Data Processing Agreement

For Schools and Districts using ConnectInk

This Data Processing Agreement ("DPA") is entered into between ConnectInk ("Processor") and the school or district ("Controller") that has authorized student access to the ConnectInk platform.

1. Scope and Purpose

ConnectInk processes student data solely to provide the educational writing feedback service described in our Privacy Notice. No processing occurs outside this defined purpose.

2. Data Protection Obligations

ConnectInk agrees to:

• Process student data only on documented instructions from the school.
• Ensure authorized personnel are bound by confidentiality.
• Implement appropriate technical and organizational security measures.
• Not engage additional sub-processors without school notification.
• Assist the school with data subject rights requests (access, correction, deletion).
• Delete or return all student data upon termination of service.
• Provide all information necessary to demonstrate compliance with NYS Ed Law 2-d and FERPA.

3. Sub-Processors

Current sub-processors: Clerk (authentication), Convex (database), and Anthropic (Claude AI inference, does not retain or train on API data). ConnectInk will notify schools 30 days before adding new sub-processors.

4. Security Incidents

ConnectInk will notify the school within 5 business days of becoming aware of a security incident involving student data.

5. Governing Law

This DPA is governed by the laws of the State of New York, consistent with NYS Education Law Section 2-d.

6. Contact

For DPA inquiries: rahul@innovateinsightfully.com