School Core Privacy Notice
Version 2026-10-15
Registration information
Registration collects the school name, administrator name, email, password, selected billing cycle, and acceptance of these terms. Passwords are stored as hashes. Pending registrations use an expiring, single-use verification link sent through Resend. No school account is created before confirmation.
How information is used
These details provide and secure your account, verify email ownership, provision the school, administer trial and paid access, and record acceptance and billing actions. Session cookies support sign-in and selection of your school. Shared rate limits use keyed hashes rather than storing raw email or IP values in rate-limit records.
Service providers and school data
Hosting and database services process account information to run the service. Resend receives the email address and verification message to deliver email. After confirmation, a welcome email provides the school login link and code. When trial reminders are enabled, verified School Admins also receive service notices about the school’s trial end date. Delivery records retain the recipient, message, trial date and provider acceptance status so welcome emails and reminders can be retried safely and checked for duplicates. If the school chooses online payment, the payment provider processes checkout information. Optional integrations process information when separately configured by the school.
The school controls the student, guardian, staff, academic, and financial records it enters and the permissions it grants. School administrators should establish their own notices and authorization before entering those records.
Retention and requests
Unconfirmed links expire after 24 hours. Expired pending registrations and expired rate-limit records are removed by registration cleanup. Active account, school, billing, and audit records persist beyond trial expiry; expiry does not delete them. Contact the service provider through its published support channel to request access, correction, export, deletion, or information about retention, hosting locations, and privacy arrangements. Billing and audit obligations may affect deletion.