Student Data Privacy and Security Overview

October 2026

SchoolLife supports the daily operations of K-12 schools and districts. Protecting student data is built into how the platform works. This overview summarizes our privacy commitments, the agreements available to districts, and our security practices.

1. Our Commitments

We never sell student data. This commitment is written into every district contract.
No advertising or profiling. We do not use student data for targeted advertising or to build non-educational profiles. Student data is used only for the educational purpose the district authorizes.
District records remain the district's. Records stay authoritative in the district's own systems, and SchoolLife reflects them. On request, we return and delete district data.
Logged, role-based access. Every record view is limited by role and recorded in an audit log, which supports the district's FERPA record of disclosures.

2. Legal Frameworks

SchoolLife operates under the Family Educational Rights and Privacy Act (FERPA) as a school official; the Children's Online Privacy Protection Act (COPPA) under school consent; the Student Data Privacy Consortium National Data Privacy Agreement (NDPA); New Jersey student data privacy requirements; and the Delaware Student Data Privacy Protection Act.

3. Agreements and Documentation

Document	Availability
Data Privacy Agreement	We sign the SDPC National Data Privacy Agreement and the applicable state exhibit. New Jersey districts may use it through the New Jersey Student Privacy Alliance. Requests may be sent to privacy@myschoollife.org.
Privacy Policy	Published at myschoollife.org/privacy.
Sub-processors	Current list available on request at privacy@myschoollife.org. Each sub-processor is bound to privacy terms at least as protective as ours.
Certificate of Insurance	Insured with The Hartford effective October 1, 2026: General Liability ($1,000,000 per occurrence, $2,000,000 aggregate); Professional Liability (Technology Errors and Omissions) including Cyber Liability ($1,000,000); and Workers' Compensation. A certificate naming the district is available on request.
Vendor documents	Form W-9, New Jersey Business Registration Certificate and standard New Jersey vendor certifications are available for procurement.

4. Security Practices

Area	Practice
Encryption	Data is encrypted in transit (TLS) and at rest.
Access control	Role-based, least-privilege access, enforced on our servers against a verified identity, with full audit logging.
Authentication	Single sign-on through the district's identity provider (Google or Microsoft). Multi-factor authentication is required for privileged roles.
Incident response	A documented response plan, with notice to the district within seventy-two (72) hours of confirming a data breach, as the NDPA requires.
Student and parent access	Optional, and enabled only by the district. Students sign in through the district's single sign-on and see only what the district makes available. Parents and guardians see information only about their own child.
Data minimization	Student personal information is de-identified in operational and analytical views wherever feasible.

5. Frequently Asked Questions

Do you sell or monetize student data? No. We never sell student data and never use it for advertising or any non-educational purpose. Our revenue comes solely from district subscriptions.

Who owns the data? The district. We act as a service provider on the district's behalf, and the district may access, correct, export and delete its data.

What happens to our data if we leave? We return and/or securely delete it within sixty (60) days, as the NDPA requires, or sooner if state law requires.

Are you a "school official" under FERPA? Yes. We operate under the district's direct control, for the contracted purpose only.

Can we use our state's model data privacy agreement? Yes. We work from the SDPC National Data Privacy Agreement and the applicable state exhibit, so districts are not negotiating a one-off contract.

Contact: privacy@myschoollife.org, Pinnacle Solutions Group LLC, d/b/a SchoolLife, 2600 Tilton Road #1020, Egg Harbor Township, New Jersey 08234.