Skip to content

Data Processing Terms

The terms for the student records you keep in My Class: you are the controller and we process them for you.

Version 0.1.1

Who does what

You decide which students to add and what to record, so you are the controller of those records. OpenEduCat Inc. processes them only for you, to run My Class. You accept these terms when you first add students.

What My Class holds

The roster, attendance, marks and fee lists you enter. A student row holds a name, a roll number, a group and tags only. There is no field for contact details, photos or parent data, and you agree not to type them in. Students never hold accounts and have no access.

What we do with the records

We store them, show them to you and export them when you ask, and we do nothing else with them unless the law requires it. We never sell them and never use them for advertising.

Who can see them

Only you can see the student names. Our staff see counts, never names.

How we protect them

The records stay in the data region you chose and travel over encrypted connections. Backups stay in the same region. The companies on the sub-processors page help us run the service; neither Stripe nor Odoo CRM ever receives a student record.

If something goes wrong

If we learn of a breach that affects your records, we tell you without undue delay, and at the latest within 48 hours, with what we know and what you may need to do.

Requests from students and parents

If a student or a parent asks us about a record, we send them to you, because you decide what it holds. You can correct, export or delete any record in My Class at any time.

How long we keep them

My Class records are deleted 18 months after your last visit, and we email you 30 days before. When you delete a class or your account, its records are deleted as the privacy policy says.

What we ask of you

You confirm that you may keep these records under your school’s rules and the law where you teach, including any consent those rules need. If you use My Class for a school in the United States, see the school service agreement.

Transfers and governing law

Your records stay in the data region you chose. Where a company on the sub-processors page is outside that region, we use the EU standard contractual clauses and the UK addendum. These terms follow the law of the terms of service, and the data protection law of your country always applies to the records.