These Student Data Terms ("Student Data Terms") apply when a teacher uses Rectangle with classes the teacher is authorized by their school or district to manage — for example, by creating an account, issuing a class code, or importing a roster from Google Classroom — and no separate Data Processing Agreement between Rectangle and the teacher's school or district is in place. They form part of, and are incorporated into, the Rectangle Terms of Use, and Rectangle's handling of student information is described in the Rectangle Privacy Policy. If the teacher's school or district has entered into a Data Processing Agreement or equivalent student-data-privacy agreement with Rectangle, that agreement governs student data instead of these Student Data Terms.
In these Student Data Terms, "student data" means personal information about a student that Rectangle collects or maintains through the teacher's use of the Service, including student names, email addresses, Google Classroom profile identifiers, submitted work and files, grades, feedback, discussions, reflections, checklists, and related records and logs.
By using Rectangle with students, the teacher agrees to the following.
1. Authorization
The teacher represents that they are authorized by their school or district to use Rectangle with the applicable class or classes and to provide student data to Rectangle for school-directed educational purposes. The teacher must not import or enter student data unless doing so is permitted by their school's or district's policies. Rectangle remains responsible for its obligations as an operator under COPPA and will use student data only for school-authorized educational purposes.
If the teacher's school or district requires a signed data privacy agreement before a classroom tool may be used with students, the teacher must not use Rectangle with students until that agreement is in place.
2. How Rectangle uses student data
Rectangle uses student data only to provide the Service for the teacher's class and for the school-directed educational purposes described in the Privacy Policy. Rectangle acts as a service provider / "school official" under FERPA, and under the school's authorization for COPPA purposes, performing a service the school would otherwise perform itself, under the school's control.
3. What Rectangle will not do
Rectangle does not sell student data, use it for targeted advertising, use it to build advertising or non-educational profiles, or use it to train artificial-intelligence models.
4. AI connectors
Rectangle's optional AI connectors are for teacher-authored draft project content and public education standards only. Teachers must not include student data in prompts, files, drafts, or other materials they choose to send through an AI connector. Rectangle does not send student work, grades, feedback, discussions, rosters, observation notes, login information, or other student data to AI providers, and Rectangle does not use student data to train artificial-intelligence models.
5. School control of student data
Student data remains under the control of the teacher's school. The school may direct the access, correction, export, return, or deletion of student data.
6. Access, correction, and deletion requests
Requests from parents or students to access, correct, delete, or receive a copy of a student's records are handled through the school. Rectangle will support the school in responding to those requests.
7. Subprocessors
Rectangle uses only the subprocessors listed in the Privacy Policy (Section 4.2) to process student data. Rectangle maintains that list and provides notice of material changes as described in the Privacy Policy.
8. Security and breach notice
Rectangle protects student data using the security measures described in the Privacy Policy (Section 5). If Rectangle confirms a security incident involving student data, Rectangle will notify the teacher without undue delay, and — where a school or district contact is available to Rectangle — the school or district, in any event within 72 hours after confirmation, unless a shorter period is required by applicable law or law enforcement directs otherwise.
If Rectangle notifies the teacher of a security incident, legal request, parent or student rights request, or other matter requiring school involvement, the teacher agrees to promptly notify the appropriate school or district administrator.
9. Return and deletion
Rectangle will delete or return student data on the school's request or on termination of the teacher's account, subject to the retention practices described in the Privacy Policy (Section 6) and any deletion required or restricted by law, unless the data remains part of a school-controlled educational record that the school has directed Rectangle to retain or make available.
10. Data location
Student data is stored and processed in the United States.
11. Changes and contact
Rectangle may update these Student Data Terms and will post the updated version with a new effective date. If we make material changes affecting student data, we will provide additional notice as described in the Privacy Policy. Questions about student data go to peter@rectangle.education or (503) 741‑9692.