Data Processing Addendum (DPA)

This Data Processing Addendum (“DPA”) forms part of the Terms of Service between Homeschool Platform LLC (“Homeschool Platform,” “Processor,” “we,” “us,” or “our”) and the organization, school, co-op, microschool, PSP, support group, or other customer utilizing the Services (“Customer,” “Controller,” or “Organization”).

This DPA governs the processing of personal information and customer data in connection with the Services.

1. PURPOSE

The purpose of this DPA is to define the responsibilities of Homeschool Platform and Customer regarding the collection, storage, processing, and protection of customer data.

2. RELATIONSHIP OF THE PARTIES

For purposes of customer data:

• Customer acts as the Data Controller.
• Homeschool Platform acts as the Data Processor.

Customer determines:

• What information is collected.
• Why information is collected.
• Which individuals are entered into the platform.
• How information is used within the organization.

Homeschool Platform processes information solely to provide the Services.

3. CUSTOMER DATA

Customer data may include:

• Organization records
• Parent information
• Student information
• Applications
• Registrations
• Enrollment records
• Attendance records
• Assignments
• Academic records
• Uploaded documents
• Communications
• Other information submitted through the platform

Customer retains ownership of all customer data.

4. PROCESSING OF DATA

Homeschool Platform may process customer data solely for purposes including:

• Hosting customer information
• Managing accounts
• Providing platform functionality
• Delivering communications
• Supporting registrations and enrollment workflows
• Performing maintenance and support
• Securing platform operations

Homeschool Platform shall not process customer data for unrelated commercial purposes.

5. NO SALE OF CUSTOMER DATA

Homeschool Platform does not sell customer data.

Customer information is not sold, rented, or shared with third parties for advertising purposes.

6. CUSTOMER RESPONSIBILITIES

Customer is solely responsible for:

• Obtaining required parental permissions
• Obtaining required consents and acknowledgements
• Maintaining organizational policies
• Compliance with applicable laws
• Educational decisions
• Student records management
• Instructor relationships

Customer warrants that it has authority to submit and process customer data through the Services.

7. CHILDREN’S INFORMATION

Customer acknowledges that information relating to minors may be stored within the Services.

Customer is responsible for obtaining all permissions, notices, and parental authorizations required by applicable law.

Homeschool Platform processes such information only on behalf of Customer.

8. DATA SECURITY

Homeschool Platform implements reasonable administrative, technical, and organizational safeguards designed to protect customer information against unauthorized access, disclosure, alteration, or destruction.

Examples may include:

• Password protection
• User permissions
• Encrypted communications
• Secure hosting environments
• Backup procedures

No internet-based service can guarantee absolute security.

9. AUTHORIZED ACCESS

Homeschool Platform personnel shall access customer information only as necessary to:

• Provide support
• Maintain the platform
• Resolve technical issues
• Protect system integrity

10. SUBPROCESSORS

Homeschool Platform may utilize trusted third-party providers to assist in delivering Services.

Examples may include:

• Hosting providers
• Cloud infrastructure providers
• Payment processors
• Email delivery services
• Analytics providers

Such providers may process customer information solely for purposes related to delivering Services.

11. DATA EXPORT

Customer may request export of its data during an active subscription or within the data retention period following cancellation.

Export requests may be directed to:

support@homeschoolplatform.com

12. DATA RETENTION

Customer data is retained for as long as necessary to provide Services and fulfill legitimate business obligations.

Following account cancellation:

• Customer may request export of data.
• Data may remain available for up to thirty (30) days.
• Data may be permanently deleted after that period.

13. DATA DELETION

Following expiration of the retention period, Homeschool Platform may permanently delete customer information from active systems and backups in accordance with operational practices.

14. BREACH NOTIFICATION

If Homeschool Platform becomes aware of a confirmed security incident materially affecting customer data, Homeschool Platform will make commercially reasonable efforts to notify affected customers within a reasonable timeframe.

15. LIMITATION OF RESPONSIBILITY

Homeschool Platform provides technology services only.

Customer remains solely responsible for:

• Educational compliance
• Recordkeeping obligations
• Student records
• Regulatory compliance
• Organizational operations

16. MODIFICATIONS

Homeschool Platform may update this DPA from time to time as legal requirements, industry standards, or platform operations evolve.

Updated versions will be posted with a revised Effective Date.

17. GOVERNING DOCUMENTS

In the event of a conflict between this DPA and the Terms of Service, the Terms of Service shall control except with respect to matters specifically related to data processing.

18. CONTACT INFORMATION

Questions regarding this Data Processing Addendum may be directed to:

Homeschool Platform LLC

support@homeschoolplatform.com

19. ACCEPTANCE

By creating an account, purchasing a subscription, checking the acceptance box, or otherwise using the Services, Customer acknowledges that it has read, understood, and agrees to this Data Processing Addendum.