Ce document n'est actuellement disponible qu'en anglais.
Information Transparency
ClassDojo is committed to being transparent with how we handle your information, in full compliance with local, national, and international laws like GDPR, COPPA, FERPA, and others.
Below you can see what information we collect, why and how we collect it, where it's stored, and how it's different for each type of user on our platform.
Types of information shared
| Data Element | How is data collected and who is the source? | How this information is used | The purpose for ClassDojo collecting this information | Is Data shared or accessed by a service provider? (or processor) | Where is this Data element stored or accessed by each third party/service provider that it is shared with or made available to? | Retention schedule | Any other non-service provider third parties with access | Technical and Security Measures | Is Data transferred Outside of the EEA/UK and What are the transfer Mechansim (or Safeguards)? | What is the Article 6 lawful basis for processing this personal Data under GDPR |
|---|---|---|---|---|---|---|---|---|---|---|
| Account ID | Directly from an Individual User, Online Registration | Establish Identity, To provide the service that the user signed up for | New Product Development, Provide Service to User | Zendesk, MongoDB, Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Active/engagement time (logged in user) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Historical Research, New Product Development | Product Analytics, Marketing | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Audio files | Directly from an Individual User, Data Upload, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Browser type (logged in user) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Enhance Personalization, Historical Research, New Product Development | Product Analytics, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Business name | Directly from an Individual User, Online Registration, Data Upload | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Datadog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Click paths | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Historical Research, New Product Development | Product Analytics, Marketing | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Conduct or behavior data (student) | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Conduct or behavior data (student) | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Contact Details | Yes, Contract, Legitimate Interest | Not Required | Marketing, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Datadog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Cookie Information | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Historical Research, Establish Identity, New Product Development | Provide Service to User | AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Device specific information (i.e. operating system, hardware version, device settings, etc.) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Establish Identity, To provide the service that the user signed up for | Product Analytics, Provide Service to User | AWS Redshift DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) Datadog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Direct messages and group chats on app | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Directly from an Individual User, Online Registration, Data Upload, Surveys | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | SendGrid (Twilio) Zendesk, MongoDB Atlas (previously known as mLab and MongoDB) SurveyMonkey AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Zendesk in the U.S.; SurveyMonkey in the U.S.; in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest | |
| Feedback page posts (including text, links, images) | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Forum posts (including text, links, images) | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Grade Level | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Grade Level | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| In-app communications (messaging or other) | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | Blueshift AWS Redshift DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Inferences drawn about a consumer/user | Product Analytics and engineering, Online Registration, Product Feature, Tracking Technologies (Cookies, Pixels, etc.) | To provide the service that the user signed up for | Product Improvement | Blueshift AWS Redshift DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) Datadog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| IP Address | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Direct Marketing, Enhance Personalization, Establish Identity, To provide the service that the user signed up for | Product Analytics, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Datadog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| IP Address logged in user | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Direct Marketing, Enhance Personalization, Establish Identity, New Product Development | New Product Development, Marketing, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Job Title Role | Directly from an Individual User, Online Registration, Data Upload | Direct Marketing, Enhance Personalization, Historical Research, Establish Identity, To provide the service that the user signed up for, New Product Development | New Product Development, Product Analytics, Marketing, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Languages Spoken | Directly from an Individual User, Product Feature, Tracking Technologies (Cookies, Pixels, etc.) | Enhance Personalization, Historical Research, To provide the service that the user signed up for | Product Analytics, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Local (school district) ID number | Vendor/Third Party, Data Upload | Historical Research, Establish Identity, To provide the service that the user signed up for, New Product Development | Provide Service to User | AWS Redshift, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Name (first) | Directly from an Individual User, Online Registration, Data Upload | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Name (full) | Directly from an Individual User, Online Registration, Data Upload, Surveys | Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | Zendesk, MongoDB Atlas (previously known as mLab and MongoDB) SurveyMonkey AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | Data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Zendesk in the U.S.; SurveyMonkey in the U.S.; in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Name (last) | Directly from an Individual User, Online