DRAFT — REVIEW WITH A LAWYER. NOT LEGAL ADVICE. SCHOLAR BY Nyclogic AI DATA PRIVACY AGREEMENT TEMPLATE (Lines marked "District to complete" are filled in by the school or district.) District: ______________________ (District to complete) Company: theveteraneducators AI LLC (Nyclogic AI) Term: ____________ to ____________ (District to complete) Purpose: classroom lesson delivery, feedback, practice, and progress. Data: teacher accounts; pseudonymous student labels; hashed access/recovery credentials; submitted work. Local roster names and emails are not uploaded to Scholar. Restrictions: educational purposes only; no sale or student advertising. Additional approved uses, if any: ______________________ (District to complete) Security: transit encryption, tenant isolation, hashed student credentials, local encrypted roster keys. A security attachment is provided on request. AI: conservative identifier redaction before prompts; AI provider Anthropic, through its commercial API. Student names are never sent to the AI; typed text is filtered for names first. Anthropic's handling of API data is governed by its commercial terms. Sub-processors: Supabase (database, authentication, storage; United States, us-east-1), Cloudflare (hosting, content delivery, scheduled jobs), Anthropic (AI); Google for optional teacher sign-in (Apple as well if Sign in with Apple is enabled). Sub-processor locations are as listed; flow-down obligations follow each provider's standard terms. Parent access/correction: through the district process: ______________________ (District to complete). Vendor privacy contact: privacy@nyclogicai.com. Deletion: student removal; class/account 7-day undo; archived work 12 months by default. Backups follow our database provider's standard plan retention. District retention requirements, if different: ______________________ (District to complete) Incident notice: security@nyclogicai.com. Notification timeline and procedure: as required by applicable law and the signed agreement. NY Education Law §2-d / FERPA / COPPA: school authority, consent and supplemental information to be completed with the district's counsel. Audit, return, termination, indemnity: to be agreed in the signed agreement. District signature: ______________________ Date: ____________ Company signature: ______________________ Date: ____________