online Services, we also use cookies and similar technologies to enable one-click login to the student/faculty campus, for analytics, fraud detection and advertising. In addition to the following, see our Cookies Policy link for more information about our cookie usage. We and our service providers and third-party advertisement servers may use cookies and similar technologies to, over time, collect information about your usage of our online Services and across different websites that have a business relationship with us or one of our service providers or third-party advertisement servers. To make choices about interest-based ads from participating third parties, please visit the DAA consumer opt out page.
Most browsers are initially set to accept cookies. You can set your browser to notify you when you receive a cookie, giving you the chance to decide whether or not to accept it. You can find more information regarding management of your cookies at About Cookies.
We do not currently respond to web browser “do not track” signals or other mechanisms that provide a method to opt out of the collection of information across the networks of websites and online services in which we participate. If we do so in the future, we will describe how we do so in this Privacy Policy. For more information about do not track, visit www.allaboutdnt.org.
Where required by applicable law, and in particular where automatically collected personal information is not strictly necessary for us to provide you with any part of the online Services you have specifically requested, we obtain your consent for the use of these automatic collection technologies, web beacons, and other tracking technologies described above through a website banner.
Mobile Applications
Our online Services may collect certain information automatically from your mobile device when you use one of our mobile applications, including the type of mobile device you use, your mobile device’s unique device identifier, your IP address, and information about the way you use our online Services. We use this information in an aggregate fashion to track access to our websites, but we do not disclose site usage by individual IP addresses, and web server logs are held for a period of time before being deleted from our systems.
Our online Services may collect precise information about the location of your mobile device, but only with your express consent. Once you have consented to the collection of the precise location of your mobile device, you may adjust this consent by managing your location preferences through the settings of your mobile device.
You can stop all collection of information by our online Services by uninstalling our mobile application through the standard uninstall process offered through your mobile device.
Other Sources
We may collect personal information about you from other sources, such as other academic institutions, social media platforms, the APUS learning management system, employers (at the request or consent of the student), and student data repositories.
We also obtain contact details and other personal information regarding media contacts and influencers from a variety of sources including Cision. If you wish to know more about how such information is collected and used, please refer to Cision’s privacy notice at www.cision.com/us/legal/privacy-policy/.
Third Party Websites
We may provide links to third-party websites. You acknowledge that such links are provided for your convenience only and do not constitute an endorsement by us of such third-party websites. Since we do not control these third-party websites and are not responsible for the contents of any linked-to, third-party websites or any hyperlink in a linked-to website, we assume no responsibility for the privacy practices of such websites. We encourage you to review the privacy policies posted on those, and all, third-party websites.
How We Use Personal Information
We may use your personal information for the following purposes:
- Identification and authentication: We use your identification information to verify your identity when you access and use the online Services and to ensure the security of your personal information. This is so we can comply with our contractual obligations to you. We also use certain information to verify student identities and detect fraud during examinations (e.g., keystroke pattern information).
- Operating the Services and Providing Other Services to You: We process your personal information to provide the Services you have requested and other services for which we have an agreement with you, for example, if you are enrolled as a student or are seeking to enroll as a student. This is so we can comply with our contractual obligations to you or in furtherance of entering into a contract with you.
- Improving our Services: We analyze information about how you use the Services to provide an improved experience for our customers of all our Services, including product testing and site analytics. It is in our legitimate business interests to use the information provided to us for this purpose, so we can understand any issues with the Services and improve them.
- Communicating with you: We may use your personal information when we communicate with you, for example if we are providing information about changes to the terms and conditions or if you contact us with questions. It is in our legitimate interests that we are able to provide you with appropriate responses and provide you with notices about the Services.
- Marketing: We may use your personal information to send you newsletters or information about us or third party products and services that may be of interest to you. We may also analyze user personal information in order to better understand our users and their interests and inform our marketing strategies. It is in our legitimate business interests to provide more relevant and interesting advertising messages. Where necessary, we will obtain your consent before sending such marketing messages.
- Exercising our rights: We may use your personal information to exercise our legal rights where it is necessary to do so, for example to detect, prevent and respond to fraud claims, intellectual property infringement claims or violations of law or our applicable policies and the Terms of Use.
- Complying with our obligations: We may process your personal information to, for example, carry out fraud prevention checks or comply with other legal or regulatory requirements, where this is explicitly required by law. We may also process special categories of personal information, such as sex, race, and ethnicity in order to carry out obligations in the field of employment.