Registration, Data Upload | Direct Marketing, Establish Identity, To provide the service that the user signed up for | New Product Development, Marketing | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Non-student generated content (writing, homework, etc.) | Directly from an Individual User, Online Registration, Data Upload | To provide the service that the user signed up for | Provide Service to User | AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Office Location | Directly from an Individual User, Online Registration | To provide the service that the user signed up for | Provide Service to User | AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Other Data on User Interaction with Application or Site | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Product Improvement | AWS DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) Datadog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Phone Numbers | Yes, Contract, Legitimate Interest | Not Required | Marketing | Zendesk, MongoDB, Atlas (previously known as mLab and MongoDB) SurveyMonkey, Twilio, AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | Data stored on AWS servers in the U.S. and MLab in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Zendesk in the U.S.; SurveyMonkey in the U.S.; in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Photographs | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Precise Geolocation data | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Direct Marketing, Enhance Personalization, Historical Research, Establish Identity, To provide the service that the user signed up for, New Product Development | Provide Service to User | AWS Redshift DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Precise Geolocation data | Directly from an Individual User, Online Registration, Tracking Technologies (Cookies, Pixels, etc.) | Establish Identity, To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | Algolia and AWS (Elastic search) in the U.S.; back-ups are in the same locations; in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until account deletion | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Professional or employment-related information | Directly from an Individual User, Online Registration | Enhance Personalization, Historical Research, To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Datadog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Professional or employment-related information | Directly from an Individual User, Online Registration | Enhance Personalization, Historical Research, To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Datadog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Referring URLs | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Direct Marketing, Historical Research | Product Analytics, Marketing | MatomoMongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| School Address | Directly from an Individual User, Online Registration, Data Upload | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained at the Direction of the School | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| School Name | Directly from an Individual User, Online Registration | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| School name | Directly from an Individual User, Online Registration, Data Upload | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Server Log Information | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Debugging & Security, New Product Development | Provide Service to User | AWS Redshift DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Student scheduled courses | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Student work (student generated content, writing, etc.) | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Teacher Email | Directly from an Individual User, Online Registration | Establish Identity, To provide the service that the user signed up for | New Product Development, Provide Service to User | Zendesk, MongoDB, Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Zendesk in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Time spent on site (logged in user) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Enhance Personalization, Historical Research, New Product Development | Product Analytics | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Unique device IDs (e.g. Android ID, UDID, etc.) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Establish Identity, To provide the service that the user signed up for, New Product Development | Product Improvement, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| User Support Tickets | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Product Improvement, Provide Service to User | Zendesk, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | Data stored on AWS servers in the U.S. and MLab in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Zendesk in the U.S.; in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Vendor/App assigned ID number (non-student) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | To provide the service that the user signed up for | Product Improvement, Product Analytics | AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Videos | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Data Element | How is data collected and who is the source? | How this information is used | The purpose for ClassDojo collecting this information | Is Data shared or accessed by a service provider? (or processor) | Where is this Data element stored or accessed by each third party/service provider that it is shared with or made available to? | Retention schedule | Any other non-service provider third parties with access | Technical and Security Measures | Is Data transferred Outside of the EEA/UK and What are the transfer Mechansim (or Safeguards)? | What is the Article 6 lawful basis for processing this personal Data under GDPR |
|---|---|---|---|---|---|---|---|---|---|---|
