Privacy Policy

Who this portal is for

The portal is an invitation-only service for authorized parents, guardians, teachers, administrators, and other approved school personnel. It is not presently intended for students or other children to create or use accounts directly.

Information we collect

Depending on your relationship with the school, the portal may maintain:

• Account information, such as your name, phone number, profile photo, primary and secondary contact emails, role, verification state, and login status.
• Student and family records, such as names, household relationships, contact details, birth dates, addresses, enrollment, class placement, attendance, and school forms.
• Limited safety, emergency, pickup, health, or accommodation information when the school determines it is operationally necessary.
• School operations data, including permissions, invitations, audit events, and records of administrative changes.
• Donation-attribution information, consisting of an authorized student selection and a random portal reference. The portal does not store card, bank-account, routing, or CVV information.

Google sign-in information

If you choose Google sign-in, we receive the basic identity information you authorize Google to provide: your name, email address, profile picture, and a provider identifier. We use it only to authenticate you, connect you to an approved school account, protect the portal, and display your account identity. We do not request access to your Gmail, Google Drive, contacts, calendar, or other Google content, and we do not use Google user data for advertising.

How we use information

We use portal information to:

• Operate and secure school accounts and role-based access.
• Manage students, families, classes, enrollment, attendance, and school workflows.
• Provide authorized parents and staff with information relevant to their roles.
• Maintain audit, security, backup, support, and record-integrity functions.
• Comply with applicable obligations and respond to authorized records requests.

We do not sell personal information or use portal records for targeted advertising.

When information is shared

Information may be shared only as reasonably necessary with:

• Authorized school personnel and linked family members according to their responsibilities and permissions.
• Service providers that help operate the portal, including Supabase for authentication and database services, Vercel for application hosting, Resend for a secondary-email verification message when requested, and Google when you choose Google sign-in or use the optional address-suggestion control. Address suggestions send the text entered into that control and the selected place to Google; addresses may instead be entered manually.
• Zeffy when you voluntarily open its hosted donation form. Zeffy independently collects donor and payment information under its own policies; the portal sends only a random reference and does not send a student name or database identifier in the form URL.
• Government, legal, safety, or professional parties when required by law or reasonably necessary to protect students, users, the school, or others.

Cookies and authentication

The portal uses necessary cookies and similar browser storage to establish and refresh secure sessions, prevent unauthorized access, and remember authentication state. We do not currently use the portal for advertising cookies or behavioral advertising.

Security and retention

We use access controls, encrypted connections, provider-managed authentication, database security policies, auditing, and backups intended to protect school records. No online service can guarantee absolute security. We retain information for as long as reasonably needed for school operations, safety, recordkeeping, legal obligations, dispute resolution, and secure backup cycles, then delete or de-identify it when appropriate.

Your choices and requests

Parents, guardians, and account holders may contact the school to request access to or correction of their portal information, ask questions about retention, or request account deactivation or deletion. Some records may need to be retained for school, safety, financial, contractual, or legal reasons. You may also disconnect Google access through your Google Account, although another approved login method may be required to continue using the portal.

Children’s information

The school maintains student information supplied by parents, guardians, and authorized staff for educational and operational purposes. The current portal does not offer direct student accounts and does not knowingly ask children to submit personal information directly. If you believe a child has used the portal directly or supplied information without appropriate authorization, contact us promptly.

Changes to this policy

We may update this policy as the portal and school practices change. The effective date at the top will be revised when material changes are published. When appropriate, we will provide additional notice through the portal or another reasonable method.

Contact us

For privacy questions or records requests, contact Inspired Torah Schoolhouse at admin@torahinspired.com.