top of page

Data Processing Addendum

Please note that the Data Processing Addendum was last revised on Nov 29, 2025
 

This Data Processing Addendum (“DPA”) forms part of the agreement between SEL DEVELO, Inc. (“SEL DEVELO,” “we,” “us,” or “our”) and any School, district, or educational institution (“School”) that uses the Growth Lab™ platform or related services (collectively, the “Services”).
 

This DPA reflects SEL DEVELO’s commitments regarding the processing of Student Education Records and other personal information under applicable law, including the Family Educational Rights and Privacy Act (FERPA), the Children’s Online Privacy Protection Act (COPPA), and relevant state student data privacy laws.
 

By using the Services, the School agrees to the terms of this DPA.

1. Definitions

“Student Education Records”
Information directly related to a student and maintained by SEL DEVELO on behalf of the School, consistent with FERPA.

“Personal Information”
Any information that identifies or can reasonably be linked to an individual student, parent, or educator.

“School Official”
A School-authorized individual or entity performing an institutional service or function, consistent with FERPA’s School Official exception.

“Processing”
Any operation performed on data (e.g., collecting, storing, transmitting, analyzing, or deleting).

“Subprocessor”
A third-party vendor engaged by SEL DEVELO to support the Services, operating under written contractual obligations aligned with this DPA.

2. Scope of Processing

SEL DEVELO processes Student Education Records solely to provide, maintain, secure, and improve the Services on behalf of the School. We do not use Student Education Records for:

  • advertising

  • targeted or behavioral profiling

  • marketing

  • selling or monetizing data

  • training non-educational AI models

All processing is limited to the purposes authorized by the School.

3. Compliance with FERPA, COPPA, and State Laws

SEL DEVELO acts as a School Official with a legitimate educational interest under FERPA. We comply fully with:

  • FERPA

  • COPPA

  • state student privacy laws (e.g., SOPPA, CSDPA, NY Ed Law 2-d, etc.)

When children under 13 use the Services under School direction, COPPA consent is obtained from the School on behalf of parents.

4. School Responsibilities

The School is responsible for:

  • obtaining all necessary consents (including parental consent when required)

  • ensuring student information provided to SEL DEVELO is accurate

  • determining the appropriate access rights for staff and students

  • complying with its own legal obligations as the data controller

SEL DEVELO processes data only as instructed by the School.

5. SEL DEVELO Responsibilities

SEL DEVELO will:

  • process data only for authorized educational purposes

  • follow School instructions regarding data access, deletion, or correction

  • maintain industry-standard security and encryption

  • restrict access to authorized personnel with confidentiality obligations

  • notify the School of any breach or unauthorized disclosure

  • maintain a list of subprocessors used to support the Services

SEL DEVELO will not change processing purposes without School authorization.

6. Security Measures

SEL DEVELO maintains administrative, technical, and physical safeguards that meet or exceed FERPA and industry standards. These include:

Data Encryption

  • Encryption in transit (TLS 1.2+)

  • Encryption at rest (AES-256 or equivalent)

Access Controls

  • role-based access

  • multi-factor authentication for internal systems

  • least-privilege principles

Monitoring & Logging

  • audit logs for access, changes, and administrative operations

  • continuous monitoring for anomalous activity

Data Segmentation

  • logical separation of customer data

  • strict sandboxing of student-generated content

Full details are available in the Security & Data Protection page.

7. Subprocessors

SEL DEVELO may use trusted subprocessors to support hosting, security, analytics, AI scoring, and platform operations.

All subprocessors:

  • are bound by written agreements

  • follow strict confidentiality and security obligations

  • may not use data for their own purposes

A current list is maintained at: seldevelo.com/subprocessors

SEL DEVELO will notify Schools of material changes when required.

8. Data Access, Correction, and Deletion

At the School’s request, SEL DEVELO will:

  • provide access to Student Education Records

  • correct inaccurate information

  • delete records in accordance with School instructions

Requests may be submitted to: privacy@seldevelo.com

Deletion will occur within a reasonable timeframe consistent with School policy and legal requirements.

9. Data Retention

SEL DEVELO retains Student Education Records only for as long as the School account is active or as directed by the School.

 

Upon termination or written request:

  • data is deleted or returned to the School

  • backups are purged within their standard lifecycle

  • residual data in system logs is deleted on a rolling basis

SEL DEVELO does not retain Student Education Records after account termination except as required by law.

10. Data Breach Notification

In the event of unauthorized access, disclosure, or breach involving Student Education Records, SEL DEVELO will:

  1. Notify the School without unreasonable delay

  2. Provide known details of the incident

  3. Cooperate fully in investigation and remediation

  4. Follow applicable state and federal breach-notification requirements

SEL DEVELO will not notify students or families directly unless instructed by the School.

11. Prohibited Uses of Data

SEL DEVELO will not:

  • sell Student Education Records

  • use data for targeted advertising

  • build profiles unrelated to educational purposes

  • use data to train generalized commercial AI models

  • supplement student data with third-party marketing databases

All data use is limited to educational function.

12. AI-Assisted Scoring and Analysis

SEL DEVELO may use privacy-preserving AI tools (e.g., U.S. Data Zone models) solely to generate educational insights, such as:

  • reflection depth scoring

  • SEL growth indicators

  • learning progress analysis

AI systems:

  • operate under strict School Official roles

  • never use personal data to train commercial models

  • do not retain input after processing

  • apply differential privacy or de-identification where possible

Details are provided in the AI Decisions & Scoring Statement.

13. Data Transfer and Storage

All student data is stored and processed within the United States unless the School explicitly authorizes otherwise. We use U.S. regional hosting and U.S. Data Zone AI models for compliance.

14. Term, Termination & Post-Termination Obligations

This DPA remains in effect as long as SEL DEVELO processes data on behalf of the School.

Upon termination of the Services:

  • SEL DEVELO will delete or return all Student Education Records as instructed

  • School may request written confirmation of deletion

  • surviving confidentiality and security commitments remain in place

15. Contact Us

If you have questions about this DPA or student privacy, you may contact us at:

By email:

privacy@seldevelo.com


By mail:

SEL DEVELO, Inc.
Attn: Privacy Officer
1449 S Michigan Ave STE 13194
Chicago, IL 60605

United States of America

__________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

Last revised on Nov 29, 2025

Considering Growth Lab™ for your Students?

Help students build real-world skills, accountability, and social emotional intelligence —
while giving teachers back precious time.

Less stress.

Less work.

More results.

bottom of page