| Account Age | Directly from an Individual User, Product Feature | Establish Identity, To provide the service that the user signed up for | New Product Development, Provide Service to User | Zendesk, MongoDB, Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); in the US please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Account ID | Directly from an Individual User, Product Feature | Establish Identity, To provide the service that the user signed up for | New Product Development, Provide Service to User | Zendesk, MongoDB, Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); in the US please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Active/engagement time (logged in user) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | New Product Development | Product Analytics | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Browser type (logged in user) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Enhance Personalization | Product Analytics | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Browser type (non-logged in user) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | New Product Development | New Product Development | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Click paths | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Historical Research, New Product Development | New Product Development | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Contact Details | Directly from an Individual User, Online Registration | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Cookie Information | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Enhance Personalization, Establish Identity, New Product Development | New Product Development | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Device specific information (i.e. operating system, hardware version, device settings, etc.) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | New Product Development | New Product Development | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Direct messages and group chats on app | Directly from an Individual User, Data Upload, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Directly from an Individual User, Online Registration, Surveys | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | SendGrid (Twilio) Zendesk, MongoDB Atlas (previously known as mLab and MongoDB) SurveyMonkey AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Zendesk in the U.S.; SurveyMonkey in the U.S.; in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest | |
| Forum posts (including text, links, images) | Directly from an Individual User, Data Upload, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| In-app communications (messaging or other) | Directly from an Individual User, Data Upload, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| In-app Purchase Data | Directly from an Individual User, Product Feature, Tracking Technologies (Cookies, Pixels, etc.) | To provide the service that the user signed up for, New Product Development | New Product Development, Provide Service to User | Blueshift AWS Redshift DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Inferences drawn about a consumer/user | Product Analytics and engineering, Product Feature, Tracking Technologies (Cookies, Pixels, etc.) | New Product Development | Product Improvement | Blueshift AWS Redshift DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| IP Address | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Enhance Personalization, Establish Identity, To provide the service that the user signed up for, New Product Development | Product Analytics, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| IP Address logged in user | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | New Product Development | New Product Development | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Name (first) | Directly from an Individual User, Online Registration | Enhance Personalization, To provide the service that the user signed up for | Product Analytics, Provide Service to User | AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Name (full) | Directly from an Individual User, Online Registration | Enhance Personalization, To provide the service that the user signed up for | Product Analytics, Provide Service to User | Zendesk, MongoDB Atlas (previously known as mLab and MongoDB) SurveyMonkey AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | Data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Zendesk in the U.S.; SurveyMonkey in the U.S.; in the U.S please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Name (last) | Directly from an Individual User, Online Registration | Enhance Personalization, To provide the service that the user signed up for | Product Analytics, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and Mongo Lab in the U.S.; back-ups are in the same locations (AWS/Mongo Lab in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Non-student generated content (writing, homework, etc.) | Directly from an Individual User, Data Upload | To provide the service that the user signed up for | Provide Service to User | AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); in the US please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Online Communications captured email | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | Zendesk, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Other Data on User Interaction with Application or Site | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | To provide the service that the user signed up for | Product Improvement, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB) Google Cloud (Google Translate and Google API for Maps) AWS DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Page views | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Historical Research, New Product Development | New Product Development | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Parent Class Affiliation | Directly from an Individual User, Online Registration | Establish Identity, To provide the service that the user signed up for | New Product Development, Provide Service to User | Zendesk, MongoDB, Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Zendesk in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Parent School Afffiliation | Directly from an Individual User, Online Registration | Establish Identity, To provide the service that the user signed up for | New Product Development, Provide Service to User | Zendesk, MongoDB, Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Zendesk in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Phone Numbers | Directly from an Individual User, Online Registration, Surveys | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | Zendesk, MongoDB, Atlas (previously known as mLab and MongoDB) SurveyMonkey, Twilio, AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | Data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Zendesk in the U.S.; SurveyMonkey in the U.S.; in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Photographs | Directly from an Individual User, Data Upload, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); in the US please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Precise Geolocation data | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Enhance Personalization, Establish Identity, To provide the service that the user signed up for, New Product Development | Provide Service to User | SendGrid (Twilio) AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Referring URLs | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Direct Marketing, Historical Research, New Product Development | New Product Development, Marketing | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Server Log Information | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Debugging & Security, New Product Development | New Product Development | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Time spent on site (logged in user) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Enhance Personalization, Historical Research, New Product Development | New Product Development, Product Analytics | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Unique device IDs (e.g. Android ID, UDID, etc.) