Accept the Data Processing Agreement (DPA)

Most states and any non-US jurisdiction require a written Data Processing Agreement between a daycare (controller of personal data) and their software provider (processor). NestliCare's DPA spells out what we do with family, staff, and child data on your behalf.

It's a one-time acceptance. After you sign, you're done.

When you'll see it

You'll be redirected to /dashboard/accept-dpa after login if:

• Your organization requires a DPA (most do — the engineer team toggles this per-org based on jurisdiction), AND
• No one from your org has accepted yet

The rest of the dashboard is locked until acceptance. You'll see a banner: "Please accept the Data Processing Agreement to continue."

Accept the DPA

1. Go to /dashboard/accept-dpa (or follow the redirect).

2. Read the agreement — six sections covering:

   • What we process (names, contact info, attendance records, etc.)
   • Why (to deliver the service, for licensing compliance, fraud prevention)
   • Who we share it with (payment processors, email providers — named explicitly)
   • How long we keep it
   • Your rights and ours
   • Security measures

3. Scroll to the bottom — the I agree checkbox only enables after you've scrolled through the full text.

4. Check the box.

5. Click Accept & Continue.

Screenshot pendingThe Data Processing Agreement with the agree checkbox and Accept and Continue button

What we record

For the audit trail, we store:

• When you accepted (dpaAcceptedAt timestamp)
• Who accepted (dpaAcceptedByUserId — your user ID)
• From where (dpaAcceptedByIp — your IP address at acceptance)
• Which version (dpaVersion — we version the DPA; each update may require re-acceptance)

You can request this record at any time — email [email protected] with your org slug.

Who needs to accept

Only one super admin or center admin needs to accept on behalf of the whole organization. Everyone else logs in normally — the acceptance is org-level, not per-user.

If two admins are logged in simultaneously when the DPA is rolled out, whichever of them accepts first counts; the other sees the normal dashboard once they refresh.

Printable copy

After acceptance, the DPA stays available at Settings → Legal → Data Processing Agreement (if we've shipped that page yet — contact support if you need a PDF in the meantime).

When the DPA gets updated

If we materially change the DPA (adding a new subprocessor, changing retention), the version bumps and you'll see the acceptance screen again at login. Review the diff (shown at the top of the new version) and re-accept.

Troubleshooting

Stuck on the DPA screen after clicking Accept. Network hiccup. Refresh the page — if the dashboard loads normally, the acceptance went through.

Can't check the "I agree" box. You haven't scrolled through the full text yet. Scroll all the way to the bottom; the checkbox enables.

Logged in as a teacher and can't see the DPA screen. Teachers and parents don't need to accept — only admins. If you see a "please contact your admin" banner, ask your super admin or center admin to log in and accept.

Need to un-accept or withdraw. You can't do this from the UI; data processing is essential to the service. To terminate service, export your data (contact support) and close your account — that voids the DPA by termination.

Question about a specific clause. Email [email protected]. We don't adjudicate in-app; real questions go to our legal team.