Privacy Policy

1. What we collect

We only collect what we need to run SchoolRelay. Here is the whole list.

If you have an account: your email address, an optional display name, the logos and images you upload, and everything you post to your school pages — announcements, events, links, volunteer shifts, and sponsor info. We also keep a log of admin actions, so a school can see who published or deleted what and when.

If you never made an account: plenty of parents use SchoolRelay without signing up, and we still end up holding some of your info. If you sign up for a volunteer shift, we store the name and email you typed. If you subscribe to a school's email digest, we store that email address. If you turn on push notifications, your browser gives us a notification address for that device.

If you just visit a school page: we record that the page was viewed, along with your browser type and the site you came from, if any. No name, no account, no cookie.

If you delete a school and tell us why: we ask an optional question on the way out. Your answer is stored without your name or email attached, next to a few facts about the school itself — how long you had it and how much you'd added. We only store your email address if you tick the box asking us to follow up. Skipping the question is fine and doesn't hold anything up.

2. How we use it

We use this info to run your school page, send the emails and notifications people asked for, and keep your account secure. We don't use your data for advertising, and we don't build behavioral profiles. This is a tool for schools, not a data-mining project.

We also give school administrators engagement numbers — page views, how many people opened the last digest, how many read an announcement. Admins see counts, never a list of names.

We want to be straight with you about one thing, because “anonymous analytics” gets thrown around a lot. For the first 90 days those engagement records are tied to a person: a read is linked to an account, and a digest open is linked to your subscription rather than your email address — we changed that deliberately, so your address stops travelling through the web request that records an open. That is what lets a school send a follow-up to families who missed an important update. After 90 days we permanently collapse all of it into plain daily counts with no account, email, or browser info attached, and delete the detailed records. What is left after that is genuinely anonymous and cannot be traced back to anyone. Because the cleanup job runs monthly, a given record can live up to about four months before it is reduced.

3. Where your data lives

Your account and school content are stored with Supabase, our database and file storage provider. SchoolRelay is hosted on Cloudflare. We use Resend to deliver email — digests, address verification, volunteer confirmations, and reminders — which means Resend handles the addresses those messages go to. If your school pays for a Pro plan, Stripe handles the payment and holds the card details; we never see or store a card number.

Those four companies are the only outside services involved.

Cloudflare also gives us a basic traffic count for the site — how many people landed on a page, roughly where from. It loads a small script from Cloudflare's own domain, and you can see it if you look. We're telling you because we'd rather you heard it from us than found it: it sets no cookies, doesn't follow anyone between websites, and doesn't build a profile of you. Beyond that we run no advertising trackers and no outside analytics companies.

4. How long we keep things

Your school's content stays up as long as you want it there. For everything else we clean up on a schedule, so old personal info doesn't pile up.

Engagement records lose their personal details after 90 days and become anonymous daily counts, as described above. Volunteer signups lose the name and email about 30 days after the shift they were for; the school keeps only a count of how many people helped. Email subscriptions stay until someone unsubscribes or the school removes them. Answers to our “why are you leaving” question we keep, because the whole point is spotting patterns over years rather than weeks — but they carry no name or email unless you asked us to follow up.

Deleted schools come down from the site immediately. We hold the underlying records for 30 days, because “I deleted the wrong school” is a thing that happens and we would rather be able to put it back. After 30 days the school and everything attached to it — announcements, events, volunteer signups, subscriber lists, uploaded logos — are permanently deleted and cannot be recovered. If you'd rather we purge it all immediately, just ask.

5. Sharing your info

We don't sell your personal information or share it with advertisers. Anything you publish to a public campus or group page is public by design, so anyone with the link can see it. Volunteer signups are visible to that school's administrators, which is the point — somebody has to know who is bringing the cupcakes. Beyond that, we only disclose info if we are legally required to do so.

6. Children and school communities

SchoolRelay accounts are for adults — administrators, parents, and school staff. We don't knowingly collect personal information from children under 13.

If you run a school page, the content you publish is your responsibility, and that includes anything about students. In plain terms: be careful posting student names, photos, or class lists without the permission your school requires. Laws like FERPA and COPPA may apply to your group, and you know your school's rules better than we do.

7. How to leave or delete your info

Your school pages: delete a school from the dashboard and it comes down, as described in section 4.

Your account: email us at [email protected] from the address you signed up with and we'll delete it.

If you never had an account: every digest email has an unsubscribe link, which stops the mail but keeps a record that you opted out. Your name and email come off a volunteer signup on their own after the shift. If you want your name and email removed from our records entirely rather than just unsubscribed, email us and we'll take care of it — you don't need an account to ask.

8. Cookies

We only use the essential cookies needed to keep you signed in to your account. We don't use marketing or tracking cookies, and there's no cookie banner because there's nothing to consent to.

9. Questions?

If you have questions about your privacy or want to request account deletion, we're here to help at [email protected].

10. Governing law

This policy is governed by the laws of the State of Florida, without regard to its conflict-of-law provisions. Any disputes arising under this policy will be resolved in the courts located in Florida.

11. Related policies

This privacy policy is part of our legal framework alongside our Terms of Service. Together they govern your use of SchoolRelay.