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Establish Identity, To provide the service that the user signed up for, New Product Development | New Product Development, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| User Support Tickets | Directly from an Individual User, Data Upload | To provide the service that the user signed up for | Provide Service to User | Zendesk, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | Zendesk in the U.S.; in the U.S please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Videos | Directly from an Individual User, Data Upload, Product Feature | To provide the service that the user signed up for | Provide Service to User | AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); in the US please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Data Element | How is data collected and who is the source? | How this information is used | The purpose for ClassDojo collecting this information | Is Data shared or accessed by a service provider? (or processor) | Where is this Data element stored or accessed by each third party/service provider that it is shared with or made available to? | Retention schedule | Any other non-service provider third parties with access | Technical and Security Measures | Is Data transferred Outside of the EEA/UK and What are the transfer Mechansim (or Safeguards)? | What is the Article 6 lawful basis for processing this personal Data under GDPR |
|---|---|---|---|---|---|---|---|---|---|---|
| Account ID | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Establish Identity, To provide the service that the user signed up for | New Product Development, Provide Service to User | Zendesk, MongoDB, Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Active/engagement time (logged in user) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Historical Research, New Product Development | New Product Development | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Browser type (logged in user) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Enhance Personalization, New Product Development | Product Analytics, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Click paths | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Historical Research, New Product Development | New Product Development | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Cookie Information | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Establish Identity, New Product Development | New Product Development | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Device specific information (i.e. operating system, hardware version, device settings, etc.) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | New Product Development | New Product Development | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Feedback Points | Directly from individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Deleted on a 12 month rolling basis OR anonymized and aggregated | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Grade Level | Directly from an Individual User, Product Feature | To provide the service that the user signed up for, New Product Development | New Product Development, Provide Service to User | Zendesk, MongoDB Atlas (previously known as mLab and MongoDB), SurveyMonkey AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| In-app communications (messaging or other) | Directly from an Individual User, Data Upload | To provide the service that the user signed up for | New Product Development | Blueshift AWS Redshift DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| IP Address | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Enhance Personalization, Establish Identity, To provide the service that the user signed up for | Product Analytics, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| IP Address logged in user | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | New Product Development | New Product Development | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Languages Spoken | Directly from an Individual User, Product Feature, Tracking Technologies (Cookies, Pixels, etc.) | Enhance Personalization, Historical Research, To provide the service that the user signed up for | Product Analytics, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Name (first) | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | , please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Name (full) | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | Zendesk, MongoDB Atlas (previously known as mLab and MongoDB) SurveyMonkey AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Name (last) | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Photographs | Directly from an Individual User, Data Upload, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Precise Geolocation data | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | New Product Development | New Product Development | SendGrid (Twilio) AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Referring URLs | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Direct Marketing, Historical Research | Marketing | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| School name | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Server Log Information | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Debugging & Security, New Product Development | New Product Development | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Student app username | Directly from an Individual User, Online Registration | Establish Identity, To provide the service that the user signed up for | Provide Service to User | Zendesk, MongoDB, Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.);Zendesk in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Student Email Address | Directly from an Individual User, Online registration | Used in the product to let teachers identify children who have inadvertently connected to the incorrect school-roster student account. | Provide Service to User | Zendesk, MongoDB Atlas (previously known as mLab and MongoDB), SurveyMonkey AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | Data stored on AWS servers in the U.S; back-ups are in the same locations. