You're right that our privacy policy is generic / written for web services - that policy applies to our website rather than our student data. FERPA laws govern student data, so those are definitely better protected than the generic policy may indicate!