Product Privacy Policy

Your school controls what data is entered into the Service and for what purpose (the "data controller"). Global Generation Co., Ltd. processes that data only as instructed by your school, under your subscription agreement (acting as a "data processor").

Staff/user accounts: name, email, Google Workspace identity, and role.

Asset records your school creates: equipment details, locations, and assignment history.

Ticket and helpdesk data: requests, statuses, assignments, and comments.

Security incident reports: descriptions, locations, and follow-up notes your team enters.

Visitor and kiosk check-in records: names and check-in details your front office collects.

Notification and audit logs generated by using the Service.

Copvera does not require detailed student records — only what your school chooses to enter, such as a visitor's name at a kiosk.

Google Workspace, for single sign-on, if enabled by your school.

Veracross, for staff/SIS synchronization, only if your school uses this optional integration.

Our hosting provider, in the region your school selects during onboarding.

Stripe, for subscription billing at the school-account level — this does not involve student or staff personal data processed within the product.

Each of these is governed by its own terms; we share only the minimum data necessary for each integration to function.

Your school chooses its preferred hosting region from 30+ available locations during onboarding. Data is processed in that region unless your school requests a change.

Access to your school's data is restricted by role-based permissions configured by your school's administrators. Each school's data is isolated from every other school's — nothing is shared between schools. Connections to the Service are encrypted in transit.

We retain your school's data for as long as your subscription is active. If your subscription ends, we will delete or return your school's data within 30 days of termination, unless a longer retention period is required by law or agreed with your school in writing.

As the data controller, your school remains responsible for its own compliance obligations regarding student and staff data, such as FERPA in the United States or equivalent frameworks in your jurisdiction. We process data only as your school instructs and do not use it for advertising or any purpose unrelated to providing the Service.

Copvera is built with international schools in mind. If your school operates under a specific data protection framework, contact us — we're glad to discuss your hosting region choice and, where appropriate, a formal Data Processing Agreement.

We may update this policy from time to time. The date above reflects the most recent revision.

Questions about this policy can be sent to [email protected].