Data Processing Addendum

This DPA is between the school or educator accepting it as Customer and Andrew Hall, an individual/sole proprietor in Florida, United States, operating Desk Dollars. It forms part of the Terms. The person accepting confirms adult status and authority to bind the identified Customer; acceptance does not create authority the person does not have.

It applies when Customer is controller of student education/classroom personal data and directs Desk Dollars to act as processor or service provider. Andrew Hall remains controller for teacher account, support, security, legal, and entitlement data, and Stripe/Link retains independent Managed Payments roles.

Subject matter: operating a private classroom economy. Duration: the subscription, restricted recovery period, and documented deletion/return process. Purpose: authentication, enrollment, simulated ledger, jobs and payroll, rent, store orders, goals, pets, reports, exports, cards, support, security, and required operations.

Data subjects are students, educators, school staff, parents or guardians who make requests, and support contacts. Data categories include names and initials, usernames, credentials in hashed form, enrollment, classroom identifiers, simulated financial activity, authored content, usage/security records, and request communications. Customer instructions are the Terms, this DPA, product controls, and lawful written directions consistent with the service.

Desk Dollars processes covered data only on documented instructions unless law requires otherwise; in that event it will inform Customer unless prohibited. People authorized to process data are subject to confidentiality. Desk Dollars maintains proportionate technical and organizational measures described in the Security Policy and will inform Customer if an instruction appears to violate applicable data protection law.

Desk Dollars assists, considering the nature of processing and available information, with data-subject requests, security obligations, DPIAs, regulator consultation, and demonstrated compliance. Assistance may use product controls and reasonable documentation rather than a promised certification or custom audit.

Customer gives general authorization for subprocessors listed on the public Subprocessor page. Desk Dollars remains responsible for required processor obligations delegated to a subprocessor and will require appropriate data-protection terms before production personal data is sent.

The list includes a change date and contact route. Customer may raise a reasoned data-protection objection at [email protected]. The parties will seek a practical resolution; if none exists, Customer may stop affected use and export or delete data. This does not promise that every vendor can be replaced or that custom terms will be negotiated.

Desk Dollars will notify Customer without undue delay after confirming a personal-data breach affecting Customer data, provide available facts and updates, and cooperate with Customer's assessment. Exact external notice requirements and timing remain jurisdiction-specific.

Desk Dollars will provide reasonably available policy, control, subprocessor, and incident information needed to demonstrate this DPA. Any additional audit must be legally required, proportionate, protect other users and security, avoid unreasonable disruption, and be arranged in writing. Government requests are reviewed for validity, narrowed or challenged where appropriate, and disclosed to Customer unless prohibited.

During access and recovery, Customer may use account export. At verified deletion or the end of the applicable 30-day recovery or 90-day recovery window, Desk Dollars deletes or anonymizes covered identifiers and mutable data under the Retention Policy. Immutable transaction/accounting history, teacher-authored transaction descriptions and student-visible reasons, and historical pet records may remain under anonymized identity. Customer must not put unnecessary personal information in ledger reasons. Backups expire through their configured rotation and restored data is re-controlled.

This DPA ends after covered processing and required deletion/return are complete. Confidentiality, security, and retained-record duties survive as applicable.

No EU Standard Contractual Clauses, UK IDTA/Addendum, Brazilian transfer mechanism, representative appointment, or annex is represented as executed merely by publishing this DPA. Where one is required, it becomes part of this DPA only after the relevant module, parties, transfer facts, annexes, and signatures or valid acceptance are completed.

Affected regional signup must remain disabled while a required representative, transfer safeguard, vendor fact, DPIA, or registration is unresolved. Schools needing a completed transfer package or negotiated agreement should contact [email protected] before use.

Privacy and DPA notices go to [email protected]. The DPA controls over the Terms for covered processing conflicts. Non-waivable law controls over both. The en-US text controls.