Data Processing Terms
The terms for the student records you keep in My Class: you are the controller and we process them for you.
Version 0.1.1
Who does what
You decide which students to add and what to record, so you are the controller of those records. OpenEduCat Inc. processes them only for you, to run My Class. You accept these terms when you first add students.
What My Class holds
The roster, attendance, marks and fee lists you enter. A student row holds a name, a roll number, a group and tags only. There is no field for contact details, photos or parent data, and you agree not to type them in. Students never hold accounts and have no access.
What we do with the records
We store them, show them to you and export them when you ask, and we do nothing else with them unless the law requires it. We never sell them and never use them for advertising.
Who can see them
Only you can see the student names. Our staff see counts, never names.
How we protect them
The records stay in the data region you chose and travel over encrypted connections. Backups stay in the same region. The companies on the sub-processors page help us run the service; neither Stripe nor Odoo CRM ever receives a student record.
If something goes wrong
If we learn of a breach that affects your records, we tell you without undue delay, and at the latest within 48 hours, with what we know and what you may need to do.
Requests from students and parents
If a student or a parent asks us about a record, we send them to you, because you decide what it holds. You can correct, export or delete any record in My Class at any time.
How long we keep them
My Class records are deleted 18 months after your last visit, and we email you 30 days before. When you delete a class or your account, its records are deleted as the privacy policy says.
What we ask of you
You confirm that you may keep these records under your school’s rules and the law where you teach, including any consent those rules need. If you use My Class for a school in the United States, see the school service agreement.
Transfers and governing law
Your records stay in the data region you chose. Where a company on the sub-processors page is outside that region, we use the EU standard contractual clauses and the UK addendum. These terms follow the law of the terms of service, and the data protection law of your country always applies to the records.