Data Retention And Deletion

This page explains how long Pearl keeps customer data, how a customer gets it back, and how it is deleted when an agreement ends. “Customer Content” includes “Student Data.” These commitments come from the Master Service Agreement (MSA §4.6) and the Student Data Privacy Exhibit (DPA Article VIII) that govern each customer relationship.

Retention Principle

Pearl Education retains Student Data only for as long as needed to provide the Services or as required by law (DPA §8.1).

Exporting Data During And After The Term

During the Service Period — and for 30 days after the agreement terminates or expires — Pearl will, on the customer’s written request, make Customer Content available for export in a commonly used format, at no additional charge (MSA §4.6; DPA §8.2). See also Data Portability.

Deletion Timelines

  • Standard: Unless the customer requests earlier deletion, Pearl deletes Customer Content no later than 60 days after the end of the 30-day export period (MSA §4.6; DPA §8.3).
  • On request: If the customer requests earlier deletion, Pearl deletes Customer Content within 60 days of that request (MSA §4.6; DPA §8.3).
  • Certification: Pearl provides written certification of deletion on request (MSA §4.6; DPA §8.3).

Disaster-Recovery Backups

Backup copies kept for disaster recovery are retained only in encrypted backups, are not used for any purpose other than disaster recovery, and are automatically overwritten on a rolling schedule not to exceed 7 days (MSA §4.6; DPA §8.3(c)).

Data Excluded From These Timelines

These return-and-deletion obligations do not apply to De-identified Data, which is not Student Data and which Pearl may continue to use consistent with its agreements (MSA §4.6, §6; DPA §8.3(a), Art. V). Pearl may also retain data where retention is required by law (DPA §8.3(b)).

State Law And Enrollment-Based Timelines

Where applicable state law or an executed state student data privacy agreement (for example, an SDPC NDPA) sets different disposition timelines — including enrollment-based deletion — those timelines control for the affected Student Data, and the parties cooperate to implement them (DPA §8.4; MSA §5.1).

Who Controls Export And Deletion

Export and deletion are initiated by the customer (the School or agency), not by individual end users. Parents and eligible students direct access, correction, and deletion requests to their School, which Pearl supports (DPA §2.2). For student-data questions, contact privacy@poweredbypearl.com or contact your School.