Data Processing Addendum

Last updated: September 2026 · Beta version

This Data Processing Addendum ("DPA") forms part of the Terms of Service between you (the practice organization, "Customer") and LearnersVoyage ("we", "us"). It applies to personal data you or your clients enter into the service — including student, parent, and household information — while your subscription is active.

Roles

You are the controller of the data you enter. LearnersVoyage acts as a processor (or service provider) and processes that data only on your documented instructions, which include using the service as designed and the settings you configure.

Scope of processing

• Subject matter: practice-management data you record — student profiles, session notes, assessment results, scheduling, and billing records.
• Nature and purpose: storing, organizing, and displaying that data to provide the service; generating AI-assisted content only when you use AI features.
• Duration: for the life of your account, then the retention period you select at offboarding (immediate deletion on request, a defined retention window, or the 3-month default).
• Data subjects: your students, their parents or guardians, and practitioners in your practice.

Our obligations

• Process personal data only to provide and maintain the service, never to sell it or use it for advertising.
• Keep personal data confidential and restrict access to personnel and subprocessors bound by confidentiality.
• Maintain technical and organizational measures appropriate to the sensitivity of student data — encrypted transport, access controls, tenant isolation, and audit logging.
• Pseudonymize identifying fields before optional AI-processing calls, per the Privacy Policy.
• Notify you without undue delay if we become aware of a breach affecting your data.
• Assist you, within reason, in honoring data-subject requests (access, correction, export, deletion) through in-app tools or on request.
• Delete or return your data at the end of service per the retention option you select, subject to payment records we must retain under legal hold.

Subprocessors

The providers we use to deliver the service are listed in the Privacy Policy (currently including our hosting provider, Stripe for billing, our AI-inference provider for optional AI features, and transactional email delivery). We will update the Privacy Policy before engaging a new subprocessor that touches personal data; you may object to a new subprocessor by contacting us within 14 days of the update.

Security & audits

On reasonable request we will make available information demonstrating our compliance with this DPA (for example, current security measures and subprocessor details). Formal on-site audits are not required for beta accounts.

Transfers

We process and store data in the United States. If you are located outside the U.S., you instruct us to process data in the U.S. as part of using the service.

Educational records

Where records you enter qualify as education records under FERPA, you confirm you have the authority (parental consent, school contract, or other lawful basis) to place them in the service, and we will handle them as a processor with direct control from you — not as a "school official" acting independently.

Contact

Questions about this addendum: admin@learnersvoyage.com.