Data Processing Agreement (DPA)

InsightEd Analytics LLC Last Updated: 3/11/2026

This Data Processing Agreement (“Agreement”) forms part of any contract or service engagement between InsightEd Analytics LLC (“Processor”) and the client (“Controller”).

1. Purpose

The Processor will handle personal information solely for the purpose of providing analytics, dashboards, reporting, application development, and related services.

2. Roles and Definitions

  • Controller — The entity that determines the purpose and means of processing personal information.

  • Processor — InsightEd Analytics LLC, which processes data on behalf of the Controller.

  • Personal Information — Any information relating to an identified or identifiable individual.

  • Student Data — Any information protected under FERPA.

3. Processor Obligations

InsightEd Analytics LLC agrees to:

  • Process personal information only on documented instructions from the Controller.

  • Maintain confidentiality and restrict access to authorized personnel.

  • Implement administrative, technical, and physical safeguards to protect data.

  • Notify the Controller of any data breach without undue delay.

  • Assist the Controller in fulfilling obligations under CCPA/CPRA and FERPA.

  • Delete or return personal information upon request or contract termination.

4. FERPA‑Specific Commitments

When processing student data, we act as a School Official and will:

  • Use student data only for educational purposes authorized by the institution.

  • Never use student data for marketing, advertising, or promotional content.

  • Never sell or share student data with third parties except as required to perform contracted services.

  • Delete or return student data at the direction of the educational institution.

5. Use of Data for Marketing (Business Clients Only)

For non‑educational business clients, the Controller grants permission for the Processor to use aggregated, de‑identified, or non‑sensitive business data to create:

  • Marketing content

  • Advertisements

  • Strategic insights

  • Case studies

  • Industry reports

No identifiable personal information will be used for these purposes unless explicitly authorized in writing.

6. Sub‑Processors

We may engage third‑party service providers (e.g., hosting, storage, security). All sub‑processors are bound by data protection obligations consistent with this Agreement.

7. Data Subject Rights

We will assist the Controller in responding to requests from individuals exercising their rights under CCPA/CPRA, including access, correction, deletion, and opt‑out rights.

8. Data Retention

We retain personal information only for the duration necessary to fulfill contractual obligations. Upon termination, data will be securely deleted or returned.

9. Governing Law

This Agreement is governed by the laws of the State of California.

10. Contact

InsightEd Analytics LLC

1036 W. Citrus St. Colton, CA 92324

InsightEdAnalytics@gmail.com