Privacy Policy

Depending on how you use the Hub, we may collect or maintain:

• Account information, such as your name, sign-in email address, account role, and profile image if one is provided through Google Sign-In. The Hub does not ask for, use, display, or store personal phone numbers in active member accounts, profiles, rosters, or directories.
• Family and school-community information, such as a child's name, classroom, parent or guardian relationships, staff assignments, and class-roster information supplied by the school, the PA, or an authorized family member.
• Information you provide and choices you make, such as roster display and visibility choices; volunteer interests, skills, and availability; email preferences; event RSVPs and sign-up claims; feedback and any optional identifying details submitted with it; private calendar-subscription settings; and resources, profile photos, biographies, or other content you are authorized to upload.
• Operational records, such as account and activity timestamps, sign-in session tokens, invitation and private calendar tokens, email recipient and delivery-status records, and records of protected class-resource preview and download requests. Authorized managers may see the account, resource, request type, and time associated with those protected-resource requests.

The Hub uses browser storage to keep you signed in, temporarily preserve invitation form choices during sign-in, and remember certain interface settings. Vercel and Supabase also process ordinary network and security information needed to deliver the service, which can include an IP address, browser or device details, request details, timestamps, and service logs. The Hub does not add IP addresses or device details to member profiles or its own activity records.

If you choose “Continue with Google,” the Hub receives the basic Google account information needed to sign you in: your name, email address, and Google profile image. We use this information to authenticate you, match you to an invitation or existing Hub account, display your account identity, and help protect account access.

The Hub does not request access to your Gmail messages, Google Drive files, Google Contacts, or Google Calendar. Basic Google account information is stored with the rest of your Hub account in Supabase and is handled under the same access, sharing, security, retention, and deletion practices described in this policy.

We do not sell Google user data, use it for advertising, use it to determine creditworthiness, or use it to train general-purpose artificial intelligence models.

We use information to:

• create and administer invite-only accounts and verify authorized access;
• provide class pages, rosters, calendars, sign-ups, RSVPs, resources, directories, and other Hub features;
• send invitations, confirmations, reminders, event updates, class-resource notices, and other messages requested through the Hub;
• coordinate PA activities and support guides, classrooms, and families;
• respond to questions and feedback, troubleshoot problems, prevent misuse, and improve the Hub's reliability and usefulness; and
• meet applicable safety, recordkeeping, or legal obligations.

The Hub is designed for a school community, so some information is shared inside the Hub according to a person's role, classroom membership, and privacy settings. For example, authorized members of a class may see that class's roster and resources; designated room parents, guides, PA leaders, or school administrators may receive broader access when needed to perform their responsibilities.

We may also disclose information:

• to service providers that operate the Hub on our behalf, including Supabase for authentication, database, and file storage; Vercel for hosting; Google for optional sign-in; and email-delivery providers for Hub messages;
• to Village Montessori School or authorized PA leaders when reasonably necessary to administer accounts, rosters, communications, events, or school-community safety; and
• when required by law or when reasonably necessary to protect a person, the school community, the Hub, or our legal rights.

We do not sell or rent personal information, and the Hub does not use personal information for targeted advertising.

If you submit feedback without optional identifying details, the message delivered to the PA does not include your Hub account identity. To prevent repeated submissions, the Hub temporarily keeps a one-way account-derived value and submission time for up to seven days; it does not store the underlying account identity with the feedback.

Where available, you can update profile information, choose whether your name or email appears to other families on a class roster, change email-notification preferences, unsubscribe from optional messages, and reset your private calendar-subscription link so the prior link stops working.

You may also ask us to provide access to, correct, deactivate, or delete information associated with you or your child. Email contactvmspa@gmail.com from an address we can verify. We may need to confirm your identity and relationship to the record before completing a request. Certain information may be retained when necessary for school operations, security, record continuity, legal obligations, or the rights of others.

You may disconnect the Hub from your Google Account through your Google Account's third-party connections settings. Disconnecting Google stops future Google sign-in access but does not by itself delete your Hub account or information already stored in the Hub; contact us to request that separately.

The Hub is intended for use by parents, guardians, school staff, and authorized adult volunteers—not for children to create or operate their own accounts. The Hub does maintain limited information about students, such as names, classroom assignments, family relationships, and authorized school-community content, so that adult users can access the correct class and family features.

We do not knowingly collect personal information directly from a child through a child-operated account. A parent or guardian who has a question or request about a child's information may contact us using the address below.

The Hub does not currently apply one fixed deletion schedule to every type of record. We keep information for current and historical school-year operations, account and roster administration, communications, security, record continuity, and legal obligations for as long as it is reasonably needed for those purposes. Deactivating an account prevents ordinary Hub access but does not delete its records.

Deletion requests are reviewed based on the record, the requester's relationship to it, school-community needs, and any applicable obligations. Even when the Hub deletes a record, copies may remain for a period in service-provider backups or security logs under those providers' retention practices. You may request deletion as described above.

We use safeguards designed for the sensitivity of this school-community information, including HTTPS encryption in transit, invite-only account creation, role- and class-based access controls, private file-storage links, logs of email delivery and protected resource-link requests, and limited administrative privileges. Our service providers also maintain security controls for the systems they operate.

No online service can guarantee absolute security. Please use a strong password, protect private calendar and one-click action links, and contact us promptly if you believe an account or link has been misused.

The Hub links to services operated by others, such as Google, PayPal, Facebook, GroupMe, wishlists, maps, and personal calendar applications. If you follow a link or choose to use one of those services, its privacy practices apply. The Hub does not collect or store payment-card details for contributions made through an external payment service.

We may update this policy as the Hub or our practices change. We will post the revised policy here and update the date at the top. If a change materially affects how personal information is handled, we will provide additional notice when appropriate.