Privacy Policy

SchoolPTA is a hosted platform that gives elementary school PTAs a modern website with a calendar, volunteer sign-up, news, and sponsor management. Each PTA is a separate tenant on the platform with its own data and admins. The platform is operated by ChAImp, a Washington-based technology-for-nonprofits initiative.

• Account info — name and email from Google or the email address you sign in with. We do not store passwords; sign-in is handled by Google OAuth or one-time email magic links.
• Volunteer sign-ups — family name, email, and an optional phone number you provide when you claim a slot.
• Volunteer clearance — the level and approval date you record for your school-district volunteer background check.
• Chatbot conversations — if you use the AI assistant, your messages and our responses are stored to improve answers and detect knowledge gaps.
• Usage metrics — anonymous page views and performance data via Vercel Analytics.

Your data is used only to run the PTA features you signed up for: showing your sign-ups, contacting you about events you volunteered for, displaying public-facing PTA content, and improving the platform's reliability. We do not sell personal information.

• You — sign-ups you create, clearance you recorded, chat history from your sessions.
• Your school's PTA admins — your sign-up roster entries for events at that school, with name + email + phone visible so they can contact you.
• Platform super-admins — access to system-level data for support and abuse prevention, never for marketing.
• Service providers — Supabase (database + auth), Vercel (hosting), Resend (email), Anthropic (AI assistant). Each is bound by their own privacy and security terms.

Data from one school is not shared with another. Each tenant row is filtered by school ID on every read and write.

We set a small number of first-party cookies for sign-in sessions. There are no third-party advertising cookies and no cross-site tracking. Anonymous performance metrics come from Vercel Analytics.

All traffic is encrypted in transit (HTTPS). Database access is restricted by row-level security and per-school filtering. Service-role keys live only in server-side environment variables and never reach the browser.

Account and sign-up records are kept while your school's PTA uses the platform. You can request deletion of your data at any time by emailing us; we will remove your records within 30 days unless retention is required by law.

SchoolPTA is intended for adult family members and PTA volunteers — not children. We do not knowingly collect personal information from anyone under 13. If you believe a child has registered, contact us and we will delete the account.

You can request a copy of your data, ask us to correct inaccuracies, or ask us to delete your account. We honor CCPA, GDPR, and similar rights regardless of where you live.

Material changes to this policy will be announced on the site. The "Last updated" date at the top of this page always reflects the current revision.

Email support@schoolpta.org with privacy questions, deletion requests, or to report a concern.