Data Processing Notice

This notice describes how APMEX Information Technology Solutions processes personal data on behalf of subscribing universities that use CoursePilot.

1. Subject matter

Hosting and processing of academic operations data: users, faculty, students, offerings, schedules, enrollments, attendance, and class records for the subscriber’s campuses.

2. Duration

For the term of the paid subscription and any agreed wind-down / export period after cancellation or non-payment lockout.

3. Nature and purpose

Storage, retrieval, display, and computation required to operate CoursePilot features selected by the subscriber. Processing is limited to instructions from authorized campus users and to operating/securing the service.

4. Types of personal data

Names, student IDs, emails, academic affiliation, attendance marks, grade-related class record entries, and account authentication data as entered by the subscriber.

5. Obligations

• Process personal data only for providing CoursePilot and related support
• Apply reasonable organizational and technical security measures
• Assist the subscriber with data subject requests where feasible
• Notify the subscriber of personal data breaches affecting their workspace without undue delay
• Return or delete subscriber data after the agreed retention window, subject to legal holds

6. Subprocessors

Hosting, database, email, and analytics providers may process data as subprocessors. We remain responsible for ensuring appropriate safeguards with those providers.