SUFFAH SCHOOL AGREEMENT
Last updated: January 2, 2026
This agreement includes the Data Sharing Agreement (DSA), Data Processing Agreement (DPA), and core Platform Terms of Service (ToS).
SUMMARY (Quick Understanding)
This summary explains the agreement in plain English.
1. Why we need your data:
To create accounts, manage classes, send login codes, and run the platform.
2. Who owns the data:
The School owns all student and staff data. Suffah only processes it for the School.
3. What Suffah does with the data:
Only what the School tells us to do. No selling, sharing, or advertising.
4. Under FERPA:
Suffah acts as a school official with a legitimate educational purpose.
5. Under COPPA (under 13 students):
The School gives consent on behalf of parents.
6. Security:
Data is encrypted. Access is restricted. Breaches are reported quickly.
7. Deletion:
If the School leaves the platform, we delete or return all data.
8. School responsibilities:
Upload accurate data, follow the ToS, and use the platform properly.
9. Binding agreement:
When the School admin signs, it becomes legally binding.
This summary is only for clarity. The full agreement below is what controls.
1. Parties
School:
—
Administrator:
—
Email:
—
Service Provider:
Suffah Learning Platform ("Suffah")
2. Purpose of This Agreement
The School chooses to use Suffah and authorizes Suffah to receive and process student, staff, and parent information for educational and administrative purposes only.
This agreement combines:
- Data Sharing Agreement (DSA)
- Data Processing Agreement (DPA)
- Terms of Service (ToS)
All in one document.
3. Data the School May Upload
The School may upload or provide:
Student Data
- Name
- Grade level
- Student ID
- Class enrollment
- Email or phone number (optional)
Parent/Guardian Data
- Name
- Email or phone number (for login, 2-step verification, and communication)
Staff Data
- Name
- Role/position
- Phone
Why Suffah Uses This Data
To:
- Create accounts
- Send login codes and 2-step verification
- Deliver announcements, assignments, and grades
- Provide access to the system
The School agrees not to upload Social Security Numbers or unnecessary sensitive identifiers.
4. Suffah's Responsibilities (Data Processor)
Suffah agrees to:
- Use data only as instructed by the School.
- Not sell, share, or use data for advertising or tracking.
- Protect data with encryption and access control.
- Limit data access to authorized staff only.
- Report any suspected or confirmed breach promptly.
- Delete or return data when the School asks or when the contract ends.
- Keep all uploaded data private and confidential.
5. FERPA Compliance
The School declares that:
- It is permitted under FERPA to share student data with Suffah.
- Suffah is acting as a school official with a legitimate educational purpose.
Suffah will not disclose student data except as allowed by the School.
6. COPPA Compliance (Students Under 13)
If students under 13 use Suffah:
- The School is giving consent on behalf of parents.
- The platform will be used solely for educational purposes.
- No separate parent verification is required.
7. Security Measures
Suffah will maintain industry-standard security including:
- Encryption of all data at rest and in transit
- Role-based permissions
- Secure servers and restricted access
- Logging of system access
- Secure password and authentication systems
8. Data Retention and Deletion
Upon School request or termination:
- All identifiable data will be deleted or returned
- Backup copies containing data will be cleared within 30 days
9. School Responsibilities
The School agrees to:
- Upload accurate information
- Use the system in accordance with this agreement
- Inform Suffah of any unauthorized access
- Obtain parent notices if required under local law
- Only provide data necessary for the system
10. Platform Terms of Service
The School agrees that:
- Suffah may update features for performance or security
- The platform is provided "as is" without guarantee of uninterrupted service
- The School will not misuse or attempt to compromise the system
- Accounts may be suspended if used for harmful or illegal activity
- The School is responsible for controlling its own staff access
11. Liability
Each party is responsible for its own actions. Neither party is liable for events outside its control (e.g. outages, force majeure).
Suffah's total liability is limited to the amount paid by the School in the last 12 months.
12. Term and Termination
This agreement begins when the School submits the form and remains active until cancelled.
Either party may terminate with written notice. Data deletion obligations remain even after termination.
13. Acceptance & Digital Signature
By signing below, the School agrees to all terms contained in this combined agreement.
[Submit — This counts as a legally valid signature]
Questions about this agreement? Contact us at legal@suffah.com