For schools

Data Processing Agreement

For training schools that give their graduates places on tidaltree. When you add graduate emails, you are the controller of that data and tidaltree is your processor. This agreement is part of our terms and applies as soon as you create a cohort, so nothing needs signing. If your school needs a signed copy, email hello@tidaltree.com.

1. Roles

The school is the data controller. Andre Schweighofer ("tidaltree") is the processor, processing graduate personal data only to provide the tidaltree service and only on the school's documented instructions.

2. Scope of processing

• Subject matter and purpose: giving the school's graduates their places on tidaltree, and showing the school how its cohorts are doing.
• Nature of processing: storing the data, showing it to the school, and sending graduates their invite, sign-in and reminder emails.
• Duration: for as long as the school has cohorts on tidaltree.
• Categories of data subjects: the school's graduates.
• Categories of data: graduates' email addresses, which cohort they're in, whether they've joined, and which of four milestones they've reached (held a first session, set a price, have a page or website, have a paying client).
• Not covered: what graduates create in tidaltree, including their own contacts, is theirs. tidaltree processes it under its own agreement with each graduate, and it is never shown to the school.

3. tidaltree's obligations

• Process the data only on the school's documented instructions, including on transfers outside the EU. The school gives its instructions by using the cohort features (adding graduates, paying, resending invites) and by email. We tell the school if we think an instruction breaks data protection law.
• Make sure everyone authorized to process the data is bound by confidentiality.
• Apply the security measures in section 4.
• Use subprocessors only as set out in section 5, under data protection terms that give the same protection as this agreement.
• Help the school answer requests from graduates exercising their rights.
• Help the school with security, breach notifications and data protection impact assessments, as far as they concern tidaltree.
• Within 30 days after the school stops using tidaltree, delete what we hold for it: its cohorts, their milestones, and graduates who never joined. We return the data first if the school asks, and keep only what the law requires. Graduates who joined keep their own accounts under their own agreement with tidaltree.
• Give the school the information it needs to show these obligations are met, and allow and help with audits by the school or an auditor it appoints, on reasonable notice.

4. Security measures

• All traffic is encrypted with HTTPS. Plain connections are redirected.
• There are no passwords to leak. Sign-in uses single-use email links that expire after 30 minutes (invite links after 14 days).
• Sign-in and signup requests are rate-limited, per address and per connection.
• Only the founder has access to the production systems and the database.
• We collect as little as we can. There are no free-text notes about people and no health data fields, and schools see milestones, never contacts.
• Hosting runs on Render, whose own measures are described at render.com/security.

5. Subprocessors

tidaltree uses these subprocessors for graduate data. We give the school at least 14 days' notice by email before adding or replacing one, and the school may object.

• Render Services, Inc. (USA): hosting of the application and its database, on servers in Render's US East region (Virginia). Render's own infrastructure providers are listed in Render's data processing addendum.
• Plus Five Five, Inc., trading as Resend (USA): sending sign-in, invite and reminder emails. It processes recipients' email addresses and the content of those emails. Its own subprocessors are listed at resend.com/legal/subprocessors.

Payments are not a subprocessing activity. Polar Software, Inc. (USA) sells tidaltree to the school as reseller and merchant of record. It processes the school's own billing details as its own controller and never receives graduates' data.

Fonts and scripts are served from tidaltree.com itself; graduates' browsers don't load anything from Google, social networks or advertising services.

6. International transfers

Graduate data is stored in the United States. Render and Resend are both certified under the EU-U.S. Data Privacy Framework, which the European Commission recognized as providing an adequate level of protection on 10 July 2023. Render's certification also covers the UK extension and the Swiss-U.S. framework. Both providers' data processing terms include the EU Standard Contractual Clauses, which apply if a certification lapses.

7. Security incidents

tidaltree will tell the school without undue delay, and within 48 hours at the latest, after becoming aware of a personal data breach affecting the school's graduates. We include what we know at that point and keep the school updated.

Last updated 25 October 2026.