Privacy Policy (Schools)
The schools-facing privacy policy in reviewable PDF form — data collected, safeguards, breach notice, retention, and deletion — including the July 2026 Update Notice.
What is processed (complete enumeration)
Minimized enrollment fields: guardian contact and preferred language; student name; seat and application status including the school system’s record identifiers; grade level and campus; waitlist position; registration-paperwork checklist status; an IEP yes/no flag (plus whether a file was attached); one attendance category for a school day on the attendance product, from a fixed eight-value vocabulary your own status text is normalized to at upload, never the reason for an absence and never the free text your export carried; staff enrollment notes (SSN-redacted); the question text a guardian sends the assistant, whether through the widget, a text, or WhatsApp; and enrollment call/message outcomes and brief summaries. A “strictly prohibited” list bars academic records, report-card grades, SSNs, and health data from ever being stored. Registration documents a family emails your office are identified from the file name, forwarded to your staff, and never stored by us — only the checklist status (which document is in or missing) persists. No document is ever opened, read, or sent to an AI model. Confirming a document is the right one for the right child is your staff’s judgement, in your own system.
Subprocessors
The full disclosed list — Twilio, Meta Platforms (the WhatsApp network, where you enable that channel), SchoolMint, Turso, Vercel, Google Cloud (Vertex AI, marked as an AI model provider, plus Sheets), AgentMail/Amazon SES — with not less than 30 days’ notice before adding or replacing one and an opportunity for the school to object. Amazon Web Services (Amazon Bedrock) is the second AI model provider in the schedule: it carries the staff-note send/hold review, at a US Processing Endpoint with zero data retention; Google Cloud carries the family Q&A assistant, the staff support assistant and school-document reading. The current list is published at /legal/subprocessors.
Breach notice
July 2026 update: our operational standard is notice to the affected school within 48 hours of detection — well inside the 7-calendar-day maximum of 8 NYCRR § 121.10(a).
Automated monitoring
July 2026 update: automated security monitoring runs on a scheduled cadence (hourly, as a cloud-scheduled job on our production hosting platform) across the systems that store or process Student Data.
Retention & deletion
Inactive family records are automatically deleted after 90 days; consent and opt-out records are kept only as long as the law requires; all Student Data is deleted or returned within 30 days of contract end.