Application and roles
These Data Processing terms form part of the Terms of Service when Software for Driving School processes personal information on behalf of a school. The school determines the purpose and means of processing its school records and acts as controller, business, or equivalent role; the platform acts as processor, service provider, or equivalent role, except for account, billing, security, and legal records it processes for its own legitimate purposes.
The processing lasts for the subscription and any limited retention period. Its nature is hosting, organizing, securing, transmitting, backing up, and supporting the data needed for website, enrollment, records, documents, waivers, scheduling, payments, communications, portals, and support.
People and data
Data subjects may include school owners, staff, instructors, contractors, prospective and enrolled students, parents, guardians, payers, website visitors, and support contacts. Data may include identifiers, contact details, school roles, student and guardian details, schedules, lesson records, permits, documents, signatures, communication, portal activity, payment status, support content, and technical or security logs.
Schools must avoid unnecessary sensitive information and must not instruct the platform to process information unlawfully. The school is responsible for legal bases, notices, consent where required, data accuracy, permitted users, retention choices, and responses to its data subjects.
Processing instructions and confidentiality
We process school-controlled data only to provide, secure, support, and improve the contracted service; follow documented configuration and support instructions; prevent misuse; or comply with law. If an instruction appears unlawful, we may suspend it and notify the school where permitted.
Personnel and contractors authorized to process school data are subject to confidentiality obligations and receive access limited to their responsibilities.
Security measures
Measures are designed according to risk and may include encrypted transport, authenticated access, role and tenant scoping, secure secret handling, restricted media access, validation, anti-spam controls, logging and audit history, backups, dependency maintenance, monitoring, and incident procedures.
Security is shared. Schools must manage credentials, roles, devices, local copies, integrations, form content, and staff practices. Neither party represents that risk can be eliminated completely.
Subprocessors
The platform may use subprocessors for infrastructure, storage, email delivery, payments, anti-abuse, monitoring, support, analytics, and optional AI features. We require subprocessors to protect data in a manner appropriate to their service and remain responsible for our contractual obligations.
A current category or provider list can be requested from support. When required by an applicable agreement or law, we will provide notice of a material new subprocessor and a reasonable opportunity to raise a documented data-protection objection.
Requests, assistance, and incidents
We provide reasonable assistance, considering the nature of processing and available information, with verified data-subject requests, security obligations, impact assessments, regulator inquiries, and deletion or export needs. Schools should use dashboard tools first where available.
If we confirm a breach of school-controlled personal information, we will notify the affected school without undue delay as required by applicable law, provide available information reasonably needed for the school's response, and take appropriate containment and remediation steps. Notices do not admit fault or liability.
Return, deletion, and audits
During an active account, schools may use available exports and dashboard access. After termination, we may return, delete, or de-identify school-controlled data according to the service workflow, retention schedule, backups, legal holds, security needs, and applicable law.
On reasonable written request, we will provide information needed to demonstrate compliance with these terms. Audits must protect other customers, security, and confidentiality, avoid unreasonable disruption, and use existing certifications or reports before requesting intrusive inspection.
International transfers and priority
Processing may occur in the United States and other provider locations. Where legally required, the parties will use applicable transfer mechanisms and supplementary safeguards.
If these terms conflict with the general Terms of Service regarding processing of school-controlled personal information, these Data Processing terms control. Contact: Software for Driving School, 8245 NW 36 Street #5, Doral, FL 33166; support@softwarefordrivingschool.com; 617-600-3678.