Trust and data responsibility

Privacy Policy

This policy explains what information Report Deck handles, why it is needed, and the choices available to institutions and users.

Last updated: September 13, 2026

01

Scope of this policy

This policy applies to Report Deck's school administration platform, including its administrator dashboards, teacher class workspaces, student records, attendance, assessment, reporting, and related authentication services.

An institution may provide additional notices that apply to its students, families, teachers, or staff. Where those notices provide more specific information about the institution's use of data, they should be read together with this policy.

02

The institution and Report Deck have different roles

The school or institution normally decides which student and staff information is entered into Report Deck and how that information is used. In that context, the institution acts as the data controller and Report Deck processes information on its instructions.

Report Deck may act independently for limited platform responsibilities such as account authentication, service security, abuse prevention, legal compliance, and maintaining the reliability of the service.

03

Information we handle

Account information. Names, email addresses, profile images, encrypted passwords, roles, and school assignments used to create and secure accounts.

Institution information. School name, logo, motto, academic year, brand settings, leadership details, classes, teachers, subjects, and term configuration.

Student and academic records. Student names, identification codes, class assignments, gender, date of birth, attendance, assessment scores, rankings, comments, conduct information, and generated report cards.

Uploaded content. School logos and authorized signature images provided for reports.

Service information. Authentication events, class portal activity, record changes, and technical information needed to operate, protect, and troubleshoot the platform.

04

How information is used

Information is used to provide school workspaces, authenticate users, maintain student and class records, calculate academic results, generate reports, support authorized communication, protect the platform, diagnose failures, and meet contractual or legal obligations.

Report Deck does not use student records for targeted advertising and does not sell student personal information.

05

When information may be shared

Information is available to authorized institution users according to their assigned roles. It may also be handled by service providers that support hosting, database storage, authentication, and email delivery under appropriate contractual safeguards.

Information may be disclosed where required by law, to protect the rights or safety of users, or as part of a properly managed business transaction. Report Deck does not make institution records public.

06

Student and children's information

Student information is provided and managed by the institution for educational administration. Schools are responsible for having the appropriate authority, notices, and permissions required by the laws that apply to their students.

Students and families should direct requests about academic records to their school. Report Deck will support the institution in responding where required.

07

Retention and deletion

Information is retained for as long as the institution's account is active, as required to provide the service, or as specified in the institutional agreement. Some records may be retained longer where required for security, dispute resolution, legal compliance, or legitimate educational recordkeeping.

When an institution's service ends, its information is returned or deleted according to the agreement and applicable law, subject to permitted backup and legal retention periods.

08

How information is protected

Report Deck uses role-based access, school-scoped records, password protection, authenticated sessions, and operational controls designed to prevent unauthorized access, alteration, disclosure, or loss.

No system can guarantee absolute security. Institutions should protect administrator credentials, restrict class portal access, assign only necessary permissions, and notify platform support promptly if misuse is suspected.

09

Access, correction, and other choices

Depending on local law, individuals may have rights to access, correct, delete, restrict, or obtain a copy of their personal information. Because institutions control most school records in Report Deck, requests should normally be made to the relevant school administrator first.

Account holders may update available profile or school settings through their authorized workspace. Certain academic records may need to be preserved under institution policy or applicable law.

10

Questions and contact

Students, parents, teachers, and staff should contact their institution administrator about records held in Report Deck. Institution administrators may contact the platform operator using the support and privacy details provided in their Report Deck service agreement.

We may update this policy as the platform, applicable law, or our operating practices change. Material updates will be communicated to institutions through the service or their established support channel.

Your institution's workspace

Return to the work that matters.

Sign in to Report Deck