Version 2026-07-07. This document is in effect as of its version date. We review our legal documents with counsel as part of our process, and we announce material changes to affected users.

This Data Processing Agreement ("DPA") is between the school or district using Crescendo-IQ (the "Institution") and Crescendo-IQ LLC("Crescendo-IQ"). It governs student personal information the Institution's program processes through the service and supplements the Terms of Service. Print this page and exchange signatures below, or request a countersigned copy at legal@crescendo-iq.com.

1. Roles and nature of processing

The Institution controls its students' education records; Crescendo-IQ processes them only to provide the service the Institution's directors configure: rosters and groups, practice and attendance tracking, skill assessment and review, coaching notes, and the optional motivation features the program turns on. Crescendo-IQ processes student data only on the Institution's instructions expressed through the product and this DPA, and never for advertising, profiling unrelated to the service, or sale.

2. FERPA

To the extent student data constitutes education records under FERPA, the Institution designates Crescendo-IQ a "school official" with a legitimate educational interest, performing an institutional service the Institution would otherwise perform itself, under the Institution's direct control with respect to the records, and bound by this DPA not to re-disclose or use records beyond the service.

3. COPPA

For students under 13, the Institution (through its authorized program staff) provides the school-based authorization COPPA permits for the collection of personal information in the educational context, or collects verifiable parental consent through a separately approved process. Practice-verification links in the service do not collect consent. Crescendo-IQ collects from students only the information the program's configuration requires, uses it only for the service, and never conditions participation on collecting more than is reasonably necessary.

4. Data categories

Name; program-defined profile fields; practice, attendance, skill, assessment, coaching, and activity records created by using the service; and, where the program enables them, links students submit to media stored on external platforms. Crescendo-IQ never hosts student audio or video files. Student email exists only where an account signs in with one; billing information never touches students.

5. Security

Industry-standard safeguards: encryption in transit and at rest through our infrastructure providers, per-organization and per-group authorization checks on every query, role-based access, audited administrative actions, error monitoring configured to exclude personal information, and organizational access limited to what operating the service requires.

6. Subprocessors

Crescendo-IQ uses the subprocessors below, each bound to protections consistent with this DPA. The list is generated from the same source of record the service runs on:

7. Breach notice

Crescendo-IQ notifies the Institution without undue delay, and in any case within 72 hours of confirming a breach affecting the Institution's student data, with the information reasonably available to support the Institution's own notification obligations.

8. Access, export, deletion

The Institution's administrators can export a student's data from the service and can direct deletion at any time; the erasure machinery removes the student's records. On termination of service, Crescendo-IQ deletes the Institution's student data on request, subject to legally required retention.

9. Term

This DPA is effective while the Institution uses the service and survives for data retained afterward. If the Institution requires its own DPA rider, send it to legal@crescendo-iq.com.