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Student work (student generated content, writing, etc.) | Directly from an Individual User, Data Upload | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Time spent on site (logged in user) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Enhance Personalization, Historical Research | Product Analytics | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Unique device IDs (e.g. Android ID, UDID, etc.) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Establish Identity, To provide the service that the user signed up for, New Product Development | Product Improvement, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Videos | Directly from an Individual User, Data Upload, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Audio files | Directly from an Individual User, Data Upload | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Bullying and harassment details (student) | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Conduct or behavior data (student) | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Grade Level | Directly from an Individual User, Online Registration | To provide the service that the user signed up for | Provide Service to User | Zendesk, MongoDB Atlas (previously known as mLab and MongoDB), SurveyMonkey AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Grade Level | Directly from an Individual User, Online Registration | To provide the service that the user signed up for | Provide Service to User | Zendesk, MongoDB Atlas (previously known as mLab and MongoDB), SurveyMonkey AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Name (first) | Directly from an Individual User, Online Registration, Data Upload, Product Feature | Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | , please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Name (full) | Directly from an Individual User, Online Registration, Surveys | Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | Zendesk, MongoDB Atlas (previously known as mLab and MongoDB) SurveyMonkey AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | Data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Zendesk in the U.S.; SurveyMonkey in the U.S.; in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Name (last) | Directly from an Individual User, Online Registration, Data Upload, Product Feature | Establish Identity, To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Observation data | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | AWS , please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Parent/Guardian Phone Number (collected from child) | Directly from an Individual User, Data Upload | To provide the service that the user signed up for | Provide Service to User | Zendesk, MongoDB, Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Photographs | Directly from an Individual User, Data Upload | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| School name | Directly from an Individual User, Online Registration | Direct Marketing, To provide the service that the user signed up for, New Product Development | New Product Development, Marketing, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Student class attendance data | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Student work (student generated content, writing, etc.) | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Videos | Directly from an Individual User, Data Upload | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Videos | Directly from an Individual User, Data Upload | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | User Inactive for 1 year or upon school deletion request. Only certain data is deleted until school requested. If no request made, 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Data Element | How is data collected and who is the source? | How this information is used | The purpose for ClassDojo collecting this information | Is Data shared or accessed by a service provider? (or processor) | Where is this Data element stored or accessed by each third party/service provider that it is shared with or made available to? | Retention schedule | Any other non-service provider third parties with access | Technical and Security Measures | Is Data transferred Outside of the EEA/UK and What are the transfer Mechansim (or Safeguards)? | What is the Article 6 lawful basis for processing this personal Data under GDPR |
|---|---|---|---|---|---|---|---|---|---|---|
| Active/engagement time (logged in user) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Historical Research, New Product Development | New Product Development | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Audio files | Directly from an Individual User, Data Upload, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Browser type (logged in user) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Enhance Personalization, Historical Research, New Product Development | New Product Development, Product Analytics | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Business name | Vendor/Third Party, Directly from an Individual User, Online Registration, Data Upload | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Click paths | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Historical Research, New Product Development | Product Analytics, Marketing | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Contact Details | Vendor/Third Party, Directly from an Individual User, Online Registration | Direct Marketing, Enhance Personalization, Establish Identity | Product Analytics, Marketing | AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Cookie Information | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Historical Research, Establish Identity, New Product Development | New Product Development | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Direct messages and group chats on app | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Vendor/Third Party, Directly from an Individual User, Online Registration, Data Upload, Surveys | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | SendGrid (Twilio) Zendesk, MongoDB Atlas (previously known as mLab and MongoDB) SurveyMonkey AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Zendesk in the U.S.; SurveyMonkey in the U.S.; in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest | |
