Data Processing Terms

These Data Processing Terms ("Data Terms") supplement the Vicki's Cubbies Terms of Service when Parsa Community Education LLC processes personal information contained in Customer Data on behalf of a childcare-center customer.

1. Roles and instructions

Customer determines what Customer Data is submitted and the business purposes for which it is used. To the extent applicable privacy law distinguishes between a controller/business and a processor/service provider, Customer acts as the controller or business and Vicki's Cubbies acts as a processor or service provider for Customer Data processed to provide the service.

We will process Customer Data only to provide, secure, maintain, and support the service; comply with Customer's documented instructions consistent with the service; or comply with applicable law.

2. Processing details

Subject matter: childcare enrollment, capacity, and classroom-transition planning.

Duration: for the term of Customer's use of the service and a reasonable period afterward for deletion, backup rotation, and legal retention.

Data subjects: Customer personnel and children whose enrollment-planning information Customer submits.

Typical data: business contact information; child name or internal identifier; date of birth or age; classroom; schedule; enrollment start/end information; and planned transitions. Customers should not submit medical, biometric, financial-account, government-ID, or other sensitive data unless a supported feature expressly requires it.

3. Confidentiality and access

We will limit access to Customer Data to personnel and service providers who need access to perform their duties and who are subject to appropriate confidentiality obligations.

4. Security

We will maintain reasonable administrative and technical safeguards appropriate to the nature of the Customer Data and the risks of processing. Customer is responsible for managing its users, credentials, source data, and internal access permissions.

5. Subprocessors

Customer authorizes us to use subprocessors reasonably necessary to provide the service, including infrastructure, database/authentication, payment, email, monitoring, and support providers. We remain responsible for requiring subprocessors that process Customer Data on our behalf to protect that data consistent with their role.

Current core providers may include Supabase for application infrastructure/database/authentication and Stripe for subscription payment processing. Additional providers may be added as the service develops.

6. Sale, sharing, and advertising

We will not sell Customer Data. We will not use child information submitted by Customer for cross-context behavioral advertising or targeted advertising. We will not retain, use, or disclose Customer Data outside the business purposes of providing and supporting the service except as permitted by law or Customer's instructions.

7. Security incidents

If we confirm unauthorized access to Customer Data that requires notice to Customer under applicable law or our contractual obligations, we will notify Customer without undue delay and provide information reasonably available to us regarding the nature of the incident and responsive steps.

8. Requests and assistance

Taking into account the nature of the service, we will provide reasonable assistance to Customer with requests relating to Customer Data that Customer cannot reasonably fulfill itself, including access or deletion requests where applicable.

9. Return and deletion

Upon termination, Customer may request deletion of Customer Data. We may retain limited information where required by law, for legitimate security or billing records, or temporarily in backups until they are overwritten in the ordinary course.

10. Compliance information

Upon reasonable request, we will provide information reasonably necessary for Customer to understand our processing of Customer Data. Any audit request must be proportionate, protect other customers' confidentiality, avoid unreasonable disruption, and first use available documentation where practical.

11. Priority

If these Data Terms conflict with the general Terms of Service solely regarding processing of Customer Data, these Data Terms control for that issue.

12. Contact

Questions about these Data Terms may be sent to support@vickiscubbies.com.