Summary (for people who don't read privacy policies)

We don't sell your data. Ever. Not to advertisers, not to brokers, not to anyone.
We don't train AI on your data. Student, parent, and staff information stays in your school.
You own your data. Export it any time, in a standard format. Delete your account, and we delete your data.
We collect the minimum needed to run the service you signed up for.

1. Who we are

Campusless School ("we", "us", "our") is operated by [REPLACE: Registered Business Name], registered in [REPLACE: Jurisdiction]. This Privacy Policy describes how we collect, use, and protect personal information when schools and their users interact with our services.

2. Who this applies to

This Policy covers two types of users:

School customers — administrators, teachers, finance staff, and other school users with accounts on our platform.
School users (data subjects) — students, parents, and other individuals whose data schools store in Campusless.

Schools are the data controllers for their students' and parents' information. We are the data processor — we process that data on their behalf.

3. What data we collect

From school administrators and staff (directly)

Name, email, phone number, role, school name
Account login credentials (passwords stored as salted hashes)
Usage data (pages visited, features used, logins) for product analytics

From schools about students and parents

Schools upload or generate this data in the course of normal operations:

Student records (name, date of birth, grade, parent contacts, academic history)
Attendance, marks, and behavior records
Fee invoices, payment records, and financial details
Any documents the school attaches to student records

4. How we use your data

To run the service you signed up for.
To send service-related emails (onboarding, billing, security alerts). You can't opt out of these — they're required for service operation.
To improve the product — aggregated, anonymized usage data only.
For marketing emails — only with your explicit opt-in. Unsubscribe any time.

5. What we do not do

We do not sell, rent, or trade personal information to third parties.
We do not use student data to train AI models.
We do not use your data for targeted advertising on other platforms.

6. Where your data is stored

Data is hosted on Tier-1 cloud infrastructure with encryption in transit (TLS 1.2+) and at rest (AES-256). Data center regions available: [REPLACE: list specific regions].

7. Who we share data with

We share data only with:

Sub-processors (hosting, email delivery, payment processing) under data processing agreements. Full list: [REPLACE with sub-processor list URL].
Law enforcement when legally required. We notify customers unless legally prohibited.
Your authorized users — e.g., a school admin sees their school's data.

8. Your rights

Depending on your jurisdiction, you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Delete your data (subject to legal retention requirements)
Export your data in a portable format
Object to certain uses of your data
Withdraw consent for marketing

To exercise these rights, email privacy@campusless.com or contact your school's administrator. We respond within [REPLACE: jurisdiction-specific response window, e.g. 30 days for GDPR].

9. Children's privacy

Campusless is a B2B product sold to schools. We do not collect data directly from children. Schools act as the data controller for all student data they store in Campusless and are responsible for obtaining parental consent where required by applicable law (COPPA in the United States, GDPR Article 8 in the EU, and equivalents elsewhere).

10. Data retention

We retain your data while your school's account is active and for [REPLACE: retention period, e.g. 90 days] after account cancellation, to allow export and reversal requests. Longer retention may apply where required by law.

11. Changes to this Policy

We'll notify you by email and on this page if we materially update this Policy. The "Last updated" date at the top reflects the most recent revision.

12. Contact

Questions: privacy@campusless.com.
Data Protection Officer: [REPLACE: DPO name/contact if required].
Mailing address: [REPLACE].

Privacy Policy