Student Data Processing Agreement (SDPA)

Last Updated: June 1, 2026

This Student Data Processing Agreement (“SDPA”) describes how Farkadi AI (“Farkadi AI,” “we,” “us,” or “our”) processes Student Data on behalf of educational institutions (“Institution,” “Controller”) in connection with the Farkadi AI platform and services (the “Service”).

This SDPA applies when Farkadi AI processes Student Data on behalf of an educational institution.

1. Definitions

Student Data
Means personal data relating to students that is provided to Farkadi AI by an Institution or collected through student use of the Service.

This may include:

Student name
Email address
Account identifiers
Educational progress data
Assessment responses
Learning activity

Student Data does not include aggregated or anonymized data that cannot identify individual students.

Controller
The educational institution that determines the purposes and means of processing Student Data.

Processor
Farkadi AI, acting on behalf of the Controller.

Data Subject
The student whose data is processed.

2. Role of Farkadi AI

When providing services to an Institution, Farkadi AI acts as a Data Processor.

Farkadi AI processes Student Data solely to provide the Service.

Farkadi AI does not sell Student Data.

Farkadi AI does not use Student Data for advertising.

3. Purpose of Processing

Farkadi AI processes Student Data solely to:

Provide educational services
Deliver learning content and assessments
Track student progress
Provide AI-powered educational support
Maintain system security
Improve platform functionality

Processing is limited to educational purposes.

4. AI Processing of Student Data

Farkadi AI uses AI providers to generate educational content.

Student Data may be processed by AI providers solely to provide the Service.

Farkadi AI does not permit AI providers to use Student Data for unrelated purposes.

Farkadi AI does not use Student Data to train public AI models without authorization.

5. Confidentiality

Farkadi AI ensures that personnel authorized to process Student Data are subject to confidentiality obligations.

Access to Student Data is restricted.

6. Security Measures

Farkadi AI implements appropriate technical and organizational security measures, including:

Encryption in transit (HTTPS/TLS)
Secure authentication systems
Access controls
Infrastructure security protections
Monitoring and logging

These measures are designed to protect Student Data.

7. Subprocessors

Farkadi AI may use subprocessors to provide the Service.

These may include:

Supabase — infrastructure and database
Anthropic and OpenAI — AI processing
Stripe — payment processing (if applicable)
PostHog — analytics

Subprocessors are contractually obligated to protect Student Data.

A full list is available on the Subprocessors page.

8. Data Retention

Farkadi AI retains Student Data only as long as necessary to provide the Service or comply with legal obligations.

Upon request by the Institution, Farkadi AI will delete Student Data, subject to legal requirements.

9. Data Subject Rights

Farkadi AI assists Institutions in responding to student data rights requests, including:

Access
Correction
Deletion
Data portability

Requests may be submitted through the Institution or directly to Farkadi AI.

10. Incident Response

If Farkadi AI becomes aware of a security incident affecting Student Data, Farkadi AI will:

Investigate the incident
Take appropriate corrective action
Notify the Institution where required by law

11. Data Transfers

Student Data may be processed in countries outside the Institution's jurisdiction.

Farkadi AI implements safeguards designed to protect Student Data.

12. Use Restrictions

Farkadi AI will not:

Sell Student Data
Use Student Data for advertising
Use Student Data for unrelated purposes

Student Data is used solely to provide educational services.

13. Termination and Data Deletion

Upon termination of services, Farkadi AI will delete or return Student Data as requested by the Institution, subject to legal obligations.

14. Compliance with Applicable Laws

Farkadi AI is committed to complying with applicable data protection laws, including GDPR and other applicable regulations.

15. Contact

For Student Data Processing Agreement inquiries, contact: legal@farkadi.ai

Last Modified: June 1, 2026

Policy Version: 1.1

Last Updated: June 1, 2026

This SDPA applies when Farkadi AI processes Student Data on behalf of an educational institution.

1. Definitions

Student Data
Means personal data relating to students that is provided to Farkadi AI by an Institution or collected through student use of the Service.

This may include:

Student name
Email address
Account identifiers
Educational progress data
Assessment responses
Learning activity

Student Data does not include aggregated or anonymized data that cannot identify individual students.

Controller
The educational institution that determines the purposes and means of processing Student Data.

Processor
Farkadi AI, acting on behalf of the Controller.

Data Subject
The student whose data is processed.

2. Role of Farkadi AI

When providing services to an Institution, Farkadi AI acts as a Data Processor.

Farkadi AI processes Student Data solely to provide the Service.

Farkadi AI does not sell Student Data.

Farkadi AI does not use Student Data for advertising.

3. Purpose of Processing

Farkadi AI processes Student Data solely to:

Provide educational services
Deliver learning content and assessments
Track student progress
Provide AI-powered educational support
Maintain system security
Improve platform functionality

Processing is limited to educational purposes.

4. AI Processing of Student Data

Farkadi AI uses AI providers to generate educational content.

Student Data may be processed by AI providers solely to provide the Service.

Farkadi AI does not permit AI providers to use Student Data for unrelated purposes.

Farkadi AI does not use Student Data to train public AI models without authorization.

5. Confidentiality

Farkadi AI ensures that personnel authorized to process Student Data are subject to confidentiality obligations.

Access to Student Data is restricted.

