Information Transparency
ClassDojo is committed to being transparent with how we handle your information, in full compliance with local, national, and international laws like GDPR, COPPA, FERPA, and others.
Below you can see what information we collect, why and how we collect it, where it's stored, and how it's different for each type of user on our platform.
Teacher
Parent
Student
School Leader
Logged out Users
Outside School UserTypes of information shared
| Data Element | How is data collected and who is the source? | How this information is used | The purpose for ClassDojo collecting this information | Is Data shared or accessed by a service provider? (or processor) | Where is this Data element stored or accessed by each third party/service provider that it is shared with or made available to? | Retention schedule | Any other non-service provider third parties with access | Technical and Security Measures | Is Data transferred Outside of the EEA/UK and What are the transfer Mechansim (or Safeguards)? | What is the Article 6 lawful basis for processing this personal Data under GDPR |
| Account ID | Directly from an Individual User, Online Registration | Establish Identity, To provide the service that the user signed up for | New Product Development, Provide Service to User | Zendesk, MongoDB, Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Active/engagement time (logged in user) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Historical Research, New Product Development | Product Analytics, Marketing | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Audio files | Directly from an Individual User, Data Upload, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Browser type (logged in user) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Enhance Personalization, Historical Research, New Product Development | Product Analytics, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Business name | Directly from an Individual User, Online Registration, Data Upload | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Datadog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Click paths | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Historical Research, New Product Development | Product Analytics, Marketing | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Conduct or behavior data (student) | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Conduct or behavior data (student) | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Contact Details | Yes, Contract, Legitimate Interest | Not Required | Marketing, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Datadog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Cookie Information | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Historical Research, Establish Identity, New Product Development | Provide Service to User | AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Device specific information (i.e. operating system, hardware version, device settings, etc.) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Establish Identity, To provide the service that the user signed up for | Product Analytics, Provide Service to User | AWS Redshift DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) Datadog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Direct messages and group chats on app | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Directly from an Individual User, Online Registration, Data Upload, Surveys | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | SendGrid (Twilio) Zendesk, MongoDB Atlas (previously known as mLab and MongoDB) SurveyMonkey AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Zendesk in the U.S.; SurveyMonkey in the U.S.; in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest | |
| Feedback page posts (including text, links, images) | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Forum posts (including text, links, images) | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Grade Level | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Grade Level | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| In-app communications (messaging or other) | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | Blueshift AWS Redshift DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Inferences drawn about a consumer/user | Product Analytics and engineering, Online Registration, Product Feature, Tracking Technologies (Cookies, Pixels, etc.) | To provide the service that the user signed up for | Product Improvement | Blueshift AWS Redshift DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) Datadog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| IP Address | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Direct Marketing, Enhance Personalization, Establish Identity, To provide the service that the user signed up for | Product Analytics, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Datadog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| IP Address logged in user | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Direct Marketing, Enhance Personalization, Establish Identity, New Product Development | New Product Development, Marketing, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Job Title Role | Directly from an Individual User, Online Registration, Data Upload | Direct Marketing, Enhance Personalization, Historical Research, Establish Identity, To provide the service that the user signed up for, New Product Development | New Product Development, Product Analytics, Marketing, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Languages Spoken | Directly from an Individual User, Product Feature, Tracking Technologies (Cookies, Pixels, etc.) | Enhance Personalization, Historical Research, To provide the service that the user signed up for | Product Analytics, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Local (school district) ID number | Vendor/Third Party, Data Upload | Historical Research, Establish Identity, To provide the service that the user signed up for, New Product Development | Provide Service to User | AWS Redshift, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Name (first) | Directly from an Individual User, Online Registration, Data Upload | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Name (full) | Directly from an Individual User, Online Registration, Data Upload, Surveys | Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | Zendesk, MongoDB Atlas (previously known as mLab and MongoDB) SurveyMonkey AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | Data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Zendesk in the U.S.; SurveyMonkey in the U.S.; in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Name (last) | Directly from an Individual User, Online Registration, Data Upload | Direct Marketing, Establish Identity, To provide the service that the user signed up for | New Product Development, Marketing | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Non-student generated content (writing, homework, etc.) | Directly from an Individual User, Online Registration, Data Upload | To provide the service that the user signed up for | Provide Service to User | AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Office Location | Directly from an Individual User, Online Registration | To provide the service that the user signed up for | Provide Service to User | AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Other Data on User Interaction with Application or Site | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Product Improvement | AWS DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) Datadog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Phone Numbers | Yes, Contract, Legitimate Interest | Not Required | Marketing | Zendesk, MongoDB, Atlas (previously known as mLab and MongoDB) SurveyMonkey, Twilio, AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | Data stored on AWS servers in the U.S. and MLab in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Zendesk in the U.S.; SurveyMonkey in the U.S.; in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Photographs | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Precise Geolocation data | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Direct Marketing, Enhance Personalization, Historical Research, Establish Identity, To provide the service that the user signed up for, New Product Development | Provide Service to User | AWS Redshift DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Precise Geolocation data | Directly from an Individual User, Online Registration, Tracking Technologies (Cookies, Pixels, etc.) | Establish Identity, To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | Algolia and AWS (Elastic search) in the U.S.; back-ups are in the same locations; in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until account deletion | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Professional or employment-related information | Directly from an Individual User, Online Registration | Enhance Personalization, Historical Research, To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Datadog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Professional or employment-related information | Directly from an Individual User, Online Registration | Enhance Personalization, Historical Research, To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Datadog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Referring URLs | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Direct Marketing, Historical Research | Product Analytics, Marketing | MatomoMongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| School Address | Directly from an Individual User, Online Registration, Data Upload | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained at the Direction of the School | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| School Name | Directly from an Individual User, Online Registration | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| School name | Directly from an Individual User, Online Registration, Data Upload | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Server Log Information | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Debugging & Security, New Product Development | Provide Service to User | AWS Redshift DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Student scheduled courses | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Student work (student generated content, writing, etc.) | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Teacher Email | Directly from an Individual User, Online Registration | Establish Identity, To provide the service that the user signed up for | New Product Development, Provide Service to User | Zendesk, MongoDB, Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Zendesk in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Time spent on site (logged in user) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Enhance Personalization, Historical Research, New Product Development | Product Analytics | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Unique device IDs (e.g. Android ID, UDID, etc.) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Establish Identity, To provide the service that the user signed up for, New Product Development | Product Improvement, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| User Support Tickets | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Product Improvement, Provide Service to User | Zendesk, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | Data stored on AWS servers in the U.S. and MLab in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Zendesk in the U.S.; in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Vendor/App assigned ID number (non-student) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | To provide the service that the user signed up for | Product Improvement, Product Analytics | AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Videos | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |