SeatSheet is designed to be an effective and safe tool for teachers. We only collect and store the data necessary to create and save seating charts.

• First name and (optional) gender of students
• Nickname of class (e.g., 9B)
• Classroom layout and student seating

• Last names, national ID numbers, or contact info
• Grades, evaluations, or sensitive personal information
• Locked seats and preferences (only used temporarily in the browser)

All data is stored in the EU using a secure and reliable cloud platform. SeatSheet follows GDPR principles of data minimization, purpose limitation, and security. Data is only used to let you create and store seating charts – never for analytics, advertising, or sharing with third parties.

You can request access to or deletion of your data at any time by contacting us. You have the right to know what data is stored and how it is processed.

SeatSheet is operated by Edlabs AS, org.no. 936155553. For any privacy-related questions, contact us at hei@klassekartet.no.

The data controller is Edlabs AS, org.no. 936 155 553, Hovseterveien 68J, 0768 Oslo, Norway. Contact us by email with any privacy-related questions: hei@klassekartet.no

The purpose of the data processing is to provide a digital tool that helps teachers manage classroom environments and student relationships. The service simplifies the process of organizing seating and group composition in the classroom, supporting teachers in creating optimal learning conditions for all students. We also collect anonymized usage statistics. This information is only used to understand how the service is used and to improve functionality. No personal data is stored, and no data is shared with third parties for marketing purposes.

• We follow the principle of data minimization and only collect information necessary to provide the service. The following types of personal data are collected: class nicknames (e.g., 8A), students’ first names and (optional) gender, seating and classroom layout for each saved chart, and the user’s name and email upon registration.

Processing is based on legitimate interest (GDPR Art. 6.1.f) and/or necessity to fulfill a contract (Art. 6.1.b).

Data is stored in Google Cloud Firestore (data processor), in data centers located in the EU (Belgium / europe-west). All storage is encrypted and remains within the EEA.

We take data security seriously and use Google Cloud Firestore (via Firebase) as our platform for storing and processing data. The service is hosted in data centers within the EU/EEA (europe-west, Belgium), and all data storage and transfers are encrypted. Google is certified under recognized information security standards, including ISO 27001, SOC 1, SOC 2, and SOC 3. A data processing agreement has been entered into via Google’s standard terms. We implement all reasonable technical and organizational measures to protect personal data against unauthorized access, modification, or deletion.

• Google Ireland Ltd. Firestore (Google Cloud Platform)
• Address: Gordon House, Barrow Street, Dublin 4, Ireland
• A data processing agreement is in place via Google’s standard terms.

Other technical services are only used for anonymized analytics or support purposes.

Data is stored as long as the user has an active account or until the user deletes the data.

• You have the right to access the data we have stored about you.
• You have the right to have data corrected or deleted.
• You may withdraw any consent at any time.
• You have the right to object to the processing of your data.

Contact support@klassekartet.no to exercise your rights.

If you believe our data processing does not comply with what we have described here, or otherwise violates data protection regulations, you may file a complaint with the Norwegian Data Protection Authority (Datatilsynet). However, we encourage you to contact us first so we can resolve the issue promptly. For more information on your rights and how to contact the authority, visit www.datatilsynet.no.

This policy was last updated on September 23, 2025. Major changes will be announced through the website or app.