Privacy Policy

Effective June 15, 2026. Template — review with counsel before publishing.

1. Summary

We collect only the information needed to run the platform for teachers, paras, and families.
We do not sell personal information. We do not show ads. We do not use student data to train AI models.
Schools and districts are the "data controllers" for student records; Spectrum Hub acts as a service provider under FERPA, state student-privacy laws, and any signed Data Processing Agreement.

2. Information we collect

Account information: name, email, role (teacher / para / parent), password hash.
Student records (entered by educators or parents): first name, date of birth, IEP goals, behavior logs, attendance, notes, photos or media you upload.
Communications: messages between teachers, paras, and parents within the platform.
Technical: IP address, browser type, device, log timestamps for security and abuse prevention.

3. How we use information

To operate, maintain, and improve the service.
To authenticate users and enforce role-based access.
To send account, security, and service notifications.
To respond to support requests and investigate abuse.
To comply with legal obligations.

4. Children's privacy (COPPA, FERPA)

Spectrum Hub is for adults only — students do not create accounts or log in. Educators and parents enter information about students in their care under the school's FERPA authority or as the child's parent or guardian. If you believe a child has provided information to us directly, contact privacy@spectrumhubspace.org and we will delete it.

5. How we share information

We do not sell personal information. We share information only with:

Authorized users at your school or family based on role-based access controls.
Service providers who help run the platform under written contracts: cloud hosting, database, email delivery, error monitoring.
Legal authorities when required by law, subpoena, or court order, and only the minimum necessary.
Successors in a merger or acquisition, subject to this Privacy Policy.

6. Subprocessors

Current subprocessors are listed at /legal/security. We will give 30 days' notice before adding a new subprocessor that processes student records.

7. Retention

Active student records are retained while the school account is active.
On request from a school district, we will export and delete student records within 30 days of contract termination.
Parent and educator accounts can be deleted at any time from Settings.
Backup copies are purged within 90 days.

8. Security

See our Security page. We use encryption in transit and at rest, role-based access control, row-level database security, and audit logging.

9. Your rights

Depending on your state and role, you may have the right to access, correct, delete, or export your personal information; to opt out of certain sharing; and to appeal a denial. Email privacy@spectrumhubspace.org to make a request. We respond within 30 days.

10. California (CCPA / CPRA), Colorado, Connecticut, etc.

We do not sell personal information and do not engage in cross-context behavioral advertising. We honor verifiable consumer requests as described above.

11. International users

Spectrum Hub is operated from the United States. We do not currently market the service outside the US.

12. Changes

We will post material changes here and notify account holders by email at least 14 days before they take effect.

13. Contact

Data Protection Officer: privacy@spectrumhubspace.org.