Data Processing Agreement — Reading Forge Classroom

Between Forge Learning Technologies LLC ("Provider") and the school or district identified on the signature page ("School"). Effective on the date of last signature.

🖨️ Download / Print DPA Print to PDF, countersign, and email a copy to forge@forgelearningtech.com.

1. Scope

This DPA governs data processed when School uses Reading Forge Classroom under the Terms of Service.

2. What is processed

(a) Teacher data: school email address, sign-in events (count and last-seen date), and license status. (b) Student data: none is transmitted to Provider. Student first names or nicknames, avatars, and learning progress exist only on School-controlled devices and School's local network, encrypted in transit between devices.

3. Purpose limitation

Provider processes teacher data solely to provide and administer the service. No advertising, no sale of data, no profiling, and no use of School data to train AI models.

4. FERPA

To the extent Provider processes any education records, Provider acts as a "school official" with a legitimate educational interest, under School's direct control, and will not re-disclose them except as directed by School or required by law.

5. COPPA

The service is designed to collect no personal information from children under 13. Should School configure or use the service in a way that provides child personal information to Provider, School authorizes that collection on parents' behalf solely for the educational context.

6. Subprocessors

Google LLC (Firebase Authentication and Cloud Firestore, hosted in the United States). Provider will give School 30 days' notice before adding subprocessors.

7. Security

Data in transit is encrypted (TLS). Access to license and usage records is restricted to Provider personnel who need it to administer licenses.

8. Breach notice

Provider will notify School without undue delay, and within 72 hours of confirming a breach affecting School data.

9. Deletion

On termination or on School's request, Provider deletes School's teacher data within 30 days and will certify deletion on request.

10. Term

This DPA remains in effect for the duration of School's license term.

Signatures