6. Security Measures

Farkadi AI implements appropriate technical and organizational security measures, including:

Encryption in transit (HTTPS/TLS)
Secure authentication systems
Access controls
Infrastructure security protections
Monitoring and logging

These measures are designed to protect Student Data.

7. Subprocessors

Farkadi AI may use subprocessors to provide the Service.

These may include:

Supabase — infrastructure and database
Anthropic and OpenAI — AI processing
Stripe — payment processing (if applicable)
PostHog — analytics

Subprocessors are contractually obligated to protect Student Data.

A full list is available on the Subprocessors page.

8. Data Retention

Farkadi AI retains Student Data only as long as necessary to provide the Service or comply with legal obligations.

Upon request by the Institution, Farkadi AI will delete Student Data, subject to legal requirements.

9. Data Subject Rights

Farkadi AI assists Institutions in responding to student data rights requests, including:

Access
Correction
Deletion
Data portability

Requests may be submitted through the Institution or directly to Farkadi AI.

10. Incident Response

If Farkadi AI becomes aware of a security incident affecting Student Data, Farkadi AI will:

Investigate the incident
Take appropriate corrective action
Notify the Institution where required by law

11. Data Transfers

Student Data may be processed in countries outside the Institution's jurisdiction.

Farkadi AI implements safeguards designed to protect Student Data.

12. Use Restrictions

Farkadi AI will not:

Sell Student Data
Use Student Data for advertising
Use Student Data for unrelated purposes

Student Data is used solely to provide educational services.

13. Termination and Data Deletion

Upon termination of services, Farkadi AI will delete or return Student Data as requested by the Institution, subject to legal obligations.

14. Compliance with Applicable Laws

Farkadi AI is committed to complying with applicable data protection laws, including GDPR and other applicable regulations.

15. Contact

For Student Data Processing Agreement inquiries, contact: legal@farkadi.ai

Last Modified: June 1, 2026

Policy Version: 1.1

Last Updated: June 1, 2026

This SDPA applies when Farkadi AI processes Student Data on behalf of an educational institution.

1. Definitions

Student Data
Means personal data relating to students that is provided to Farkadi AI by an Institution or collected through student use of the Service.

This may include:

Student name
Email address
Account identifiers
Educational progress data
Assessment responses
Learning activity

Student Data does not include aggregated or anonymized data that cannot identify individual students.

Controller
The educational institution that determines the purposes and means of processing Student Data.

Processor
Farkadi AI, acting on behalf of the Controller.

Data Subject
The student whose data is processed.

2. Role of Farkadi AI

When providing services to an Institution, Farkadi AI acts as a Data Processor.

Farkadi AI processes Student Data solely to provide the Service.

Farkadi AI does not sell Student Data.

Farkadi AI does not use Student Data for advertising.

3. Purpose of Processing

Farkadi AI processes Student Data solely to:

Provide educational services
Deliver learning content and assessments
Track student progress
Provide AI-powered educational support
Maintain system security
Improve platform functionality

Processing is limited to educational purposes.

4. AI Processing of Student Data

Farkadi AI uses AI providers to generate educational content.

Student Data may be processed by AI providers solely to provide the Service.

Farkadi AI does not permit AI providers to use Student Data for unrelated purposes.

Farkadi AI does not use Student Data to train public AI models without authorization.

5. Confidentiality

Farkadi AI ensures that personnel authorized to process Student Data are subject to confidentiality obligations.

Access to Student Data is restricted.

6. Security Measures

Farkadi AI implements appropriate technical and organizational security measures, including:

Encryption in transit (HTTPS/TLS)
Secure authentication systems
Access controls
Infrastructure security protections
Monitoring and logging

These measures are designed to protect Student Data.

7. Subprocessors

Farkadi AI may use subprocessors to provide the Service.

These may include:

Supabase — infrastructure and database
Anthropic and OpenAI — AI processing
Stripe — payment processing (if applicable)
PostHog — analytics

Subprocessors are contractually obligated to protect Student Data.

A full list is available on the Subprocessors page.

8. Data Retention

Farkadi AI retains Student Data only as long as necessary to provide the Service or comply with legal obligations.

Upon request by the Institution, Farkadi AI will delete Student Data, subject to legal requirements.

9. Data Subject Rights

Farkadi AI assists Institutions in responding to student data rights requests, including:

Access
Correction
Deletion
Data portability

Requests may be submitted through the Institution or directly to Farkadi AI.

10. Incident Response

If Farkadi AI becomes aware of a security incident affecting Student Data, Farkadi AI will:

Investigate the incident
Take appropriate corrective action
Notify the Institution where required by law

11. Data Transfers

Student Data may be processed in countries outside the Institution's jurisdiction.

Farkadi AI implements safeguards designed to protect Student Data.

12. Use Restrictions

Farkadi AI will not:

Sell Student Data
Use Student Data for advertising
Use Student Data for unrelated purposes

Student Data is used solely to provide educational services.

13. Termination and Data Deletion

Upon termination of services, Farkadi AI will delete or return Student Data as requested by the Institution, subject to legal obligations.

14. Compliance with Applicable Laws

Farkadi AI is committed to complying with applicable data protection laws, including GDPR and other applicable regulations.

15. Contact

For Student Data Processing Agreement inquiries, contact: legal@farkadi.ai

Last Modified: June 1, 2026

Policy Version: 1.1