Privacy Notice

1. Who we are

MyStudentPulse provides the MyStudentPulse weekly on-pace report and family email service. This notice explains what personal data we handle and why.

2. Our role

For our own customers — the schools, districts and faculty who buy and administer MyStudentPulse — we act as a data controller for account, billing and service data. For student, parent and guardian records that a school uploads to its roster, the school is the controller and MyStudentPulse acts as a processor on its documented instructions.

3. Data we collect and why

• Faculty account data (name, work email, school, role, login credentials managed by our authentication provider) — to create accounts, authenticate users and provide the Service. Legal basis: performance of a contract.
• Roster data uploaded by the school (student first and last name, grade, student email, parent/guardian emails, teacher assignments) — to build the weekly grid and address the weekly email. Legal basis: performance of a contract with the school / the school’s legitimate educational interest.
• Teacher entries and weekly history (pace codes, comments about work owed) — to compose the weekly message and produce trend reporting for the school.
• Email delivery data (send timestamps, delivery status, bounces, unsubscribes, and whether a message was opened) — to confirm the weekly message reached families and to troubleshoot deliverability. Legal basis: legitimate interests in a reliable school communication service.
• Support messages you send us — to answer you.
• Usage, device and log data (IP address, browser, pages used, error reports) — for security, fraud prevention, debugging and product improvement. Legal basis: legitimate interests.
• Billing records (plan, school, invoice references) — to administer your subscription and meet legal obligations. Card details are handled by Paddle, not by us.

4. Who we share data with

• Service providers / subprocessors — cloud hosting and database, authentication, transactional email delivery, and error monitoring, all under contract and only to run the Service.
• Merchant of Record — Paddle.com, for sale of subscriptions, payments, subscription management, tax compliance and invoicing.
• Professional advisers — legal and accounting, where needed.
• Authorities — where required by law or to protect rights and safety.

We do not sell personal data and we do not use student data for advertising.

5. Access controls within a school

Each school controls how widely its roster is visible to its own faculty (open, grade-level, or subject-level access). Schools are isolated from one another: faculty at one school cannot access another school’s data.

6. Retention

We keep roster and weekly history data for as long as the school’s subscription is active, and for up to 30 days after termination so the school can export it, after which it is deleted or anonymized. Delivery logs are kept up to 24 months. Billing records are kept as long as tax and accounting law requires. A school may ask us to delete specific records earlier.

7. Security

We apply appropriate technical and organizational measures, including encryption in transit and at rest, row-level access controls that isolate each school’s data, least-privilege administrative access, and regular patching. No system is perfectly secure, but we will notify affected schools promptly of any breach affecting their data.

8. International transfers

Our providers may process data in the United States and other countries. Where data is transferred out of the UK or EEA we rely on adequacy decisions or Standard Contractual Clauses with appropriate safeguards.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, to object to processing based on legitimate interests, and to withdraw consent where we rely on it. We respond within one month. Parents and students should raise requests about roster data with their school first, as the school controls that data; we will assist the school. You may also complain to your local data protection authority.

10. Email preferences

Every weekly family email includes an unsubscribe link. Unsubscribes are honored at send time. Schools can also remove a recipient address from the roster at any time.

11. Cookies

We use essential cookies and local storage only — to keep you signed in and to remember basic interface preferences. We do not use advertising cookies. You can clear or block cookies in your browser, but sign-in will not work without the essential ones. Weekly emails may include a small tracking pixel so the school can see whether its message was opened.

12. Contact

Privacy questions or requests: hello@mystudentpulse.com.