Schools and businesses trust us with information about the people they serve: students, families, customers and members. This page explains, in plain English, how we handle that information when we work together.
It describes our working practices. The specific commitments for your project are written into your project agreement.
We agree it up front, in writing
Before we build anything, we agree with you:
- what data the project needs, and what it doesn't;
- where it will be stored, and which service providers will process it;
- who can access it, on your side and ours;
- how long it is kept, and what happens to it when the project ends.
If any of this needs to change later, we talk to you first.
We only use what the work needs
We ask for the minimum information needed to do the job. Where we can build and test with sample or demo data instead of real records, we do.
Your data stays yours
The information you share with us, and the data your app or automation collects, belongs to you. We use it only to build, run and support the work you asked for. We never sell it, and we never use it for advertising.
At the end of a project, or whenever you ask, we help you export your data and then delete our copies, unless we've agreed otherwise in writing or the law requires us to keep something.
Access is limited
Only the people working on your project can access your data, and only as far as they need to. We use established, reputable providers for hosting and storage, and we turn on the security features they offer, such as encryption and access controls.
If something goes wrong
If we learn that your data may have been accessed or exposed without permission, we will tell you promptly, explain what we know, and work with you on next steps.
Schools and student information
Schools often have their own policies and data agreements for vendors who handle student information. We'll review and work within your school's or district's requirements, and we're happy to discuss any data-sharing agreement you need us to sign before work starts.
We don't claim certifications or compliance we haven't been through. If your school has specific requirements, ask us about them on the first call and we'll give you a straight answer about what we can and can't commit to.
Our products
CedarBell and Keypage have their own privacy policies, which explain how each product handles the data stored in it.
Questions
Email hello@alstastudio.com or book a free call. See also our privacy policy for how this website handles the information you send us.