Privacy Policy

Effective date: June 1, 2026

Integrated Technology Solutions, LLC ("we," "us," or "our") operates SchoolCalendar Pro (the "Service"). This Privacy Policy describes what information we collect, how we use it, and the choices you have.

Who this applies to

This policy applies to school districts, schools, board members, administrators, and other authorized users who access SchoolCalendar Pro through an account we provide. It does not apply to students, parents, or any individuals other than account holders.

What we collect

We collect only the information needed to operate the Service.

Account information. When an account is created — whether by self-registration or invitation — we collect:

• Name (first and last)
• Email address
• Phone number (optional)
• Organization affiliation
• Per-year role assignments
• A hashed password (we never see or store your password in plain text)

Organization information. For each organization using the Service, we collect:

• Organization name and email domain
• Address, state, and time zone
• The name and contact details of the organization administrator

Usage and activity data. As you use the Service, we automatically record:

• Login times, IP addresses, and browser information
• Pages visited and actions taken within the Service (auditing — see User Activity and Vote Change Audit logs)
• Email delivery records for messages we send on your behalf

Calendar and voting data. Calendars, periods, day types, voting sessions, and votes you create are stored on our infrastructure as a normal part of operating the Service.

What we do NOT collect

• No student information. SchoolCalendar Pro is a tool for administrators and board members. We do not collect, store, or process information about individual students.
• No payment data. We do not collect credit card, bank, or payment information through the Service.
• No tracking across other sites. We do not place advertising cookies or share information with advertising networks.

How we use the information

We use the information we collect only to:

• Provide and operate the Service
• Authenticate you and authorize the actions you take
• Send transactional email — invitations, voting notifications, password resets, certification confirmations
• Maintain audit records for security, compliance, and customer support
• Diagnose and fix problems with the Service
• Communicate important Service changes (such as scheduled maintenance or policy updates)

We do not sell your information, share it with advertising networks, or use it for behavioral profiling.

Who we share information with

We share information only with the following categories of service providers, and only as needed to operate the Service:

• Email delivery — SendGrid (Twilio Inc.) handles transactional email delivery on our behalf.
• Hosting — Google Cloud Platform hosts the Service infrastructure.
• Future processors — If we add a new processor, we will update this policy and the effective date above.

We do not share your information with third parties for marketing purposes.

We may disclose information when required by law, subpoena, court order, or in response to a valid legal request. Where permitted, we will notify the affected organization administrator before doing so.

FERPA and student privacy

SchoolCalendar Pro is designed so that no student data passes through the Service. We do not act as a school official with access to education records under FERPA, and we do not enter into student-data-sharing arrangements.

If your district requires a data privacy agreement (DPA) addressing the limited data we do collect (administrator-account information), contact us at support@ms-itsllc.com.

COPPA

Because SchoolCalendar Pro is intended for use by school administrators, board members, and adult staff, the Service is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a minor has provided us information through the Service, contact us at the address below and we will delete it.

Data retention

We retain account, organization, and calendar data for as long as the account is active. When an organization terminates its use of the Service, we will:

• Delete or anonymize active account data within 90 days of termination, on request
• Retain audit logs and email delivery records for up to 24 months for legal and operational continuity
• Retain backups that include the data until those backups age out, typically within 35 days

Security

We protect information using industry-standard practices:

• Encrypted transport (TLS) for all traffic between your browser and the Service
• Encryption at rest for the database and backups
• Password hashing with a modern algorithm (bcrypt)
• Role-based access control with per-year scoping
• Audit logging of sensitive actions
• Regular security updates to the underlying platform

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at support@ms-itsllc.com.

Your choices

You can:

• Update your information at any time from your account profile page
• Request a copy of your information by contacting us at the address below
• Request deletion of your information by contacting your organization administrator or by contacting us directly
• Stop receiving Service-related email by deactivating your account; some emails (such as legal notices) cannot be turned off while the account is active

If you are an account holder in the EU or UK, you also have rights under GDPR including access, rectification, erasure, portability, and the right to lodge a complaint with a supervisory authority.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated to organization administrators by email and reflected by an updated effective date at the top of this page. Continued use of the Service after a change indicates acceptance of the revised policy.

Contact us

This policy is provided as a template starting point and is not legal advice. Have it reviewed by counsel familiar with the laws applicable to your jurisdiction and customer base before relying on it.