Privacy Policy
Last updated: 11/10/2025
1. Introduction
SchoolScore is committed to protecting the privacy of its users in accordance with the General Data Protection Regulation (GDPR).
This policy explains how we collect, use and protect your personal data.
2. Data Controller
Controller: RGPA
Company ID: 932 130 628 00013
Email: contact@schoolscore.io
Data Protection Officer: RGPA
3. Data Collected
Registration Data
- First and last name
- Email address
- Password (hashed)
Navigation Data
- IP address
- Browser type
- Pages visited
- Geolocation data (searches)
Payment Data (B2B API)
- Billing information
- Transaction history
- Generated API keys
4. Processing Purposes
- Creating and managing your account
- Providing requested services
- Processing API payments
- Moderating user reviews
- Service improvement
- Service-related communications
5. Legal Basis for Processing
- Consent: For registration and service use
- Contract Performance: For providing B2B API
- Legitimate Interest: For service improvement and fraud prevention
6. Retention Period
- Account data: During account lifetime + 1 year
- User reviews: 3 years after publication
- Payment data: 10 years (legal obligation)
- Connection logs: 12 months
7. Data Sharing
Your data may be shared with:
- Supabase: Database hosting (EU)
- Vercel: Website hosting (EU-US Standard Contractual Clauses)
- Upstash: Rate limiting (EU-US Standard Contractual Clauses)
- Stripe: Payment processing (GDPR certified)
All our subcontractors comply with GDPR
8. Cookies and Trackers
We use cookies to improve your experience:
Essential Cookies
Necessary for site operation (authentication, preferences)
Analytics Cookies (with consent)
Allow measuring audience and improving the site
9. Your GDPR Rights
In accordance with GDPR, you have the following rights:
- Right of Access: Obtain a copy of your data
- Right of Rectification: Correct inaccurate data
- Right to Erasure: Delete your data (right to be forgotten)
- Right to Restriction: Limit the processing of your data
- Right to Portability: Retrieve your data in a structured format
- Right to Object: Object to the processing of your data
- Consent Withdrawal: Withdraw your consent at any time
To exercise your rights, contact us: contact@schoolscore.io
10. Data Security
We implement technical and organizational security measures to protect your data:
- Encryption of sensitive data (AES-256)
- Secure connection (HTTPS)
- Secure authentication
- Regular backups
11. Policy Modifications
This policy may be modified. Significant changes will be notified to you by email.
12. Complaint
If you believe your rights are not being respected, you can file a complaint with CNIL: