1. Purpose
This School Data Processing Agreement explains how Teemly processes school, teacher, and student data on behalf of the School.
2. Roles
For school assessment data:
- The School decides what student, teacher, class, test, and result data is uploaded or created
- Teemly processes that data to provide the platform
- Teemly acts only for the purposes described in this agreement and platform policies
3. Data processed
The platform may process:
- School details
- School admin details
- Teacher accounts
- Class and subject mappings
- Student records
- Student test assignments
- Student answers and scores
- Reports and downloads
- Audit logs
- Usage logs
- Compliance acceptance records
4. Purpose of processing
Data is processed to:
- Manage school access
- Create and assign assessments
- Allow students to take tests
- Evaluate submissions
- Generate academic reports
- Maintain security
- Provide support
- Maintain audit and compliance records
5. School responsibilities
The School is responsible for:
- Ensuring it has authority to provide student and teacher data
- Informing parents/guardians where required
- Maintaining accurate records
- Assigning correct teacher/student mappings
- Controlling admin and teacher access
- Requesting deletion when data is no longer required
6. Teemly responsibilities
Teemly will:
- Process data only for platform-related purposes
- Use reasonable security safeguards
- Separate school data by school context where applicable
- Restrict access based on user role
- Maintain audit records for important actions
- Support deletion and correction requests where technically possible
- Notify the School of material security incidents affecting school data, where required
7. Student data protection
Student data must be used only for educational and assessment purposes.
Teemly will not sell student data or use it for targeted advertising.
8. Security measures
Security measures may include:
- Role-based access control
- School-level scoping
- Password hashing
- Session controls
- Audit logging
- Restricted platform admin routes
- Report download access checks
- Production environment controls
9. Sub-processors and hosting
Teemly may use hosting, database, logging, email, or infrastructure providers to operate the platform.
Such providers may process data only as needed to support the platform.
10. Data retention and deletion
Data will be retained according to the Retention and Deletion Policy.
The School may request deletion or export of its data by contacting: [email protected]
11. Confidentiality
Both parties agree to protect confidential information and use it only for the purposes of providing or using the platform.
12. Security incidents
If Teemly becomes aware of a confirmed security incident affecting school data, it will take reasonable steps to investigate, contain, and notify the School where required.
13. Termination
When the School stops using the platform, the School may request export or deletion of data according to the Retention and Deletion Policy.
14. Contact
Service Provider: [Insert Legal Entity Name]
Email: [email protected]
Address: [Insert Business Address]