← Back to Wipeboard Education

Privacy Policy

Effective date: May 2026 · Version 1.0

Summary for educators: Wipeboard Education collects only what is necessary to run classroom project boards. We do not collect student email addresses, sell any data, use student data for advertising, or send student information to any AI provider. Student records are automatically deleted at end of academic year.

1. Who we are

Wipeboard Education is operated by Remergify LLC, a technology company incorporated in the State of Florida, United States. Our mailing address is Miami, FL. You can reach us at privacy@wipeboard.io.

Wipeboard Education is part of the Wipeboard platform. This privacy policy applies specifically to Wipeboard Education (edu.wipeboard.io) and the data of teachers, students, and schools using the Education product.

2. Legal framework

Wipeboard Education is designed to comply with:

  • Family Educational Rights and Privacy Act (FERPA) — 20 U.S.C. § 1232g
  • Children's Online Privacy Protection Act (COPPA) — 15 U.S.C. §§ 6501–6506, as updated by the 2024 rule effective April 22, 2026
  • California Student Online Personal Information Protection Act (SOPIPA)
  • California AB 1584 (Education Code § 49073.1)
  • Illinois Student Online Personal Protection Act (SOPPA)
  • New York Education Law § 2-d
  • ADA Title II — WCAG 2.1 Level AA accessibility, effective April 2026

We engage with schools as a School Official under the FERPA School Official Exception. This means we operate under the direct control of the school, use education records only for the educational purpose for which they were disclosed, and are subject to the same requirements as school employees.

3. What data we collect

3.1 Teacher data

When a teacher creates an account we collect:

  • Full name
  • Email address
  • School name and state
  • Role (teacher, school admin, district admin)
  • Data Processing Agreement acceptance record (date, version, IP address)
  • Payment information — processed by Stripe, not stored by us

3.2 Student data

Student data is the most sensitive data we handle. We collect only:

  • Display name: first name and last initial only (e.g. 'Jamie R.') — no full legal names
  • Student login code: an auto-generated 6-character alphanumeric code — no email address, no password
  • Age indicator: whether the student is under 13 (set by the teacher)
  • Task completion records: which tasks a student completed and when
  • Classroom assignment: which classroom the student belongs to

We do NOT collect:

  • Student email addresses
  • Student passwords (codes are system-generated)
  • Student home addresses or phone numbers
  • Student identification numbers (SSN, student ID)
  • Grades, test scores, or academic assessment data
  • Behavioral or disciplinary records
  • Photos or biometric data
  • Precise geolocation or device identifiers
  • Any data for commercial or advertising purposes

3.3 School and classroom data

  • School name, district, and state
  • Classroom names and grade levels
  • Board and task content created by teachers
  • Audit logs of task completions

3.4 Automatically collected data

  • Server access logs (IP address, browser type, pages accessed) — for security and debugging only, retained 90 days
  • Session data required to keep teachers and students logged in

We do not use advertising trackers, behavioral analytics, or third-party tracking pixels. We do not use Google Analytics or Meta Pixel.

4. How we use data

We use data only to:

  • Provide the Wipeboard Education classroom collaboration service
  • Authenticate teachers and students
  • Display classroom boards, tasks, and completion status
  • Generate the parent transparency view for each student
  • Send transactional emails to teachers (account confirmation, password reset)
  • Process teacher payments via Stripe
  • Debug and improve the platform using anonymized, aggregated data
  • Comply with legal obligations

We do NOT use data to:

  • Serve advertising to any user
  • Build behavioral profiles of students or teachers
  • Sell data to any third party
  • Train AI or machine learning models
  • Contact students directly for any purpose

5. AI features and student data

Student personally identifiable information (PII) is never sent to any AI provider. AI features in Wipeboard Education are available to teachers only. These features use only generic educational context — subject, grade level, learning objectives — to generate board structures and task suggestions.

No student names, completion records, behavioral data, or any student-identifiable information is ever included in any AI API call.

AI features are disabled entirely for classrooms where the teacher has indicated that students are under 13.

6. FERPA — student education records

Under FERPA, student education records may be shared with school officials who have a legitimate educational interest. Wipeboard Education operates as a School Official under this exception.

We access education records only to provide the classroom collaboration service. We do not redisclose student education records to any third party. We maintain records under the direct control of the school — teachers can delete student records at any time.

Each teacher who creates an account accepts a Data Processing Agreement that formalizes this relationship.

7. COPPA — children under 13

For students under 13, Wipeboard Education uses the School Authority consent mechanism. At enrollment of an under-13 classroom, the teacher confirms that their school has authorized the use of educational technology and that parents have been notified.

For under-13 students we apply additional restrictions: AI features are disabled entirely, no persistent identifiers are collected beyond the student code, no behavioral data is collected, and data retention is limited to the academic year plus 30 days.

Parents of students under 13 have the right to review personal information collected about their child, request deletion, or refuse further collection. We respond to parent requests within 5 business days.

8. Who we share data with

We share data with the following service providers solely to operate the platform:

  • Supabase — database, storage, and authentication infrastructure (AWS-based, US region)
  • Stripe — payment processing for teacher subscriptions (student data is never sent to Stripe)
  • Resend — transactional email delivery for teacher emails only (no student emails sent)

All service providers are bound by data processing agreements. We do not share data with advertisers, data brokers, AI training datasets, or any unlisted party.

9. Data retention and deletion

Student records are automatically deleted 30 days after the end of the academic year. Teachers can delete individual student records at any time — deletion is immediate and permanent.

When a teacher deletes their account, all associated classroom data, student records, and board content are permanently deleted.

Schools and districts may request deletion of all data by contacting edu@wipeboard.io. We complete deletion within 10 business days.

10. Data security

All data is stored on Supabase infrastructure running on AWS in the United States. We implement AES-256 encryption at rest, TLS 1.3 encryption in transit, role-based access controls, row-level security policies, and comprehensive audit logging.

No cross-school data access is possible under any circumstances.

11. Your rights

Teachers can access, correct, export, or delete their data at any time. Schools and districts acting on behalf of students can access, correct, and delete student education records.

California residents have additional rights under CCPA. Illinois residents have additional rights under SOPPA. New York residents have additional rights under Ed Law 2-d. Contact privacy@wipeboard.io to exercise any state-specific rights.

12. Changes to this policy

We will notify teachers of material changes by email at least 30 days before the changes take effect. We will never make changes that reduce student privacy protections without explicit acknowledgment.

13. Contact

Privacy inquiries: privacy@wipeboard.io

Student data and FERPA/COPPA: edu@wipeboard.io

Data deletion requests: edu@wipeboard.io

Mailing address: Remergify LLC, Miami, FL

Response time: 5 business days for all privacy inquiries

Wipeboard Education is operated by Remergify LLC.

Questions? Contact privacy@wipeboard.io