# WYG School Export and Deletion Procedure

**Status:** Pilot operating procedure; test before student launch  
**Updated:** August 23, 2026  
**Request channel:** WYG workspace or wygplaybookapp@gmail.com

## 1. Who may request

An active School owner may request program deletion. An active owner or coach may create and download a School export. Parent and student requests should ordinarily be sent to the School privacy contact so the School can verify identity, authority, and applicable education-record duties. WYG acts only on verified School instruction unless law requires another path.

## 2. Export procedure

1. Authorized staff open **Program settings → Data rights → Download program data**.
2. WYG records the export request in the program audit history.
3. WYG creates a portable JSON export containing program settings, roster, playbooks, plays and versions, tests and versions, assignments, attempts, answers, drawing reviews, messages, provider-file metadata, and audit events.
4. The export is delivered only to the authenticated authorized user. Private source-file binaries are handled separately through a verified support request.
5. The School stores and transmits the export under its own security and records rules.

## 3. Deletion request

1. The program owner submits **Request program deletion** and enters the confirmation phrase, or the named School privacy contact sends a written request.
2. WYG records a pending request without immediately destroying records.
3. WYG acknowledges the request within two business days and verifies requester authority through the active owner, signed School contacts, or another reasonably secure method.
4. WYG offers an export and confirms scope, deadline, legal holds, and whether the School wants deletion or transfer.
5. A second authorized WYG reviewer confirms the program identifier and approved scope before execution.

## 4. Execution

WYG suspends new School use at the agreed time, revokes active sessions, exports records if requested, and deletes the program-scoped database records and private objects. Cascade behavior is verified for roster memberships, invitations, playbooks, plays and revisions, tests and versions, assignments, attempts, answers, drawing reviews, messages, uploads, and audit records. Shared technical records are deleted or de-identified when they can no longer identify the School or student.

Target completion is 30 calendar days after verified instruction unless the signed agreement selects a shorter period. Any provider backup/replica expiration occurs within [CONFIRM PROVIDER PERIOD].

## 5. Verification and certificate

WYG runs post-deletion checks against the program identifier and private object prefix, records the operator and reviewer, and sends the School a certificate stating request date, scope, completion date, provider/backup timing, and any lawful exception. The certificate contains no student content.

## 6. Correction, restriction, and stop-collection requests

The same verification path applies when the School requests correction, restriction, or prevention of further collection. WYG will correct a verified factual inaccuracy and confirm completion within the legally required period. Deactivated athlete accounts lose access immediately; any separate deletion follows School instruction and recordkeeping requirements.

## 7. Failed or disputed requests

WYG will not delete data when authority or scope cannot be verified. It will explain the missing information to the requester and notify the School privacy contact. A dispute is escalated to WYG's privacy lead and, where needed, counsel; affected data remains restricted while resolved.