Effective Date: November 12, 2025
Independent Educator Pro LLC
This Data Processing Addendum (“DPA”) forms part of the Terms and Conditions between Independent Educator Pro LLC (“Processor”) and the educator or business using the Services (“Controller”).
The purpose of this DPA is to establish responsibilities and obligations with respect to personal data processed through Independent Educator Pro, Connect by IEPro, and educator subsites.
This DPA applies to the extent that Controller uses the Services to process personal data of parents, students, or other individuals.
Controller: The educator or organization that determines the purposes and means of processing personal data.
Processor: Independent Educator Pro LLC, which processes personal data on behalf of the Controller.
Personal Data: Any information relating to an identified or identifiable individual.
Processing: Any operation performed on personal data such as collection, storage, retrieval, or deletion.
Subprocessor: Any third party engaged by Processor to assist in providing the Services.
The Controller is responsible for ensuring that collection and processing of personal data complies with all applicable laws, including laws relating to minors and parental consent. The Controller must obtain all necessary authorizations before entering personal data into the Services.
The Processor processes personal data only to provide the Services and in accordance with the Controller’s documented instructions.
Processor may process personal data for the following purposes:
Processor will not process personal data for any purpose other than those described above.
Processor uses trusted third parties to support the Services. Subprocessors may include hosting providers, email and SMS providers, payment processors, CRM platforms, and security services. A current list of subprocessors is available upon request.
Processor remains responsible for the performance of its subprocessors.
Processor shall implement reasonable administrative, technical, and physical safeguards to protect personal data. This includes secure hosting, encryption in transit, access controls, logging, firewalls, intrusion monitoring, and regular security reviews.
Processor shall notify Controller without unreasonable delay if Processor becomes aware of a confirmed breach of personal data.
Processor shall assist Controller in fulfilling obligations to respond to data subject requests, including requests for access, correction, deletion, or restriction of processing. Controller is responsible for verifying identity and legality of such requests.
Personal data may be processed in the United States or in other jurisdictions where subprocessors operate. Processor shall ensure that transfers are conducted in compliance with applicable law.
Upon termination of Controller’s account, Processor will delete or anonymize personal data within a reasonable period, unless retention is required for legal or operational reasons. Controller may request earlier deletion in writing.
Controller may request information regarding Processor’s data protection practices. Formal audits may be conducted no more than once per year and must be requested with at least thirty days notice. Audits must not disrupt the operation of the Services.
This DPA remains in effect for as long as Controller uses the Services or Processor retains personal data on behalf of Controller.
Upon termination of the Services, Processor shall delete or anonymize personal data in accordance with Section 8.
Questions related to this DPA may be sent to:
Independent Educator Pro LLC
Email: hello@independenteducatorpro.com