Legal

Privacy Policy

Last updated: August 2026

This policy explains what information OS FOR SCHOOLS collects when a school, its staff, its students, and their parents or guardians use the platform, why we collect it, and how it is kept separate and protected. It applies to every school using the platform and to the people who work in or are enrolled at that school.

Who this policy covers

"The platform" means the OS FOR SCHOOLS website, applications, and services. "A school" means an institution that has created an account. "You" means anyone whose information a school has entered into the platform on its behalf — including school owners, administrators, teachers, other employees, students, and parents or guardians.

Most of the information the platform holds about a student or parent is entered by the school itself, not directly by that person. A school that enrolls a student is responsible for having a lawful basis to share that student's information with us, in the same way it would be responsible for any other school record-keeping system.

What information we collect

Depending on how a school configures and uses the platform, this can include:

  • Account information: name, email address, phone number, and password (stored as a salted hash, never in plain text).
  • School records a school chooses to keep on the platform: student enrolment and academic records, attendance, admissions, staff employment and payroll records, and financial records such as invoices and payments.
  • Communications: messages sent through the platform's messaging and notification features.
  • Technical information: device and browser type, IP address, and basic usage logs, collected automatically to keep the service secure and working correctly.

Why we collect it

We use this information to:

  • Provide the features a school has set up — academics, attendance, finance, communication, and the school's public website.
  • Authenticate users and keep each person's access limited to what their role at their school allows.
  • Send account, security, and school-initiated notifications (for example, an attendance alert a school configures to reach a parent).
  • Maintain and improve the reliability and security of the platform.
  • Meet legal, safeguarding, or regulatory obligations that apply to school record-keeping in the school's jurisdiction.

We do not sell personal information, and we do not use school, staff, student, or parent data to serve advertising.

How one school's data is kept separate from another's

Every school on the platform has its own account and its own records. A person's access is always evaluated against their role at a specific school — a teacher, parent, or administrator at one school has no access to another school's students, staff, finances, or communications, and platform staff access to any school's data is limited to what is needed to provide support or keep the service running, and is logged.

An owner who manages more than one school can access each school they own, but data still does not mix between those schools — each school's records remain its own.

Who else can see this information

  • Within a school, only people with an appropriate role can see a given record — for example, a teacher generally sees the classes they teach, not the whole school's finances.
  • We work with infrastructure providers (such as cloud hosting and email/SMS delivery services) that process data on our behalf, under agreements that limit their use of it to providing that service to us.
  • We disclose information beyond this only when required by law, to protect the safety of a student or other individual, or with the affected school's consent.

How long we keep information

A school's records are retained for as long as the school's account is active. If a school's account is closed, we retain records for a limited period to allow recovery of an accidental closure and to meet any applicable legal retention requirements, after which they are deleted or anonymized.

Your rights and choices

You can ask to see, correct, or request deletion of personal information the platform holds about you by contacting your school directly (since your school controls its own records), or by contacting us at support@osforschools.com. We will direct school-record requests to the relevant school where that is the appropriate way to resolve them, and will respond to account-level requests directly.

Changes to this policy

If we make a material change to this policy, we will update the date at the top of this page. Continued use of the platform after a change means you accept the updated policy.

Contact us

Questions about this policy or how your information is handled can be sent to support@osforschools.com.

See also our Terms of Service.