Legal

GDPR & data rights

Your rights regarding personal data processed through MySchoolPilot.

Data controller

When a school deploys MySchoolPilot, that school is typically the data controller for student, parent, and staff personal data. MySchoolPilot provides the processing platform; the school determines purposes and lawful basis.

Your rights

Depending on applicable law (including GDPR), individuals may have the right to:

  • Access — request a copy of personal data held about you
  • Rectification — correct inaccurate or incomplete data
  • Erasure — request deletion where legally applicable
  • Restriction — limit processing in certain circumstances
  • Portability — receive data in a structured, machine-readable format
  • Objection — object to processing based on legitimate interests

How to exercise your rights

Contact your school administrator first — they manage records in MySchoolPilot. For platform-level inquiries, email hello@myschoolpilot.com.

Data processing measures

  • Role-based access control and permission auditing
  • Session security and optional two-factor authentication
  • Self-hosted deployment option for data sovereignty
  • Cookie consent with granular categories

See also: Privacy policy · Security