What if I'm not in the U.S.?
Classroom Hero is hosted and operated in the United States through our DigitalOcean infrastructure. If you use the Service from the European Union, the United Kingdom, or any other region with laws governing data collection, protection and use that may differ from United States law, please note that you will be transferring your personal information outside of those jurisdictions to the United States. The personal information we or our service providers collect may be stored and processed in servers within the United States, and certain information may be accessible by persons or companies outside of your home country who provide services for us. Prior to transferring your personal information to the United States, Classroom Hero will take appropriate steps to ensure that the personal information will be safeguarded and used only for authorized purposes set out in this Privacy Policy or in accordance with applicable laws.
Data Transfer Safeguards
International Transfer Protections
Additionally, where we transfer, store, and process your personal information outside of the United Kingdom, European Union, or EEA, we have ensured that appropriate safeguards are in place to ensure an adequate level of protection for the rights of data subjects based on the adequacy of the receiving country's data protection laws, for instance by:
Standard Contractual Clauses (SCCs):
- We enter into standard contractual clauses when processing data as a Processor for schools
- These provide legally binding privacy obligations for international data transfers
- Ensures GDPR-level protection even when data is stored in the United States
Alternative Transfer Mechanisms:
- EU-U.S. Data Privacy Framework compliance where applicable
- Other mechanisms approved by the European Commission (Art. 46 GDPR)
- Adequacy decisions and approved certification mechanisms
Service Provider Agreements:
- DigitalOcean and other service providers comply with international data transfer requirements
- Contractual obligations ensure appropriate privacy protections
- Regular review of compliance with international privacy standards
Educational Data Considerations
Student Data Protection: For Student Data transfers, we take additional precautions:
- Schools acting as Controllers can direct specific international transfer restrictions
- Student Data Privacy Addendums can include location-specific requirements
- Additional safeguards for educational data under international privacy laws
Simplified Data Processing: Our streamlined platform reduces international transfer complexity:
- Limited third-party integrations mean fewer cross-border data flows
- Teacher-controlled environment provides additional oversight
- Anonymous analytics ensure no personal data in research sharing
Your Rights and Consent
Acknowledgment and Consent
By using the Service, you acknowledge that your personal information may be transferred outside your home jurisdiction, including to the United States, and to the storage of your personal information in the United States, for the purpose of hosting, using and processing the personal information in accordance with this Privacy Policy. You further acknowledge that these countries may not have the same data protection laws as the country from which you provided your personal information, and that Classroom Hero may be subject to access requests and be compelled to disclose your personal information to government authorities, courts and law enforcement officials outside of your home country (including the United States).
Right to Withdraw Consent
You have the right to withdraw your consent at any time by contacting us at privacy@classroomhero.com. Please note that withdrawing consent may affect your ability to use certain features of the Service.
Educational Context Considerations
For Teachers and School Leaders:
- Your school or district may have specific policies about international data transfers
- Check with your educational institution about any restrictions on using U.S.-hosted services
- We can work with schools to address specific data localization requirements
For Parents:
- Student data transfers are governed by school policies and our educational agreements
- Parents can discuss data transfer concerns with their child's school
- We provide transparency about where and how data is stored and processed
Technical Infrastructure
Hosting and Storage
DigitalOcean Infrastructure:
- Primary data storage in DigitalOcean's U.S. data centers
- Industry-standard security measures and compliance certifications
- Contractual protections for international data transfers
Limited Service Providers: Our minimal third-party integration reduces international transfer complexity:
- Stripe: Payment processing (U.S.-based, handles only teacher/School Leader billing)
- Analytics Services: PostHog and Google Analytics (receive only anonymized data)
- AI Providers: OpenAI and Anthropic (zero data retention contracts for any student information)
Security Measures
Encryption and Protection:
- Data encrypted in transit using SSL/TLS
- Data encrypted at rest through DigitalOcean's security infrastructure
- Access controls limit who can access international data transfers
Regional Compliance
GDPR Compliance (EU/UK)
For European Users:
- Full GDPR compliance regardless of U.S. hosting location
- Standard Contractual Clauses provide appropriate safeguards
- Right to lodge complaints with EU supervisory authorities
- Data Protection Impact Assessments for international transfers
Other International Privacy Laws
Global Privacy Standards:
- Compliance with Canadian privacy laws (PIPEDA)
- Adherence to Australian privacy principles
- Alignment with other national privacy frameworks
- Regular review of emerging international privacy requirements
Educational Specific Considerations
School Policies and Compliance
International Educational Institutions:
- Schools outside the U.S. may have specific data localization requirements
- We can work with international schools on Student Data Privacy Addendums
- Compliance with local educational privacy laws alongside U.S. hosting
Data Sovereignty Concerns:
- Transparent disclosure of data storage locations
- Clear documentation of international transfer safeguards
- Ability to accommodate specific school data governance requirements
Contact and Questions
Getting More Information
If you have questions regarding our policies and practices with respect to the transfer of your personal information outside of your home country, please contact us at privacy@classroomhero.com.
What We Can Provide:
- Copies of safeguards we use for international data transfers
- Information about our compliance with local privacy laws
- Documentation of our data protection measures
- Assistance with school-specific international transfer requirements
Ongoing Compliance
Regular Review:
- Continuous monitoring of international privacy law developments
- Updates to transfer mechanisms as regulations evolve
- Regular review of service provider compliance with international standards
- Proactive communication about changes to international transfer practices
Basically,
Our servers are located in the U.S. through DigitalOcean, so if you are using the Service from any other country, your data will be transferred to and stored in the U.S. We have appropriate safeguards in place including Standard Contractual Clauses and other mechanisms to ensure your data receives adequate protection even when stored outside your home country. You can withdraw consent for international transfers at any time, though this may affect your ability to use the Service.