Data Protection & Retention

What we store and how long we keep it.

Data we store

Staff accounts: Email (username), name, hashed password, role, school link, title, 2FA device data if enabled.
Schools: Name, district (optional).
Students: First name, last name, email (optional), student ID, grade, school and class links.
Classes: Name, school, assigned students and teachers.
Grades: Assessment name, grade value, date, subject, teacher note, class and student links.
Attendance: Session dates, period, status (present/absent/late/excused), student and class links.
Assignments & submissions: Title, description, deadline, visibility; student submissions (files, notes, status).
Tests: Title, description, questions and choices, access codes, student attempts and answers, points awarded.
Academic records: Year, status, subjects, grades, attendance snapshot, GPA, approval history.
Invitations: Email and school for teacher, administrator, and director invites until used or removed.

Active accounts and schools: Data is kept while the account or school is active and you have a subscription or agreement with us.
After account/school closure: We may retain data for a limited period (e.g. 90 days) for backup and legal compliance, after which it is deleted or anonymized. You may request earlier deletion via Support.
Backups: Backups may retain data for a defined retention window (e.g. 30 days); data in backups is overwritten or removed in line with the above.

Schools that need a formal Data Processing Agreement can request one via Support. Our Terms of Use describe support for FERPA/COPPA where applicable.

Staff can download their account data (when logged in). For full school data export or deletion, contact Support. We will process requests in line with our Privacy Policy and applicable law.