Student Data Privacy Agreement

Provider offers a hosted school-fundraising platform that creates per-student donation pages for events such as bounce-house, foam, and color-run fundraisers. To operate this service, the LEA may share limited student directory information with Provider. This Agreement governs that exchange and incorporates the LEA's obligations under FERPA (20 U.S.C. § 1232g), COPPA (15 U.S.C. § 6501 et seq.), and applicable state student-privacy laws including Florida's §§ 1002.221 and 1002.222, Florida Statutes.

The LEA shares only the following fields for each participating student:

• First name and last initial
• Grade level
• Teacher or classroom name

Provider will not solicit or accept addresses, phone numbers, dates of birth, Social Security numbers, IEP/504 records, health records, or grades.

All student data shared under this Agreement remains the property of the LEA. Provider acts solely as a "school official" with a legitimate educational interest under FERPA § 99.31(a)(1)(i)(B) and operates under the direct control of the LEA with respect to the use and maintenance of student records.

Provider will use student data only to: (a) create and operate the LEA's fundraiser, (b) process donations and issue receipts, (c) generate aggregate, de-identified reports for the LEA, and (d) comply with legal obligations. Provider will not use student data for advertising, marketing, profiling, behavioral analytics, resale, or training of third-party AI systems.

Provider will not sell, rent, or trade student data. Provider will not disclose student data to any third party except: (i) sub-processors strictly necessary to operate the service (hosting, email delivery, payment processing), each bound by equivalent confidentiality obligations; or (ii) where required by law, in which case Provider will give the LEA prior notice unless legally prohibited.

Provider will maintain commercially reasonable administrative, physical, and technical safeguards including encryption in transit (TLS 1.2+) and at rest, role-based access control, audit logging, vulnerability monitoring, and least-privilege access for staff. Access to LEA data is limited to named Provider personnel with a documented need.

Provider will notify the LEA in writing without unreasonable delay, and in any event within 72 hours, of any confirmed unauthorized access to, acquisition of, or disclosure of student data. Notification will describe the nature of the incident, the data involved, and Provider's response.

Roster data is retained while the fundraiser is active and for up to twelve (12) months after the event ends to support reconciliation. Provider will delete or de-identify student data within thirty (30) days of a written request from the LEA, and will purge all copies (including routine backups, on backup-rotation schedule) within ninety (90) days of contract termination.

Parents and eligible students may request, through the LEA or directly to Provider at info@millersjumptime.com, to (a) review the student data Provider holds, (b) request correction, or (c) request deletion. Provider will fulfill verified requests within ten (10) business days.

Current sub-processors include: Supabase / Lovable Cloud (hosting and database, United States), Stripe (payment processing, United States), and Resend (transactional email, United States). Provider will maintain an up-to-date list and notify the LEA before adding a new sub-processor that processes student data.

This Agreement begins on the signature date and continues for the duration of the fundraiser plus the retention period in Section 8. Either party may terminate for material breach with thirty (30) days written notice and an opportunity to cure.

This Agreement is governed by the laws of the State of Florida, without regard to conflict-of-law principles.