Wipeboard Education collects only the minimum student data necessary to operate the classroom collaboration service: student display names (first name and last initial), unique login codes, task completion records, and timestamps.
We do not collect student email addresses, full legal names, student ID numbers, grades, test scores, or behavioral data.
Every teacher account includes acceptance of a Data Processing Agreement that establishes Remergify LLC (operating as Wipeboard Education) as a 'school official' under the FERPA School Official Exception. This designation means Wipeboard Education: (a) performs an institutional function the school would otherwise carry out, (b) operates under the direct control of the school with respect to the use and maintenance of education records, and (c) is subject to the requirements of FERPA governing the use and re-disclosure of personally identifiable information from education records.
For classrooms with students under 13, Wipeboard Education operates under the school authority consent mechanism. Teachers must confirm school authorization and parental notification before enrolling students under 13.
We collect only what is necessary for the classroom function. No student email addresses or passwords are required — students access the platform with a unique 6-character code assigned by their teacher.
Student records are automatically scheduled for deletion 30 days after the end of the academic year. Teachers can request immediate deletion at any time.
Student names, completion data, grades, behavioral patterns, and any other personally identifiable information are NEVER sent to any AI provider — including but not limited to Anthropic, OpenAI, Google, or any other third-party AI service.
AI features in Wipeboard Education are available to teachers only. These features use only generic educational context: subject area, grade level, and learning objectives. The AI system has no access to student records.
AI features are automatically disabled for classrooms marked as having students under 13, providing an additional layer of COPPA protection.
Student records are automatically deleted 30 days after the end of the academic year in which they were created. Teachers can request immediate deletion of any student's data at any time through the Data Management panel.
Schools can request deletion of all school data at any time. We respond to deletion requests within 5 business days.
Audit logs are retained for 5 years per FERPA requirements, after which they are permanently deleted.
All student data is encrypted at rest using AES-256 and in transit using TLS 1.2+.
Access is strictly role-based: teachers see only their school's data, students see only their classroom, and parents see only their individual child's tasks. There is no cross-school data access under any circumstances.
Infrastructure is US-based (AWS). We maintain comprehensive audit logs and conduct regular security reviews.
Every Wipeboard Education account includes a Data Processing Agreement (DPA) that is accepted during teacher onboarding. The DPA cannot be bypassed — it must be accepted before any student data can be entered.
The current DPA version is 1.0.0. It covers data collection scope, usage restrictions, AI data handling, retention and deletion policies, FERPA School Official status, COPPA compliance, security measures, and contact information.
School and district plans include a countersigned DPA on company letterhead. To request district DPA documentation, contact edu@wipeboard.io.
For all compliance inquiries, FERPA/COPPA questions, data deletion requests, or DPA documentation: edu@wipeboard.io
Privacy inquiries: privacy@wipeboard.io
Wipeboard Education is operated by Remergify LLC.
Questions? Contact edu@wipeboard.io