School and Student Data Privacy

Operational privacy summary for schools

This public summary is not a signed Data Processing Agreement. Schools requiring contractual clauses, regional addenda, insurance evidence, retention schedules, or procurement documents should contact us before production onboarding.

Purpose Limitation

Student information is processed to provide authorized transportation and related school services. It is not sold or used for behavioral advertising. School-provided authorization for children’s information is limited to the school-authorized context.

Roles and Access

Access is separated by region, school, account, and role. Schools are responsible for accurate assignments and timely removal of users. EasySchoolBus administers platform infrastructure and restricted platform operations.

Data Minimization

Schools should submit only information needed for routes, stops, attendance, safety, payments, store fulfillment, communications, and support. Sensitive educational, health, or disability details should not be entered unless an enabled function and school agreement specifically require them.

Parent and School Requests

Authorized schools and verified parents may request review, correction, restriction, export, or deletion as applicable. Certain safety, payment, incident, or legal records may require retention.

Security, Providers, and Deletion

See Security, Subprocessors, and the retention section of the Privacy Policy. At the end of service, data will be deleted or returned where contractually required, except for information that must be retained.

Regional Review

Schools should review requirements applicable in the United States, Canada, United Kingdom, Australia, or United Arab Emirates and obtain any required district, parent, guardian, or employee authorization. Contact us to prepare an appropriate written addendum for the contracting organization.