DRAFT – review with a lawyer before launch. This template is not legal advice.

Parents’ Bill of Rights — NY Education Law §2-d

Last updated October 21, 2026

DRAFT district template, not a statement that Scholar or a district is compliant. Complete with counsel before school use.

  • A student’s personally identifiable information cannot be sold or released for commercial purposes.
  • Parents have the right to inspect and review their child’s education records held by the school or district.
  • Safeguards consistent with applicable industry standards must protect student data, including encryption, access controls and training.
  • A complete list of student data elements collected by New York State is available from the New York State Education Department.
  • Parents may submit complaints about possible breaches or unauthorized disclosure to [DISTRICT PRIVACY OFFICER / CONTACT] or the New York State Education Department.

Supplemental contract information

Contractor: theveteraneducators AI LLC (Nyclogic AI™). District: [DISTRICT NAME]. Contract term: [START / END]. Educational purpose: classroom lessons, feedback and progress. Authorized data: pseudonymous student labels, hashed access credentials and submitted work; teacher account data. No student accounts or vendor-held roster names/emails.

Sub-processors: Lovable Cloud (Supabase), Lovable AI Gateway/OpenAI, and optional Google/Apple teacher sign-in. [INSERT APPROVED SUB-PROCESSOR CONTRACT DETAILS, DATA LOCATION, SECURITY PLAN AND INCIDENT NOTIFICATION TIMELINE]

Access, challenges and deletion

Parents should contact the teacher or [DISTRICT CONTACT] to review, challenge or request removal of their child’s work. The teacher’s encrypted local roster key links the child to a numbered label. Student deletion removes that label’s work. Class/account deletion has a 7-day undo window; archived student work is removed after 12 months by default. [DISTRICT RECORDS-RETENTION REQUIREMENTS]

Breach complaints

[DISTRICT COMPLAINT PROCESS], [STATE COMPLAINT CONTACT], privacy@nyclogicai.com (placeholder; mailbox not yet verified). The school must complete and share these details before use.