YearbookVault Privacy Policy

1. Introduction

Welcome to YearbookVault ("Company", "We", "Us", "Our"). We respect your privacy and are committed to protecting the personal information of our users ("You") and the data entrusted to us by educational institutions.

This Privacy Policy explains how we collect, use, disclosure, and safeguard your information when you visit our website yearbookvault.dev (the "Service").

2. Special Notice to Schools (FERPA & COPPA)

YearbookVault operates as a Service Provider to educational institutions ("Schools"). When a School uses our Service to host yearbooks, the School is the "Data Controller" and YearbookVault is the "Data Processor."

Family Educational Rights and Privacy Act (FERPA): We function as a "School Official" with a legitimate educational interest in the data. We use Student Data solely to provide the Service to the School and do not use it for any other commercial purpose.

Children's Online Privacy Protection Act (COPPA): We do not knowingly collect personal information directly from children under 13. All data regarding children is provided to us by the School, which represents that it has obtained all necessary parental consents or authority to share such data.

3. Collection of Information

We collect information in two categories: Account Data (about the Administrator) and Yearbook Data (about the Students/Community).

A. Account Data (Administrator Information)

When a School Administrator creates an account, we collect:

• Name and Job Title
• School/Organization Email Address
• Billing and Payment Information
• IP Address and Device Logs

B. Yearbook Data (Student & Content Information)

To provide the Service, the School uploads content ("Yearbook Data") which may include:

• Digital copies of historical yearbooks.
• Photographs and facial likenesses of students and staff.
• Names, grade levels, activities, and other "Directory Information" as defined by the School.

4. Use of Your Information

We use the information we collect to:

• Provide the Service: Hosting, indexing, and displaying yearbooks via the web or kiosk interface.
• Support: Responding to technical support requests from School Administrators.
• Security: Monitoring for fraudulent activity and enforcing our Terms of Service.

We strictly prohibit:

• Selling Student Data to third parties.
• Using Student Data for targeted advertising.
• Building personal profiles of students other than for the purpose of supporting the School's authorized use of the Service.

5. Disclosure of Your Information

We may share information only in the following situations:

• By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others.
• Service Providers: We may share data with third-party vendors (e.g., cloud hosting providers like AWS/Vercel) who perform services for us and are bound by data confidentiality agreements.

6. Data Security

We use administrative, technical, and physical security measures to help protect your personal information and Yearbook Data. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security.

7. Data Retention

We retain Account Data as long as your account is active. We retain Yearbook Data only for the duration of the agreement with the School. Upon termination of the Service, we will delete or return all Yearbook Data to the School within thirty (30) days, unless legally required to retain it.

8. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at:

Email: 23hashbarger@gmail.com