Privacy Policy

Your staff workspace

We store your account email, facility name, staff names and optional emails, uploaded staff documents, dates you confirm, and subscription identifiers. Firebase stores documents with account-scoped server access; Vercel hosts the application. PDF text is processed on our server for date suggestions. Extracted text is not stored or sent to an AI provider, and uploaded documents are not used to train AI models.

A secure, HTTP-only session cookie keeps you signed in for up to 30 days. Sign-in links expire in 15 minutes and work once. Staff upload links work once and expire after seven days. Anyone holding an unused staff link can upload to that record, so share it only with the intended person. The link does not allow them to view your other records. We use hashed email and network identifiers to limit abuse; expired access and rate-limit records are removed by scheduled cleanup.

We email staff when you use the request-email action. Optional renewal reminders go to your account email and can be turned off in settings. Account, authentication, and staff upload pages do not load marketing analytics. Our public site uses Gizmo and Pirsch to measure visits and conversion events. Stripe handles payment details; we do not store card numbers.

Workspace records remain available for download after trial or paid access ends until you delete them or request account deletion. Deleting a record removes its active stored document and file chunks. Billing records may be retained for accounting and legal obligations. Contact mike@daycarecompliance.org for account deletion or help accessing your information.

Information We Collect

We collect information you provide directly to us when you:

• Request a setup plan or register interest
• Make a payment for our services
• Submit your intake form after payment
• Provide records through an agreed onboarding process
• Communicate with us via email or other channels

The free self-check processes your answers in your browser; we record completion and the number of areas to review without sending individual answers. Inquiry forms store your contact consent, and we use an email-derived identifier to limit repeated submissions. We do not use a setup request as consent to unrelated marketing. Information you submit may include: your name, email address, daycare name, physical address, license number, license type, state, staff information, and compliance documentation you provide.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our compliance management services
• Organize and track your daycare compliance documentation
• Send you notifications about expiring documents and renewal deadlines
• Process payments and send you receipts
• Respond to your questions and provide customer support
• Comply with legal obligations

How We Share Your Information

We do not sell your personal information. We may share your information with:

• Service providers: Third parties who perform services on our behalf, such as payment processing (Stripe), email delivery (Resend), and data storage (Firebase)
• Legal requirements: If required by law, regulation, legal process, or governmental request
• Business transfers: In connection with a merger, acquisition, or sale of assets

Data Security

We take reasonable measures to protect your information from unauthorized access, loss, misuse, or alteration. All data is stored securely using industry-standard encryption and access controls. However, no method of transmission over the internet or electronic storage is 100% secure.

Data Retention

We retain your information for as long as your account is active or as needed to provide you services. If you wish to cancel your account or request that we no longer use your information, please contact us at the email address below.

Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information (subject to legal retention requirements)
• Object to or restrict certain processing of your information

Cookies and Tracking

We use minimal tracking technologies. Our website may use cookies for essential functionality such as maintaining your session during the qualification and payment process. We do not use advertising cookies or track you across other websites.

Third-Party Services

Our services integrate with third-party providers:

• Stripe: Payment processing (see Stripe's privacy policy)
• Firebase/Google Cloud: Data storage and hosting (see Google's privacy policy)
• Resend: Email delivery (see Resend's privacy policy)
• Gizmo Analytics: Privacy-friendly, cookieless website analytics. Gizmo does not use cookies, does not store IP addresses, does not track visitors across sites, and does not collect personal information. See gizmoanalytics.io.

These third parties have their own privacy policies governing their use of your information.

Children's Privacy

Our services are provided to daycare owners and operators, not to children. While you may provide us with children's records as part of your compliance documentation, we do not knowingly collect personal information directly from children under 13.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this privacy policy or our data practices, please contact us at:

Email: mike@daycarecompliance.org