Privacy Policy — TardyTrack

TardyTrack ("we", "our", or "us") is committed to protecting the privacy of the schools, staff, and students who use our platform. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

We collect information necessary to provide the TardyTrack service:

Account information: Name, email address, and password for staff and administrator accounts.
Student records: Student names, student ID numbers, grade level, and tardy/checkout records entered by school staff.
Organization information: School name and campus details.
Usage data: Log data such as pages visited, features used, and timestamps.
Payment information: Billing is processed by Stripe. We do not store credit card numbers or full payment details on our servers.

2. How We Use Your Information

To provide and operate the TardyTrack platform
To send automated email alerts when students reach tardy thresholds
To generate reports for authorized school staff
To process subscription payments
To respond to support requests
To improve and maintain the service

3. Student Data and FERPA

TardyTrack handles student records on behalf of schools. Schools are responsible for ensuring they have appropriate authorization to enter student information into the platform. We act as a service provider to the school and do not sell, share, or use student data for any purpose other than providing the TardyTrack service.

Student data is accessible only to authenticated staff and administrators within the same school organization.

4. Data Sharing

We do not sell your data. We share data only with trusted third-party service providers who help us operate TardyTrack:

Supabase — database and authentication hosting
Stripe — payment processing
Resend — transactional email delivery

Each provider is bound by their own privacy and security obligations.

5. Data Security

We use industry-standard security practices including encrypted connections (HTTPS), row-level security on our database, and role-based access controls. Only authorized users within your organization can access your school's data.

6. Data Retention

We retain your data for as long as your account is active. If you cancel your account, you may request deletion of your data by contacting us at support@tardytrack.com. We will process deletion requests within 30 days.

7. Your Rights

You have the right to:

Access the data we hold about your organization
Request correction of inaccurate data
Request deletion of your data
Export your data

To exercise any of these rights, contact us at support@tardytrack.com.

8. Cookies

TardyTrack uses essential cookies and local storage to maintain your login session. We do not use advertising or tracking cookies.

9. Children's Privacy

TardyTrack is a tool for school staff and administrators. Student-facing features (such as the check-in portal) collect only the minimum information needed (student name or ID) to log a tardy or checkout request. We do not knowingly collect personal information directly from children.

10. Changes to This Policy

We may update this policy from time to time. We will notify account administrators of significant changes via email. Continued use of TardyTrack after changes are posted constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy, contact us at:
support@tardytrack.com