Data processing information

The district decides why and how personal data is used in iSoar. iSoar Network processes that data on the district's behalf and only on its documented instructions, which include the district's agreement and the settings it chooses in iSoar.

Data subjects are the district's students, their parents and guardians, staff, and the community partners the district invites. The categories of data are listed on our Student data privacy page. iSoar is not designed to store payment card data or medical records beyond the notes and forms a school chooses to keep.

We process data only to provide, secure, support and improve iSoar for the district, to keep records the law requires, and to respond to the district's requests.

• Staff with access to customer data are bound by confidentiality obligations.
• Technical and organizational security measures are described on our Security page.
• Subprocessors are listed on our Subprocessors page and are bound by written data protection terms.
• Data is stored in the United States.

We help districts respond to requests from parents, students and staff, to complete privacy and security reviews, and to meet breach notification duties. We provide security and privacy information on request.

At the end of the agreement the district can export its data. We then delete or return it within 60 days, unless the district asks us to keep it longer or the law requires us to keep it. Backups age out within 7 days of deletion.

To request a data processing or student data privacy agreement, email theisoarnetwork@gmail.com with the subject "Data privacy agreement" and tell us your district and state.