Privacy Policy

Last updated: September 2026

This is a general, global privacy policy intended for BaseSchool's early customers. It is not written for one specific country's laws. Where a school requires specific jurisdictional terms (for example under FERPA, COPPA, GDPR, or another local data protection or children's-privacy law), those terms will be addressed directly in the signed agreement between that school and BaseSchool, tailored to the school's country.

Who this applies to

This policy covers data processed through the BaseSchool platform on behalf of a school. Your school decides what data to enter and who at the school can access it; BaseSchool provides the platform and processes that data only to deliver the service back to your school.

What data we collect

Student records: name, date of birth, class/grade, guardian contact details, attendance, academic and fee records, and photographs where your school chooses to add them.
Staff records: name, role, contact details, and records of actions taken in the system.
Financial records: fee transactions, payment status, and related accounting entries entered by your school.
Account and usage data: login activity and actions taken within the platform, used for security and audit purposes.

How we use it

Data is used only to operate the platform for your school: displaying records, generating reports, tracking fees, and providing the features described on our site. We do not use school or student data to train machine learning models, build advertising profiles, or market to students or families directly.

Who we share it with

We do not sell student, staff or school data, and we do not share it with other schools. Data may be shared with a small number of infrastructure providers (for example, cloud hosting) strictly to operate the service, under confidentiality obligations. We disclose data if legally required to do so.

Children's data

Much of the data in BaseSchool relates to minors. Your school acts as the data controller for student data and is responsible for ensuring it has appropriate parental consent or legal basis under the laws that apply to it. BaseSchool acts as a data processor, handling that data only on your school's instructions.

Data retention

Data is retained for as long as your school's account is active, plus a reasonable period afterward for legal and record-keeping purposes. Your school can request export or deletion of its data at any time by contacting us.

Security

Access to data is role-based, so staff only see what their role requires. Sensitive actions, including edits, deletions, and financial transactions, are logged and attributed to a user. Records use soft-deletion, meaning historical data is not silently or permanently lost. We follow industry-standard practices for data protection in transit and at rest.

Cookies and tracking

This website does not currently use advertising or third-party tracking cookies. If that changes, this section will be updated accordingly.

Your rights

Depending on your location and role, you may have rights to access, correct, export, or request deletion of personal data. School administrators can contact us directly to exercise these rights on behalf of their institution; individuals should generally contact their school first, as the school controls its own records.

Changes to this policy

We may update this policy as the product or applicable law changes. Material changes will be reflected with an updated "last updated" date above.

Contact

Questions about this policy or your data can be sent to founders@baseschool.org.