Q: Who controls student data?
The student’s school is the data controller. Propello processes student data only under the school’s instructions.
Q: Where is data stored?
On secure AWS servers in the EU.
Q: Can Propello sell or share data with third parties?
No. Data is never sold and is only shared with trusted providers.
Q: How long is data kept?
Inactive accounts are deactivated after 24 months and anonymised within 6 months of deletion.
Q: What happens if there’s a breach?
Schools and individuals are notified within 48 hours, and the ICO within 72 hours if required.