- Customizing your experience: When you use the Services, we may use your personal information to improve your experience of the Services, such as by providing interactive or personalized elements on the online Services and providing you with content based on your interests;
- We may also anonymize your personal information in such a way that you may not reasonably be re-identified by us or any other company, and may use this anonymized information for any other purpose.
Disclosures of Personal Information
We do not share, rent, swap or authorize any third party to use personal information submitted by users of our Services for the third party’s own purposes. However, certain laws may treat our sharing of personal information with third parties for certain advertising or analytics purposes as “sales.” Please see Appendix A below for further information about these disclosures. Applicable law requires businesses to disclose whether they have actual knowledge that they sell the personal information of minors under the age of 16. We confirm that we do not knowingly sell such information.
We may share your personal information with third parties under the following circumstances:
- Service providers and business partners: We may share your personal information with our service providers and business partners that perform marketing services and other business operations for us for the purposes set forth above. For example, we may partner with companies to process secure payments, fulfill orders, optimize services, serve online behavioral advertising, send newsletters and marketing messages, support email and messaging services, and analyze information.
- Affiliates: We may share your information with affiliated companies for the purposes set out above.
- Where required by law: We may share your personal information with law enforcement agencies, courts, other government authorities or other third parties where we believe necessary to comply with a legal or regulatory obligation, or otherwise to protect our rights or the rights of any third party. Agencies that regulate our activities to which personal information may be disclosed include, but are not limited to: the U.S. Department of Education, The Higher Learning Commission of the North Central Association of Colleges and Schools, the Accrediting Bureau of Health Education Schools, agencies of the states of West Virginia and Ohio, other state agencies, the U.S. Department of Veterans Affairs, other federal agencies, and/or the various military service branches.
- In the context of a transaction: We may share your personal information with potential transaction partners, service providers, advisors, and other third parties in connection with the consideration, negotiation, or completion of a corporate transaction in which we are acquired by or merged with another company or we sell or transfer all or a portion of our assets or business. Should such a sale or transfer occur, we will use reasonable efforts to obligate the entity to which we transfer your personal information to use it in a manner that is consistent with this Privacy Notice.
We may also share de-identified aggregate information that may not reasonably be re-identified by us or any other company with third parties and advertisers so they can measure the effectiveness of any advertisements viewed in connection with our Services. For example, we may tell advertisers the number of users who clicked on a particular advertisement.
Family Educational Rights and Privacy Act (FERPA)
The Family Educational Rights and Privacy Act of 1974 (FERPA), as amended, requires certain educational institutions, including us, to establish and publish a written institutional policy regarding student privacy rights under FERPA. The law provides that except in limited circumstances the institution must not disclose, without appropriate consent, the education records of its students. For more information, please visit the applicable educational institution’s website.
Information Security and Storage
As part of our commitment to maintaining reasonable security, the organization has taken commercially reasonable steps to protect the information it has gathered about you, including adopting the Core Set of Principles developed by the Corporate Governance Task Force on Information Security Governance.
Our Services use Secure Sockets Layer (SSL) protocol for financial transactions and where personal information is submitted. We are in compliance with the Payment Card Industry Data Security Standard (PCI-DSS). We do not maintain credit card data in our systems, but securely transfer related information between us and payment processing and management service providers.
We retain your personal information for as long as we have a relationship with you and longer if for legitimate business purposes. When deciding how long to keep your personal information after our relationship with you has ended, we take into account our legal obligations. We may also retain records to investigate or defend against potential legal claims.
Customer Service and how to Acquire Additional Information
We are committed to providing every user — including students, applicants, and other persons who contact us — with prompt, high-quality support at all times. Email is the primary form of contact for users, including our students, and we encourage you to email us with questions, comments and concerns. You may also contact us by telephone. Additional information can be found at: https://www.apus.edu/about/contact/index.
Residents of California
If you are a resident of California, you have certain rights pursuant to the California Consumer Privacy Act. These include the right to:
- Request information about the personal information that we collect about you and the manner in which we process and disclose that information;
- Obtain the specific pieces of personal information that we have collected about you within the past 12 months;
- Delete certain personal information that we have collected from you;
- Opt-out of our sale of any of your personal information to third parties; and
- You may click on the Do Not Sell My Personal Information in the footer to learn more about exercising this right.
