School data arrangements

Before importing real records, the authorised school representative and MyImpact AI should complete a written school order and data-processing agreement. The following scope supports that agreement; it is not evidence that an individual school has signed it.

• Purpose: school administration, attendance, financial records, results and authorised parent access, for the agreed service period.
• People and records: pupils, guardians and staff; identity/contact details, enrolment, attendance, academic and fee records.
• Instructions: process school records only for the agreed service and documented school instructions, with confidentiality and role-based access.
• Providers and location: review the service-provider register and the US database location; confirm appropriate arrangements for cross-border processing before onboarding.
• Requests and incidents: verify authority, assist the school with record requests, and promptly notify the school of confirmed incidents affecting its data.
• Return and deletion: provide records export and agree a closure schedule, backup retention, legal exceptions and confirmation of completion.
• Operational terms: record the authorised contacts, support response expectations, backup/restore targets and any audit evidence required by the school.

Request the school-specific agreement from support@myimpactai.org. Schools remain responsible for appropriate pupil/guardian notices and the authority to process children’s information.