Privacy Policy

Last updated: April 2026

ArtsPass is designed with school compliance in mind. We collect only what's necessary to operate the platform and never sell student data to third parties.

1. What We Collect

When a student submits a release, we collect:

Student name and email address
Parent or guardian email address
Release title and uploaded audio/artwork files
Timestamp of submission

When a parent provides consent, we collect:

Timestamp of consent
The unique consent token used to verify the link

2. How We Use It

We use this information solely to operate the ArtsPass platform — specifically to send consent emails, log consent records, and display release information to school administrators. We do not use student data for advertising or marketing.

3. Data Storage

All data is stored in Supabase, a SOC 2 compliant cloud database provider. Audio and artwork files are stored in Supabase's secure file storage. Data is stored in the United States.

4. FERPA

ArtsPass is designed to support school compliance with the Family Educational Rights and Privacy Act (FERPA). Schools maintain control over their students' data. We act as a service provider to the school, not an independent data controller of student records.

5. COPPA

ArtsPass does not knowingly collect personal information from children under 13 without verifiable parental consent. The parental consent flow built into ArtsPass is designed to satisfy this requirement for covered releases.

6. Data Retention

Consent records are retained indefinitely as legal documentation. Schools may request deletion of their data by contacting us directly.

7. Third Parties

We use the following third-party services to operate ArtsPass:

Supabase — database and file storage
Render — application hosting
Resend — transactional email delivery

We do not sell or share student data with any other third parties.

8. Contact

Questions about privacy? Email us at privacy@artspass.org.