| Feedback page posts (including text, links, images) | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Forum posts (including text, links, images) | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| In-app communications (messaging or other) | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | Blueshift AWS Redshift DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| IP Address | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Direct Marketing, Enhance Personalization, Establish Identity, To provide the service that the user signed up for | Product Analytics, Marketing, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| IP Address logged in user | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Direct Marketing, Enhance Personalization, Establish Identity, New Product Development | New Product Development | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Job Title Role | Vendor/Third Party, Directly from an Individual User, Online Registration | Direct Marketing, Enhance Personalization, Historical Research, Establish Identity, To provide the service that the user signed up for, New Product Development | New Product Development, Product Analytics, Marketing, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Languages Spoken | Directly from an Individual User, Product Feature, Tracking Technologies (Cookies, Pixels, etc.) | Enhance Personalization, Historical Research, To provide the service that the user signed up for | Product Analytics, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Local (school district) ID number | Vendor/Third Party, Data Upload | Historical Research, Establish Identity, To provide the service that the user signed up for, New Product Development | New Product Development, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Name (first) | Vendor/Third Party, Directly from an Individual User, Online Registration, Data Upload | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | , please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Name (full) | Vendor/Third Party, Directly from an Individual User, Online Registration, Data Upload, Surveys | Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | Zendesk, MongoDB Atlas (previously known as mLab and MongoDB) SurveyMonkey AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | Data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Zendesk in the U.S.; SurveyMonkey in the U.S.; in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Name (last) | Vendor/Third Party, Directly from an Individual User, Online Registration, Data Upload | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Page views | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Historical Research, New Product Development | New Product Development | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Phone Numbers | Vendor/Third Party, Directly from an Individual User, Online Registration, Surveys | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | Zendesk, MongoDB, Atlas (previously known as mLab and MongoDB) SurveyMonkey, Twilio, AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Photographs | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Precise Geolocation data | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Direct Marketing, Enhance Personalization, Historical Research, Establish Identity, To provide the service that the user signed up for, New Product Development | New Product Development, Product Analytics, Marketing, Provide Service to User | SendGrid (Twilio) AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Precise Geolocation data | Directly from an Individual User, Online Registration, Tracking Technologies (Cookies, Pixels, etc.) | Establish Identity, To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | Algolia and AWS (Elastic search) in the U.S.; back-ups are in the same locations; in the U.S> please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until account deletion | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Professional or employment-related information | Vendor/Third Party, Directly from an Individual User, Online Registration | Direct Marketing, Enhance Personalization, Historical Research, To provide the service that the user signed up for, New Product Development | New Product Development, Product Analytics, Marketing, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Referring URLs | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Direct Marketing, Historical Research | Marketing | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| School Address | Vendor/Third Party, Directly from an Individual User, Online Registration, Data Upload | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained at the Direction of the School | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| School Name | Vendor/Third Party, Directly from an Individual User, Online Registration | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| School name | Vendor/Third Party, Directly from an Individual User, Online Registration, Data Upload | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Server Log Information | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Debugging & Security, New Product Development | New Product Development | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Time spent on site (logged in user) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Enhance Personalization, Historical Research, New Product Development | New Product Development, Product Analytics | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Unique device IDs (e.g. Android ID, UDID, etc.) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Establish Identity, To provide the service that the user signed up for, New Product Development | New Product Development, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Videos | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Data Element | How is data collected and who is the source? | The source of the personal Data | How this information is used | The purpose for ClassDojo collecting this information | Is Data shared or accessed by a service provider? (or processor) | Where is this Data element stored or accessed by each third party/service provider that it is shared with or made available to? | Retention schedule | Any other non-service provider third parties with access | Technical and Security Measures | Is Data transferred Outside of the EEA/UK and What are the transfer Mechansim (or Safeguards)? | What is the Article 6 lawful basis for processing this personal Data under GDPR |
|---|---|---|---|---|---|---|---|---|---|---|---|
| phone number | User enters phone number on our website or within the app to invite another teacher; non-logged-in users can optionally submit via a support request and/or survey | Directly from individual user | To send an SMS message to invite a (potentially) non-logged in user to ClassDojo; if for support or a survey, to let a ClassDojo team member contact the individual | To send an SMS to invite a user to join ClassDojo; if for support or a survey, to let a ClassDojo team member contact the individual | Zendesk, MongoDB, Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | Data stored on AWS servers in the U.S. and MongoDB Atlas in the U.S.; back-ups are in the same locations (AWS/MongoDB Atlas in the U.S.); Zendesk in the U.S.; SurveyMonkey in the U.S. | Retained until requested by user | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | legitimate interest and performance of contract |
