No student academic records
Platform scope is intentionally defined to avoid collecting student academic or behavioral records.
Privacy Policy
Privacy by design, written for real school operations.
This policy explains what data PTA.AI processes, why we process it, and how we protect school communities through strict boundaries, limited collection, and transparent lifecycle controls.
Version v2.1Last updated March 4, 2026Effective March 4, 2026
Policy radar
Structured for quick board review and deep legal/compliance reference.
Version
v2.1
Sections
6
Policy actions for Privacy policy
Material update v2.1
Added detailed data category mapping, retention lifecycle clarifications, and request-rights handling.
Privacy at a glance
Purpose-limited collection
We collect only what is required for account management, billing, support, and site operations.
No data sale model
Community data is not sold to third-party advertisers or data brokers.
Structured retention controls
Data retention windows are bounded by operational need and policy obligations.
Export and deletion pathways
Organizations can request exports and deletion according to policy and operational constraints.
Auditable administration
Administrative actions that affect privacy-sensitive resources are logged for accountability.
Data we collect
We collect categories of data needed to operate the service and support PTA communication workflows.
Account and access data
Name, email, role assignments, session metadata, and access-control state.
Organization profile data
Tenant profile details, administrative contact channels, and approved organization metadata.
Billing and transaction data
Subscription state, billing events, invoice references, and payment verification metadata.
Support and operations data
Support thread content, request context, and diagnostic metadata needed to resolve issues.
How data is used
Data is processed for service delivery, support quality, security, billing, and legal compliance needs.
- Deliver core platform features and authenticated user experiences.
- Process and reconcile billing, subscriptions, and payment verification workflows.
- Provide support responses, diagnostic triage, and issue resolution.
- Enforce role-based controls, session safety, and platform abuse prevention.
- Generate operational logs and compliance evidence where policy requires.
What this means for your board: platform data use is tied to operating your service, not ad targeting or third-party resale.
Retention and deletion lifecycle
Retention periods are scoped to business and compliance requirements, with deletion pathways for inactive or obsolete records.
Active service period: data needed for ongoing operations is retained while your organization actively uses PTA.AI.
Post-cancellation window: export and recovery windows may apply before permanent deletion operations are completed.
Draft and stale records: inactive draft resources may be cleaned based on retention policy settings.
Legal retention exceptions: some records may be retained when required for legal, tax, or fraud-prevention obligations.
Rights and privacy requests
Authorized organization representatives can request access, correction, export, or deletion handling for supported data categories.
Access and correction
Request a review of stored organization data and correct outdated administrative information.
Export and portability
Request an export package for operational transition, archiving, or migration planning.
Deletion requests
Request deletion workflows for eligible data, subject to retention and regulatory constraints.
Response timeline
Privacy inquiries are acknowledged promptly and resolved according to request complexity and verification requirements.
Privacy FAQ
Version history
March 4, 2026 - Comprehensive policy expansion
Added detailed lifecycle, rights, and plain-language data category clarifications.
January 15, 2026 - Initial privacy publication
Baseline data-use policy published for school and district stakeholders.
Privacy requests and questions
Use these channels for policy questions, privacy requests, and district-level data governance reviews.