SUFFAH PRIVACY POLICY
Last updated: September 16, 2026
Suffah ("we," "our," or "the Platform") provides an online school management and learning system for schools, teachers, parents, and students.
This Privacy Policy explains what information we collect, how we use it, how it is protected, and the rights of schools, parents, and students. It applies to all use of the Suffah platform and to our public website.
1. Introduction
Suffah provides school management and learning tools to schools, which in turn provide access to their teachers, parents, and students. Schools control the student data held in the platform; we process it on their behalf.
2. What Information We Collect
A. Information Provided by Schools
Schools may upload:
- Student names and grade levels
- Parent/guardian names
- Email addresses or phone numbers
- Class enrollment
- Attendance, assignments, and grades
- Teacher names and contact information
Schools should not upload Social Security Numbers or unnecessary sensitive identifiers.
B. Information Collected Automatically
Within the platform, we may collect:
- Login times
- Device/browser type
- IP address (for security)
No advertising trackers are used within the platform. Our public marketing pages use advertising measurement tools, which are described in Section 9.
C. Optional Information
Parents or teachers may choose to add profile photos or additional contact information. This is voluntary.
3. How We Use the Information
We use data only to operate the platform for the School, including:
- Creating user accounts
- Sending login codes and verification
- Assignments, grades, and attendance
- Teacher-student and teacher-parent communication
- School announcements
- Technical support
We do not:
- Sell school, student, parent, or teacher data
- Use school, student, parent, or teacher data for advertising or ad targeting
- Share school, student, parent, or teacher data with marketers or advertising networks
- Build advertising audiences from school, student, parent, or teacher data
- Track platform users for behavioral profiling
A. SMS Notifications
Suffah may use your phone number to send SMS notifications through our third-party messaging provider (AWS End User Messaging). Messages may include student progress updates, assignment reminders, account alerts, and institutional announcements.
- Providing your phone number is optional and not required to use the platform
- You must explicitly consent to receive SMS notifications via a separate unchecked checkbox during registration
- Institutions may provide consent on behalf of parents/guardians as part of their enrollment agreement with Suffah
- Standard message and data rates may apply
- Message frequency varies based on student activity and institutional settings
- Reply STOP to opt out at any time. Opt-out requests are honored immediately
- Reply HELP for assistance, or contact contact@suffah.education
4. Who Can See the Data
A. Within the School
- Teachers — their classes
- Parents — their own children
- Students — their own information
- School admins — all school data
B. Suffah Staff
Only authorized Suffah staff may access data when necessary to provide support, maintain the system, investigate security issues, or operate the platform.
C. Third-Party Providers
We use trusted providers for specific services:
- AWS — secure hosting
- AWS End User Messaging — SMS delivery
- Stripe — payment processing
- Cal.com — scheduling demo, onboarding, sales, or support calls
- Meta Platforms, Inc. — advertising measurement on our public marketing pages only. No student, parent, teacher, or school records are shared with Meta.
These providers may process limited information only as needed to provide their specific services.
For Cal.com scheduling, this may include basic contact and scheduling information from school administrators, managers, or authorized representatives, such as name, email address, phone number, organization name, role, meeting time, and information voluntarily submitted in the booking form.
Suffah does not use Cal.com to collect student records, parent records, grades, attendance data, classroom records, or other sensitive school information.
Each provider’s own privacy policy may apply when their service is used.
5. Legal Basis and Student Privacy Commitments
Suffah acts as a service provider to schools. Regardless of which specific statutes apply to a given school, we make the following commitments about student data:
- We do not use student data for advertising, ad targeting, or audience building
- We do not sell student data
- We do not create advertising or marketing profiles of students
- Student data is used only to provide the service to the School
FERPA
Where a school is subject to FERPA, that school authorizes Suffah to act as a school official with a legitimate educational purpose, and we handle education records accordingly.
COPPA
Students under 13 use the platform only under school supervision. We do not collect information directly from children without school authorization, and consent obtained through a school covers educational use of the platform only — it does not extend to advertising.
State student privacy laws
Several US states impose obligations directly on educational technology providers, including restrictions on targeted advertising and on the sale of student information. Our commitments above are intended to meet those requirements.
6. Data Security
We use industry-standard protections, including:
- Encryption in transit and at rest
- Strict access controls
- Secure servers
- Authentication logging
- Regular monitoring
Schools are responsible for providing accurate information and any local notices required before uploading student data.
7. Data Retention & Deletion
We keep data only while the School uses the platform. When a School requests deletion or closes its account:
- All identifiable data is deleted or returned
- Backups containing identifiable data are removed within 30 days
Parents may submit deletion or access requests through their School.
8. Children's Privacy
Students under 13 may use Suffah only through accounts created or approved by their School. We do not allow children to create accounts directly, and we do not collect extra data from children outside school use.
Our advertising measurement tools are not present on any logged-in area of the platform and are not used to collect information from children.
10. Payments
Payments made by School administrators are processed by Stripe. Suffah does not store credit card numbers or banking information. Stripe's own privacy policy applies to the payment step.
11. Scheduling and Demo Calls
Suffah may use Cal.com or a similar third-party scheduling tool to allow school administrators, managers, or authorized representatives to schedule demo, onboarding, sales, or support calls with us.
When using the scheduling tool, users may provide basic contact and scheduling information, such as:
- Name
- Email address
- Phone number
- Organization name
- Role
- Selected meeting time
- Information voluntarily submitted in the booking form
We do not use scheduling tools to collect student records, parent records, grades, attendance data, classroom records, or other sensitive school information.
When a call is booked through our public booking page, we record that a booking was completed for advertising measurement purposes. The contact details you submit are not shared with advertising providers.
Cal.com’s own privacy policy may apply to the scheduling step.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data practices. Schools will be notified before major changes take effect.
14. Contact Information
For privacy questions or data requests, please email contact@suffah.education.