| local district ID number | Acquired via one of our service providers, MDR Education | Automatically Collected Data or Device Data and/or metadata | To improve the quality of our school database, and to help teachers better improve their own School Directory | To improve the quality of the names and addresses of U.S. schools, and a variety of school-level features, like school start and end dates to improve teacher usability and School Directory management | Zendesk, MongoDB, Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | Data stored on AWS servers in the U.S. and MongoDB Atlas in the U.S.; back-ups are in the same locations (AWS/MongoDB Atlas in the U.S.); Zendesk in the U.S.; SurveyMonkey in the U.S. | Retained until requested by user | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | legitimate interest and performance of contract |
| ip address | Automatically Collected Data or Device Data and/or metadata | Automatically Collected Data or Device Data and/or metadata | Responses will differ based on the client used so that client features will only be enabled when supported. Trends in browser type will inform which browsers ClassDojo will support in new software releases | To improve our product knowledge and for improving marketing emails and notifications delivery | Zendesk, MongoDB, Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | Data stored on AWS servers in the U.S. and MongoDB Atlas in the U.S.; back-ups are in the same locations (AWS/MongoDB Atlas in the U.S.); Zendesk in the U.S.; SurveyMonkey in the U.S. | Retained until requested by user | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | legitimate interest and performance of contract |
| Browsing Information (clicks, pageviews, referring URLs, activity, engagement time) | Automatically Collected Data or Device Data and/or metadata | Automatically Collected Data or Device Data and/or metadata | To improve our product knowledge about how people use our products, and to better deliver marketing emails to users based on their actual usage | To improve our product knowledge and for improving marketing emails and notifications delivery | Zendesk, MongoDB, Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | Data stored on AWS servers in the U.S. and MongoDB Atlas in the U.S.; back-ups are in the same locations (AWS/MongoDB Atlas in the U.S.); Zendesk in the U.S.; SurveyMonkey in the U.S. | Retained until requested by user | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | legitimate interest and performance of contract |
| Payment and Order Information | Directly from an Individual User via shop.classdojo.com (Shopify) | Directly from Individual User | To fulfill purchases and manage orders | Provide e-commerce services and deliver physical products | Shopify, Stripe & AWS | Shopify and Stripe (U.S. and EU data centers), AWS (U.S.) | Retained for legal, tax, or transactional needs until requested by user | n/a | TLS encryption, PCI-DSS compliance AES-256 at rest | Yes, to the US - ClassDojo and its partners comply with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”) | Legitimate Interest and Performance of Contract |
| Data Element | How is data collected and who is the source? | How this information is used | The purpose for ClassDojo collecting this information | Is Data shared or accessed by a service provider? (or processor) | Where is this Data element stored or accessed by each third party/service provider that it is shared with or made available to? | Retention schedule | Any other non-service provider third parties with access | Technical and Security Measures | Is Data transferred Outside of the EEA/UK and What are the transfer Mechansim (or Safeguards)? | What is the Article 6 lawful basis for processing this personal Data under GDPR |
|---|---|---|---|---|---|---|---|---|---|---|
| Active/engagement time (logged in user) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Historical Research, New Product Development | New Product Development | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Audio files | Directly from an Individual User, Data Upload, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Browser type (logged in user) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Enhance Personalization, Historical Research, New Product Development | New Product Development, Product Analytics | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Business name | Vendor/Third Party, Directly from an Individual User, Online Registration, Data Upload | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Click paths | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Historical Research, New Product Development | Product Analytics, Marketing | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs ”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Contact Details | Vendor/Third Party, Directly from an Individual User, Online Registration | Direct Marketing, Enhance Personalization, Establish Identity | Product Analytics, Marketing | AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Cookie Information | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Historical Research, Establish Identity, New Product Development | New Product Development | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Direct messages and group chats on app | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Vendor/Third Party, Directly from an Individual User, Online Registration, Data Upload, Surveys | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | SendGrid (Twilio) Zendesk, MongoDB Atlas (previously known as mLab and MongoDB) SurveyMonkey AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Zendesk in the U.S.; SurveyMonkey in the U.S.; in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest | |
