This is a statement of your rights as a parent or guardian when your family's educational data is processed by Homeschool Platform on behalf of your Organization. The language is modeled on the strictest US student-data-privacy standard (New York Education Law §2-d) so that the protections described here apply regardless of which state you live in.
Your Organizationis the entity responsible for your family's data and the relationship with you. Homeschool Platformis the software vendor your Organization uses. Both have obligations to you; this document covers ours.
Your rights
1. Right to be informed
You have the right to know what data we collect about your family, why we collect it, who can see it, and how long we keep it. See our What We Collect page for the complete list, and our Privacy Policy for the full handling details.
2. Right to access
You may request a copy of all data we have about your family. Your Organization's admin has full access and can provide it directly. You may also email privacy@homeschoolplatform.com for a platform-side export. We respond within 30 days.
3. Right to correction
If any data we hold is inaccurate, you may request correction through your Organization's admin. Once corrected in the live system, the update flows immediately. Note that finalized archives (transcripts, IHIP, etc.) are immutable by design — corrections after finalization require issuing a new version, which supersedes the prior one.
4. Right to deletion
You may request deletion of your family's data. We honor these requests subject to:
- State retention laws — most states require permanent retention of student transcripts and similar records. We comply with those laws even when a deletion request is received.
- Your Organization's active business needs — if you're currently enrolled and your Organization needs to retain records for ongoing operations, deletion may be limited until you withdraw.
- Legal holds — data subject to litigation or audit cannot be deleted.
Where deletion is permitted, we use a 30-day grace period (recoverable) followed by permanent deletion.
5. Right to download (portability)
You may download all your family's finalized archives as a single ZIP from your Archives page at any time. Each finalized archive is also emailed to you at the moment of finalization — so you have an off-platform copy regardless of what happens to the platform.
6. Right to know about breaches
In the event of a data breach involving your family's information, we will notify your Organization within the timeframes required by applicable law (typically within 72 hours of discovery). Your Organization is responsible for notifying you directly. In cases where Homeschool Platform has a direct relationship with you (e.g., archive access after your Organization has left the platform), we will notify you directly.
7. Right to know who has access
Personal data is accessible only to:
- You — full access to your family's data
- Your Organization's admins and instructors — scoped to their role; instructors see only students in their classes
- Homeschool Platform staff — only when you initiate a support request or to investigate a security incident; all access is logged in an audit trail you can request
- Our subprocessors (Supabase, Stripe, Resend, Vercel) — to operate the platform infrastructure; they are contractually bound to the same privacy commitments
- Government or legal authorities — only with a lawful subpoena, court order, or equivalent legal process
Your data is never shared with:
- Other parents at your Organization (beyond your own family)
- Other Organizations on the platform
- Advertisers, marketers, or data brokers
- AI model trainers
8. Right to know how data is secured
We protect your family's data with:
- Encryption in transit (TLS) and at rest
- Row-level access controls in the database
- Audit logging on sensitive operations
- Tamper-evident sha256 hashes on finalized archives
- Regular security review and threat monitoring
- No card data on our servers (payments processed directly by Stripe)
9. Right to know how complaints are handled
Direct complaints about your data should go first to your Organization's admin — they are the controller of your data. For platform-side complaints, contact privacy@homeschoolplatform.com.
Complaints involving alleged violations of state student-data-privacy laws may also be filed with your state's attorney general or department of education.
10. Right to be told if we leave
If Homeschool Platform discontinues service, we commit to at least 180 days' notice to families with archived records, plus bulk-export tools during the notice period. Finalized records already emailed to you remain in your possession regardless.
11. Right to be told if ownership changes
If Homeschool Platform is acquired, merges, or sells assets, we will notify you in advance and provide an opportunity to delete your archived records before the transfer takes effect. Any successor must agree to maintain these protections.
Our commitments as the processor
Homeschool Platform commits to:
- Never selling your family's data, ever
- Never using student data for advertising
- Never training AI models on student data
- Collecting only the minimum data needed to operate
- Protecting data with industry-standard security practices
- Notifying Organizations of breaches within legal timeframes
- Allowing data export at any time
- Respecting deletion requests within state-law limits
- Maintaining audit logs of who accessed what and when
For Organizations
Organizations using Homeschool Platform are free to adopt these protections as their own published notice, or extend them with state- specific language. We provide this document as a transparent baseline; the obligations to families ultimately flow through your Organization, which is the controller of your data.
Contact
Privacy questions: privacy@homeschoolplatform.com
Security disclosures: security@homeschoolplatform.com
Data subject requests: privacy@homeschoolplatform.com