This is a statement of your rights as a parent or guardian when your family's educational data is processed by Homeschool Platform on behalf of your Organization. The language is modeled on the strictest US student-data-privacy standard (New York Education Law §2-d) so that the protections described here apply regardless of which state you live in.
Your Organization is the entity responsible for your family's data and the relationship with you. Homeschool Platformis the software vendor your Organization uses. Both have obligations to you; this document covers ours.
Your rights
1. Right to be informed
You have the right to know what data we collect about your family, why we collect it, who can see it, and how long we keep it. See our What We Collect page for the complete list, and our Privacy Policy for the full handling details.
2. Right to access
You may request a copy of all data we have about your family. Your Organization's admin has full access and can provide it directly. You may also email legal@homeschoolplatform.com for a platform-side request. We respond within the time required by applicable law.
3. Right to correction
If any data we hold is inaccurate, you may request correction through your Organization's admin. Once corrected in the live system, the update flows immediately. Note that finalized archives (transcripts, IHIP, etc.) are immutable by design — corrections after finalization require issuing a new version, which supersedes the prior one.
4. Right to deletion
You may request deletion of your family's data. We honor these requests subject to:
- Your Organization's record-keeping obligations — your Organization decides which records it must keep under state law, and deletion of those records is its decision.
- Your Organization's active business needs — if you're currently enrolled and your Organization needs to retain records for ongoing operations, deletion may be limited until you withdraw.
- Legal holds — data subject to litigation or audit cannot be deleted.
Where deletion is permitted, deleted data may be recoverable for a short period before it is permanently removed.
5. Right to download (portability)
You may download your family's finalized archives as a single ZIP from your Archives page while your Organization uses the platform. Each finalized archive is also emailed to you at the moment of finalization — so you have your own copy. If your Organization leaves the platform, its records are available to it for 30 days after its subscription ends and may then be deleted, so keep the copies you receive.
6. Right to know about breaches
In the event of a data breach involving your family's information, we will notify your Organization as described in our Data Processing Addendum. Your Organization is responsible for notifying you.
7. Right to know who has access
Personal data is accessible only to:
- You — full access to your family's data
- Your Organization's admins and instructors — scoped to their role; instructors see only students in their classes
- Homeschool Platform staff — only to provide support, maintain or secure the platform, or investigate a security incident
- Our service providers (Supabase, Vercel, Stripe, Resend, Cloudflare, Sentry, Google Fonts) — only to operate the platform, under their own data-protection terms
- Government or legal authorities — only with a lawful subpoena, court order, or equivalent legal process
Your data is never shared with:
- Other parents at your Organization (beyond your own family)
- Other Organizations on the platform
- Advertisers, marketers, or data brokers
- AI model trainers
8. Right to know how data is secured
We protect your family's data with:
- Encryption in transit (TLS) and at rest
- Row-level access controls in the database
- Audit logging on sensitive operations
- Tamper-evident sha256 hashes on finalized archives
- Regular security review and threat monitoring
- No card data on our servers (payments processed directly by Stripe)
9. Right to know how complaints are handled
Direct complaints about your data should go first to your Organization's admin — they are the controller of your data. For platform-side complaints, contact legal@homeschoolplatform.com.
Complaints involving alleged violations of state student-data-privacy laws may also be filed with your state's attorney general or department of education.
Homeschool Platform does not contact families directly. Apart from automated account messages such as password resets, emails you receive through the platform are sent on behalf of your Organization, and your Organization is responsible for telling you about changes that affect your records, including if it leaves the platform or closes.
10. Right to be told if we leave
If Homeschool Platform discontinues the service entirely, we will notify Organizations at least 60 days in advance, unless circumstances beyond our reasonable control prevent it, and Organizations may request exports during that period. Finalized records already emailed to you remain yours.
11. Right to be told if ownership changes
If Homeschool Platform is acquired, merges, or sells assets, your Organization's records, including your family's data, may transfer to the successor, which must honor privacy protections at least as strong as ours. We will notify affected Organizations.
Our commitments as the processor
Homeschool Platform commits to:
- Never selling your family's data, ever
- Never using student data for advertising
- Never training AI models on student data
- Collecting only the minimum data needed to operate
- Protecting data with industry-standard security practices
- Notifying Organizations of security incidents as described in our Data Processing Addendum
- Letting Organizations export their data during their subscription and for 30 days after it ends
- Respecting deletion requests within state-law limits
- Maintaining audit logs of who accessed what and when
For Organizations
Organizations using Homeschool Platform are free to adopt these protections as their own published notice, or extend them with state- specific language. We provide this document as a transparent baseline; the obligations to families ultimately flow through your Organization, which is the controller of your data.
Contact
Questions, requests, and security reports: legal@homeschoolplatform.com