This is Anni Planner's standard Data Privacy Agreement for schools and districts. Print it, fill in the blanks, and both parties sign; email a copy to privacy@anniplanner.com and we counter-sign and return it. A district's own standard student-data agreement can be used instead; send it over and we will review it.
DATA PRIVACY AGREEMENT ("Agreement"), between Jon Hegreness d/b/a Anni Planner, an Arizona sole proprietorship ("Provider"), and ______________________________________ ("School"), effective ____________________ (the "Effective Date"), covering the School's use of the Anni Planner service at anniplanner.com (the "Service").
1. Purpose and scope
The School authorizes its teachers and staff to use the Service for classroom planning and related school purposes. "Student Data" means personally identifiable information from education records under FERPA (20 U.S.C. § 1232g) and "covered information" under A.R.S. § 15-1046 that is provided to or stored in the Service by the School's teachers, staff, or students. Student Data belongs to the School.
2. School official designation (FERPA)
The School designates Provider a "school official" with a legitimate educational interest under 34 CFR § 99.31(a)(1). Provider: (a) performs an institutional service for which the School would otherwise use employees; (b) is under the School's direct control with respect to the use and maintenance of education records; (c) uses education records only for the purposes of this Agreement and does not redisclose them except to the subprocessors in section 6 or as the School directs or law requires; and (d) will not maintain Student Data beyond the retention and deletion terms of this Agreement.
3. COPPA authorization
For students under 13, the School consents to collection and use of Student Data by the Service on parents' behalf, solely for educational purposes consistent with the Federal Trade Commission's education technology guidance. Provider collects no contact information from children and uses children's information only to provide the Service. The School will handle notice to parents about the classroom tools it authorizes, and will relay parent review or deletion requests to Provider, which Provider honors under section 5.
4. Provider commitments (A.R.S. § 15-1046 and general)
Provider will not: sell or rent Student Data; use it for targeted advertising anywhere; amass a profile of a student except for school purposes; use it to train artificial intelligence models; or disclose it except as this Agreement permits. Provider will: maintain reasonable security procedures and practices appropriate to the data, as described at anniplanner.com/security; keep a written retention schedule (anniplanner.com/privacy, section 5) with no indefinite retention; give the School prominent advance notice of material privacy policy changes; and use de-identified or aggregate data only as A.R.S. § 15-1046(E) permits.
5. Access, correction, deletion, and return
The School's teachers can view, correct, export, print, and delete Student Data directly in the Service at any time. On the School's written request, Provider will delete identified Student Data (or an entire account) within ten (10) business days, unless a parent or guardian consents to retention, and will confirm deletion in writing. On termination of this Agreement, the School has sixty (60) days to retrieve its data, after which Provider deletes it; backup copies age out within ninety (90) days of deletion.
6. Subprocessors
Provider uses the following subprocessors, each bound by terms restricting use to providing the service to Provider, prohibiting further disclosure, and requiring reasonable security (A.R.S. § 15-1046(A)(4)(f)): Cloudflare (hosting, database, file storage, US), Backblaze (encrypted backups, US), Twilio (login text messages, US), Resend (service email, US), and Google (only for teacher-initiated Google account connections). Provider will give the School thirty (30) days' notice before adding a subprocessor that would handle Student Data.
7. Security incidents
Provider maintains the written security program published at anniplanner.com/security. On determining that a breach of security has exposed Student Data or School account data that was not encrypted or redacted (or encrypted data together with its key), Provider will notify the School without unreasonable delay and within the time A.R.S. § 18-552 requires, describing what was involved, what was done, and what the School should do. Provider will also make the individual, Attorney General, and consumer reporting agency notifications A.R.S. § 18-552 requires, and will cooperate with the School's own notification obligations.
8. Access, liability, and assignment
Within Provider's organization, Student Data is accessible to exactly one person, the operator named below, whose access is protected by two-step verification; no employees or contractors have access. Except for the breach-notification duties of section 7 and any liability that cannot lawfully be limited, each party's total aggregate liability under this Agreement is limited to the greater of one hundred dollars ($100) or the fees the School paid Provider in the twelve months before the claim, and neither party is liable for indirect, incidental, special, consequential, or punitive damages. Provider may not assign this Agreement, except to a successor in a sale of the business who assumes it in writing and in full, with thirty (30) days' prior written notice to the School and the School's right to terminate and retrieve its data before the transfer.
9. Audit and review
Once per contract year, on reasonable notice, Provider will answer the School's written security and privacy questionnaire and provide documentation reasonably sufficient to show compliance with this Agreement. This is a hosted multi-tenant service; direct system access is not provided, but Provider will demonstrate controls on a call with School IT on request.
10. Term, precedence, and law
This Agreement runs until terminated by either party on thirty (30) days' written notice (deletion obligations survive). If it conflicts with the Service's Terms of Service or policies, this Agreement controls for the School's Student Data. It is governed by Arizona law, venue Maricopa County, Arizona, in each case only to the extent permitted by the law applicable to the School as a public entity. Each signer below represents they have authority to bind their party. Notices go to the signature-block contacts below.
Signatures
| Provider: Jon Hegreness d/b/a Anni Planner | School / District |
|---|---|
| Signature: | Signature: |
| Name: Jon Hegreness | Name: |
| Title: Owner / Operator | Title: |
| Email: privacy@anniplanner.com | Email: |
| Date: | Date: |
Tip for schools: print this page (it prints cleanly with your browser's print dialog) or request a copy by email.