Data Privacy Agreement (DPA)

What we'll sign

• SDPC National DPA — we work with the Student Data Privacy Consortium's standard National Data Privacy Agreement and its state-specific exhibits.
• State-specific agreements — including California, New York (Ed Law 2-d), Illinois (SOPPA), and similar state frameworks.
• Your district's own template — send us your standard agreement and we'll review it.

What a DPA with us covers

• Student data is owned by the district and used only to provide the service to the school.
• No sale of student data and no advertising or behavioral targeting to students.
• Defined data retention and deletion on request or at contract termination.
• Security safeguards and breach-notification commitments.
• A current list of subprocessors (see our Security page).

How to request a DPA

1. Email privacy@studymondo.com from your district email with your district name and state.
2. Tell us which framework you use — the SDPC National DPA, a state exhibit, or your own template (attach it if so).
3. If your district is part of a privacy consortium (e.g., a state SDPC alliance), send the link to your registry entry and we'll complete the agreement there.
4. We review, sign, and return the executed agreement, then your rostering can proceed.

Typical turnaround is a few business days, depending on the template and any redlines.

Already have students using Study Mondo?

That's fine — teachers can pilot the free tier under the FERPA school-official exception while a district-wide DPA is being put in place. If your district later requires deletion of pilot data, we will action a verified request. See our Security & Student Data Privacy page for details.