Every district procurement team asks the same questions. This page is your single source of truth — data practices, parent rights, DPA, security posture, and subprocessors. Nothing to hide. Everything documented.
We collect the minimum necessary to run a classroom. No PII beyond classroom-assigned identifiers. No behavioral advertising. No third-party data sharing.
All student and teacher data is stored in US-based infrastructure (Neon PostgreSQL on AWS US-East, application hosting on Render US). No data is transferred outside the United States.
Parents and guardians have the right to access, correct, and delete their child's data. We respond to all requests within 45 days.
Parents can request a complete copy of all data we hold on their child, including mission progress, XP, badges, and assessment results.
If any data is inaccurate, parents can request correction. We will update or annotate the record within 45 days of a verified request.
Parents can request full deletion of their child's account and all associated data. We will delete within 30 days and confirm in writing.
CyberHeroesHQ operates as a school official under the FERPA school official exception (34 C.F.R. § 99.31(a)(1)). The school or district remains the data controller.
All student accounts are created and managed by teachers through the Teacher Portal. Students never create accounts independently — they join via classroom code (CYBER-XXXX format) issued by their teacher.
The school or district controls which students are enrolled, which classrooms exist, and when accounts are terminated. CyberHeroesHQ processes data only as directed — we are the processor, you are the controller.
For students under 13, schools act in loco parentis under the COPPA school authorization mechanism (16 C.F.R. § 312.5(b)(1)). By enrolling students under 13, the school represents it has authority to provide consent for educational platform use.
Schools are responsible for removing students who should no longer have access — e.g., transfers, withdrawals. Account deletion requests should be submitted to privacy@cyberheroeshq.com or via the Teacher Portal.
We use a small, vetted set of subprocessors. We will notify schools of any material changes to this list at least 30 days in advance.
| Vendor | Purpose | Data shared | Region |
|---|---|---|---|
| Neon | PostgreSQL database hosting | All platform data (encrypted at rest) | 🇺🇸 US-East (AWS) |
| Render | Application hosting & deployment | Application code; request logs (IP, timestamp) — no student PII in logs | 🇺🇸 US |
| Postmark | Transactional email (teacher & parent notifications) | Teacher email address, parent email address (if provided), student hero username in notification subject lines | 🇺🇸 US |
| Stripe | Payment processing (Family & District subscriptions) | Billing email, payment card data (held by Stripe — never stored by us). No student data is shared with Stripe. | 🇺🇸 US |
| Anthropic (Claude) | Cipher AI mentor — in-mission hints, streaming chat, post-mission debriefs, and AI-generated remediation challenges | Session-scoped, anonymized input only: current mission context + student message. No PII forwarded. No real name, no email, no student ID transmitted to Anthropic. Conversation history stored in our own DB with 7-day TTL; not shared externally. Anthropic does not train on or store this data under our data processing terms. Per-student rate limit (20 messages/hour) and jailbreak filter enforced before any AI call. | 🇺🇸 US |
Both documents are current as of the date you download them. For a countersigned DPA, email trust@cyberheroeshq.com.
FERPA school official exception framing, COPPA authorization mechanism, data categories, retention schedule, deletion workflow, security commitments, and subprocessor list. Suitable for district legal review.
⬇ Download DPA (PDF)Auth model, encryption in transit & at rest, data residency, access controls, incident response procedure, backup & recovery objectives. For district IT and CISO review.
⬇ Download Security Overview (PDF)Answered directly, without weasel words.
For districts with additional procurement requirements, we'll send a complete trust package — including a countersigned DPA, reference contacts, compliance crosswalk, and custom security questionnaire responses.