| Feedback page posts (including text, links, images) | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Forum posts (including text, links, images) | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| In-app communications (messaging or other) | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | Blueshift AWS Redshift DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| IP Address | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Direct Marketing, Enhance Personalization, Establish Identity, To provide the service that the user signed up for | Product Analytics, Marketing, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| IP Address logged in user | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Direct Marketing, Enhance Personalization, Establish Identity, New Product Development | New Product Development | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Job Title Role | Vendor/Third Party, Directly from an Individual User, Online Registration | Direct Marketing, Enhance Personalization, Historical Research, Establish Identity, To provide the service that the user signed up for, New Product Development | New Product Development, Product Analytics, Marketing, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Languages Spoken | Directly from an Individual User, Product Feature, Tracking Technologies (Cookies, Pixels, etc.) | Enhance Personalization, Historical Research, To provide the service that the user signed up for | Product Analytics, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Local (school district) ID number | Vendor/Third Party, Data Upload | Historical Research, Establish Identity, To provide the service that the user signed up for, New Product Development | New Product Development, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Name (first) | Vendor/Third Party, Directly from an Individual User, Online Registration, Data Upload | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | , please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Name (full) | Vendor/Third Party, Directly from an Individual User, Online Registration, Data Upload, Surveys | Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | Zendesk, MongoDB Atlas (previously known as mLab and MongoDB) SurveyMonkey AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | Data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); Zendesk in the U.S.; SurveyMonkey in the U.S.; in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Name (last) | Vendor/Third Party, Directly from an Individual User, Online Registration, Data Upload | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until deletion is requested. | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | Contract, Legitimate Interest |
| Page views | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Historical Research, New Product Development | New Product Development | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Phone Numbers | Vendor/Third Party, Directly from an Individual User, Online Registration, Surveys | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | Zendesk, MongoDB, Atlas (previously known as mLab and MongoDB) SurveyMonkey, Twilio, AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Photographs | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Precise Geolocation data | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Direct Marketing, Enhance Personalization, Historical Research, Establish Identity, To provide the service that the user signed up for, New Product Development | New Product Development, Product Analytics, Marketing, Provide Service to User | SendGrid (Twilio) AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Precise Geolocation data | Directly from an Individual User, Online Registration, Tracking Technologies (Cookies, Pixels, etc.) | Establish Identity, To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | Algolia and AWS (Elastic search) in the U.S.; back-ups are in the same locations; in the U.S> please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained until account deletion | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Professional or employment-related information | Vendor/Third Party, Directly from an Individual User, Online Registration | Direct Marketing, Enhance Personalization, Historical Research, To provide the service that the user signed up for, New Product Development | New Product Development, Product Analytics, Marketing, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Referring URLs | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Direct Marketing, Historical Research | Marketing | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| School Address | Vendor/Third Party, Directly from an Individual User, Online Registration, Data Upload | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | Retained at the Direction of the School | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| School Name | Vendor/Third Party, Directly from an Individual User, Online Registration | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| School name | Vendor/Third Party, Directly from an Individual User, Online Registration, Data Upload | Direct Marketing, Establish Identity, To provide the service that the user signed up for | Marketing, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Server Log Information | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Debugging & Security, New Product Development | New Product Development | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Time spent on site (logged in user) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Enhance Personalization, Historical Research, New Product Development | New Product Development, Product Analytics | MongoDB Atlas (previously known as mLab and MongoDB), AWS and DataDog, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.); also DataDog in the U.S. please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Unique device IDs (e.g. Android ID, UDID, etc.) | Directly from an Individual User, Tracking Technologies (Cookies, Pixels, etc.) | Establish Identity, To provide the service that the user signed up for, New Product Development | New Product Development, Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |
| Videos | Directly from an Individual User, Product Feature | To provide the service that the user signed up for | Provide Service to User | MongoDB Atlas (previously known as mLab and MongoDB), AWS, please find more information about our service providers here:https://www.classdojo.com/third-party-service-providers/ | data stored on AWS servers in the U.S. and MongoDB in the U.S.; back-ups are in the same locations (AWS/MongoDB in the U.S.) please find additional information on our service providers on:https://www.classdojo.com/third-party-service-providers/ | (1) At any time at the instruction of the school; (2) 60 days after termination (unless otherwise stated in DPA or required by law); if (1) or (2) never occur, then 12th grade plus 2 years | n/a | Encryption (In Transit), Encryption (In Storage) Encryption type: TLS 1.2; AES 256 | Yes, to the US - ClassDojo complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce (collectively the “DPF Programs”). | ClassDojo acts as a processor for personal data collected in connection with school use and thus does not make this determination; Article 6 legal basis determination is the responsibility of the controller (the school) |