Data Processing Agreement
Effective: 7/7/2026
This Data Processing Agreement ("DPA") forms part of the agreement between Learnova AI ("Processor") and the customer school ("Controller") governing the use of the Learnova AI platform.
1. Subject matter and duration
Learnova AI processes personal data on behalf of the Controller for the sole purpose of providing the school operating platform. Processing lasts for the duration of the subscription.
2. Categories of data subjects
Staff, students, guardians, and any other individuals whose data the Controller uploads.
3. Sub-processors
Learnova AI uses Supabase (database and auth) and Cloudflare (CDN and edge compute) as sub-processors. Written notice will be given before any new sub-processor is engaged.
4. Security measures
Row-level security, TLS 1.3, AES-256 at rest, least-privilege access controls, and audit logging.
5. Data subject requests
Learnova AI will assist the Controller in responding to access, correction, and deletion requests within reasonable timelines.
6. Contact
dpo@learnovaai.com