- Not be discriminated against as a result of exercising any these rights.
If you or your authorized agent would like to discuss or exercise such rights, please contact us at [email protected] with your first and last name, Student ID (if any), mailing address, and phone number, along with which right you would like to exercise, or contact us at: 1-888-712-0683. As a part of this process, we may use existing account verification systems and/or require that you or your authorized agent provide certain information to us for verification purposes.
Additionally, please see Appendix A for further detail on the categories of personal information that we collect and disclose.
Non-U.S. Website Users
By creating an account or logging-in to our online Services from outside the United States, your personal information and other information will be sent directly to the United States for processing where data protection and privacy regulations may be different than other parts of the world, such as the European Union and Canada, and which may not offer an equivalent level of protection to that in the European Union, Canada, or certain other countries.
We have put in place appropriate safeguards (such as contractual commitments) in accordance with applicable legal requirements to provide adequate protections for your personal information. For more information on the appropriate safeguards in place and to obtain a copy of such safeguards, please contact us at the contact information set forth below.
Residents of Canada
If you are a resident of Canada, these additional terms apply to the personal information we hold about you:
- Sensitive Information. If we collect any sensitive personal information about you (i.e., race, sex or ethnicity), we shall only do so with your express consent and for a purpose which we shall clearly explain to you before collecting any such sensitive personal information.
- Canada’s Anti-Spam Law (“CASL”). If you have opted in through a separate consent to receive certain commercial electronic messages from us about our services and announcements but no longer wish to receive such messages, you can unsubscribe at any time by following the instructions set out in each message.
- Service Providers. We may transfer your personal information to our service providers and business partners that perform marketing services and other business operations for us for the purposes set forth above. These service providers and business partners are contractually obligated to keep personal information confidential, use it for the purposes for which we transfer it to them, and to process the personal information with the same standards set out in this policy.
- Withdrawing your Consent. Where you have provided your consent to the collection, use, and transfer of your personal information, you may have the legal right to withdraw your consent under certain circumstances. To withdraw your consent, if applicable, contact us at the contact information set forth below. Please note that if you withdraw your consent we may not be able to provide you with a particular Service. We will explain the impact to you at the time to help you with your decision.
- Access and Correction. You may request to access, update and correct inaccuracies in your personal information that you have provided to us by contacting us at the contact information set forth below. We may require that you provide sufficient identification for the purposes of verifying your identity. Any such identifying information will be used only for this purpose.
Residents of the European Economic Area
If you are a resident of the European Economic Area (EEA), you have certain rights regarding the personal information we hold about you, subject to local law. These may include the rights to access, correct, delete, restrict or object to our use of, or receive a portable copy in a usable electronic format of your personal information. You also may have a right to lodge a complaint with your local data protection or privacy regulator.
We encourage you to contact us at the contact information set forth below to update or correct your information if it changes or if the personal information we hold about you is inaccurate. Where you have provided your consent to any use of your personal information, you can withdraw this consent at any time.
Please note that we may require additional information from you in order to honor your requests.
If you would like to discuss or exercise any rights you may have under law, please contact us at the contact information set forth below.
Changes to this Policy
This Privacy Policy may be amended from time to time. Any such changes will be posted on this page and the effective date of such changes reflected above as the date last updated.
Our contact information is as follows. Where applicable law requires the identification of a controller, that is:
American Public University System, Inc.
111 West Congress Street
Charles Town, WV 25414
[email protected]
1-888-712-0683
Appendix A
Collection and Disclosure of Personal Information
Category of Personal Information Collected | Do we disclose any information in this category to third parties for “business purposes?” If so, to whom? | Do we “sell” any information in this category to third parties? If so, to whom? |
---|---|---|
Identifiers Examples:
| Yes
| Yes
|
Characteristics of protected classifications under California or federal law Examples:
| Yes
| No |
Commercial information Examples:
| Yes
| No |
Biometric information Examples:
| Yes
| No |
Internet or other electronic network activity information Examples:
| Yes
| Yes
|
Geolocation data Examples:
| Yes
| No |
Audio, electronic, visual, or similar information Examples:
| Yes
| No |
Professional or employment-related information Examples:
| No | No
|
Education information Examples:
| Yes
| No |
Inferences drawn from other personal information Examples:
| Yes
| No |