School and ClassVillage roles
When a school or teacher uses ClassVillage for classroom records, the school or teacher determines the educational purpose and permitted users. ClassVillage processes those records only to provide, protect and support the service.
This page is a public summary of our processing commitments. A school that requires a signed data-processing agreement should complete that agreement before production deployment.
Processing details
- People: teachers, school staff, students and family members.
- Data: account identifiers, class rosters, attendance, points, behavior categories, progress, rewards, activity history, access codes, device/session records and support information.
- Purpose: classroom management, progress and reward features, authorized family/student access, synchronization, reporting, security, recovery and support.
- Duration: for the subscription or authorized test period, followed by the agreed return, export, retention or deletion process.
Documented instructions
ClassVillage processes classroom data through product actions initiated by authorized teachers, school administrators, students or family members within their permissions. We will not use classroom records for unrelated advertising, sell them or disclose them except to provide the service, follow the school’s lawful instructions or meet a legal obligation.
Security measures
- Authenticated and owner-scoped teacher access.
- Limited student and family codes tied to one child.
- Permission checks on server-side changes.
- Encrypted web connections, revision controls and action-receipt safeguards.
- Backups, recovery tools and export options.
- Access revocation when codes, sessions or co-teacher permissions change.
Security measures are reviewed as the service grows. Schools should configure roles carefully and avoid entering information the product does not request.
Service providers and transfers
ClassVillage relies on limited infrastructure providers for hosting, delivery, security, storage and payments. Paddle acts as merchant of record for billing and may act independently for legally required payment and tax records.
Data may be processed outside the user’s country. Before school-wide production use, ClassVillage will provide the current subprocessor list and appropriate contractual transfer terms when required.
Requests, incidents and deletion
ClassVillage will reasonably assist schools with access, correction, export, restriction and deletion requests involving classroom data. Teachers already have product controls for exports, code resets, session revocation, archiving and permanent deletion of eligible student profiles.
If ClassVillage confirms a security incident affecting school-controlled personal data, affected school contacts will be informed without unreasonable delay and given available details needed for their response.