Skip to main content
Legal

Privacy Policy

Effective Date: July 12, 2026Version: 2026-07-12
Your privacy matters to us. This policy is our commitment to transparency — it explains exactly what data SchoolStacker collects, why we collect it, how we protect it, and what control you have over it. We believe privacy is a right, not a feature.

1. Information We Collect

We collect account information (names, emails, phone numbers, and organizational roles), school operational data (attendance, grades, fee records, and schedules), and technical telemetry data (device signatures, browser types, IP addresses, and user activity logs).

2. How We Use Information

We use this information to operate and maintain the Platform, verify transactions and payments, dispatch vital system notifications (including SMS alerts, emails, and push reports), deliver customer support, and satisfy applicable legal mandates.

3. Children's Data

Student information is managed exclusively on behalf of and at the instruction of the enrolling school, which serves as the data controller. The school handles obtaining necessary parental consent under regional privacy and educational regulations.

4. Data Sharing & Disclosure

We never sell personal data. Information is disclosed solely to: (a) authorized administrators and staff of the subscribing school, (b) PCI-compliant processors (such as Cashfree) to settle fee transactions, and (c) trusted hosting partners operating under strict confidentiality covenants.

5. Data Security Measures

We implement enterprise-grade security controls, including schema-level database isolation, AES-256 encryption at rest, and TLS 1.3 transport security.

Security Disclaimer: While we employ industry-standard cloud safeguards to protect your data, no method of digital transmission or storage is 100% secure. We guarantee immediate reporting in the event of a suspected security breach.

6. Data Retention Policy

Personal information is kept for the duration of the school's active subscription plan, plus any grace or archival periods required to comply with local financial audit or educational record-keeping laws.

7. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or request deletion of your personal records. Since the school is the data controller, all student and teacher request claims should be routed to the school administrator or sent to legal@stemlen.com.

8. Cookies & Tracking

Our public website and platform use cookies to sustain active login sessions, capture usage analytics, and optimize performance. You can disable or filter cookie storage options in your web browser preferences.

9. International Data Transfers

Data may be hosted on secure server nodes outside your country of origin. Stemlen ensures all cloud transfers comply with legal and security compliance measures to safeguard information.

10. Changes to this Policy

We reserve the right to revise this Privacy Policy. Subscribed school administrators will receive email notifications detailing any material updates or revisions.

11. Contact Information

For privacy inquiries, data requests, or policy issues, please contact our data compliance desk directly at legal@stemlen.com.