Privacy for schools

The gallery is optional

The parade never requires the gallery. The gallery is where student data lives. A parade run without the gallery sends no student data to the company.

District privacy mode

When a school turns privacy mode on, the album is limited to signed-in school members and approved followers. Download, visitor sharing, comments, public listing, and embed stay off, and teacher names stay off tiles. The switch defaults on for a New York public school, BOCES, or charter. Libraries, day cares, and private schools default off.

Who can upload

The upload page is for staff and families. There are no student accounts.

No face processing on albums

Album photos are not scanned for faces. Parade gallery delivery does not use a face crop.

Where data is processed

Photos and videos in the gallery are stored by Cloudinary and Turso. Shopify handles checkout and sign-in. Email goes out through Zoho ZeptoMail. Cloudflare checks uploads for bots and runs the network the site is served from. It stores no album data.

Deletion

An organizer or district can request album export and deletion. Deletion completes within 60 days and issues a deletion certificate.

Breach notice

District notice is within 72 hours. The contact chain is not posted yet.

No marketing use

No student personal information is collected, used or disclosed for marketing or for sale.

Paperwork kit

• Student data privacy addendum. Not posted.
• National DPA, New York package first. Not posted.
• Data security and privacy plan mapped to NIST CSF 2.0. Not posted.
• CoSN K-12CVAT Lite answers. Not posted.
• VPAT 2.5 (WCAG 2.1 AA). Not posted.
• Subprocessor list. Not posted.
• Certificate of insurance. Not posted.
• W-9. Not posted.
• Family notice with opt-out. Not posted.