Privacy Policy

Woforo (the "Service") is a platform used by Parent-Teacher-Student Associations and similar volunteer parent groups to coordinate school communities and fundraising. This policy explains what data we collect, how we use it, and the rights families have under FERPA (Family Educational Rights and Privacy Act) and COPPA (Children's Online Privacy Protection Act).

1. Information we collect

From volunteer organizers and account holders:

• Name, email address, optional phone number
• Hashed password and (if you enable it) two-factor authentication state
• Activity on the platform — messages sent, posts viewed, purchases made

From the school community, on behalf of the organizing group:

• Student name, grade, classroom assignment, and (optionally) date of birth
• Teacher and staff name and contact info
• Guardian relationships (which adult is associated with which student)

We do not collect student academic records, grades, disciplinary records, health information, or any data covered by HIPAA. We do not sell or rent personal information to anyone.

2. FERPA and student records

We act as a school official with a legitimate educational interest under FERPA when processing student directory information on behalf of your school's PTSA. Each school controls its own data; Woforo never accesses one school's student records on behalf of another school.

Parents and guardians have the right to:

• Inspect and review any student record their PTSA holds about their child
• Request a correction to any record they believe is inaccurate
• Request that their child's directory information not be shared inside the PTSA
• File a complaint with the U.S. Department of Education if they believe FERPA has been violated

To exercise any of these rights, contact your PTSA's records custodian or email privacy@woforo.com.

3. COPPA and children under 13

Woforo is not directed to children under 13. Children do not create accounts. When a parent or school administrator enters basic information about a child under 13 (for roster purposes), they represent that they have authority to do so on behalf of the child's school.

Children under 13 may interact with the platform only as recipients of communications from their school community (e.g., a guardian opens an event signup on their behalf). Children cannot create accounts, set passwords, post messages, or upload data themselves.

If you believe a child under 13 has created an account or had data collected from them inappropriately, email privacy@woforo.com and we will delete the data within 10 business days.

4. Security

• Passwords are bcrypt-hashed; secret values (2FA seeds, recovery codes) are encrypted at rest.
• Two-factor authentication is available to all users and required for organization owners and admins.
• Every action that creates, edits, or deletes a record is logged with timestamp and actor.
• HTTPS is enforced in production. Sessions auto-expire and are cleared on logout.
• Data lives in encrypted-at-rest databases hosted in the United States.

5. Data retention

We keep personal data only as long as it serves the purpose it was collected for, then purge it. Soft-deleted records are kept for a recovery window (typically 1 year), then permanently deleted. Activity logs are rotated after 2 years. Financial records (orders, payments) are kept for 7 years to satisfy tax and accounting obligations. Your PTSA administrator can adjust retention windows in their account settings. See our Terms of Service for details on account deletion.

6. Third-party services

We rely on a small number of trusted vendors to operate the Service:

• Stripe — to process payments for tickets, auctions, and donations. Stripe is PCI-DSS Level 1 compliant; we never store full card numbers ourselves.
• Google Maps — to show event locations when a school provides an address.
• Anthropic — to power optional AI-assisted writing features. Anthropic does not train on customer data sent through its API.
• Postmark / Mailgun — to deliver transactional email.

7. Your choices

• Access: You can see all the records your PTSA holds about you (or your child) by signing in to your account.
• Correction: Contact your PTSA admin or email privacy@woforo.com.
• Deletion: Account holders can delete their accounts in their settings. Guardian deletion of a child's record requires the PTSA admin's involvement so that other guardians of the same child are not affected.
• Marketing: Woforo does not send marketing email and does not allow PTSAs to use Woforo for unrelated marketing.

8. Contact

Questions or requests? Email privacy@woforo.com. For FERPA matters specific to your child's school, contact your PTSA admin or the school's records custodian.

This policy may be updated to reflect changes in the law or in how Woforo operates. Material changes will be announced at sign-in and emailed to account holders.