Privacy Policy - Bellplan

Bellplan, Inc. (“Bellplan,” “we,” or “us”) provides school-operations software to K-12 schools, districts, and their staff. This Privacy Policy describes the personal data we collect, how we use it, and the choices school administrators and staff have. It is written for school administrators and procurement reviewers as well as the staff and educators who use Bellplan day to day.

1. Data we collect

When a school onboards Bellplan, we collect basic operational data so the product can function: your school’s name, address, academic calendar dates, and the names + work email addresses of staff your school adds to the platform. We also collect content your staff creates in Bellplan — tasks, events, departments, comments, and uploaded attachments — in order to render and store that content.

We do not collect student records, education records as defined by FERPA, or any data covered by COPPA from children under 13. Bellplan is a staff-and-administrator-facing product. Schools may not upload student PII to Bellplan, and our terms prohibit that use.

2. How we use your data

We use the data your school provides only to:

Operate, maintain, and improve the Bellplan service;
Send transactional notifications (task assignments, kickoff reminders, overdue alerts) to staff who opt in;
Provide customer support to school administrators when they request it;
Detect and prevent fraud, abuse, and security incidents on the platform;
Comply with our legal obligations.

We do notsell personal data. We do not share your school’s data with advertising networks, data brokers, or any third party for marketing purposes.

3. Service providers (subprocessors)

We use a small set of vendors to run Bellplan. Each is contractually bound to use your data only to provide service to us and to maintain comparable security and confidentiality protections. The current list includes:

Supabase (database + authentication hosting)
Vercel (web application hosting + edge delivery)
Resend (transactional email delivery)
Sentry (error reporting and diagnostics)
PostHog (product analytics on usage events; no PII beyond a hashed user identifier)

We will provide thirty (30) days’ notice before adding or materially changing our subprocessor list. School administrators receive that notice by email and can object via the contact below.

4. Data residency and security

Production data is hosted in the United States (Supabase “East US” region). All traffic to Bellplan is encrypted via TLS 1.2 or higher. Data at rest is encrypted with AES-256. Access to production systems is limited to Bellplan personnel who require it to operate the service, and is logged.

5. Retention

We retain school data for as long as your school maintains an active Bellplan subscription. When a subscription ends, we retain data for up to ninety (90) days to allow for restoration if the school renews, after which we delete the data on a rolling basis. School administrators may request earlier deletion at any time by contacting us.

6. Your rights

Depending on where you and your school operate, applicable law may give you rights to access, correct, port, or delete personal data we hold about you. The fastest path for staff is to ask your school administrator, who has direct access to your account in Bellplan and can fulfill most requests in-product. For requests that require our involvement, contact us at the address below.

7. FERPA + COPPA posture

Bellplan is designed for school operations — not student instruction. We do not knowingly collect or process FERPA-covered education records or COPPA-covered data from children. If a school believes it has inadvertently uploaded such data, please contact us immediately so we can purge it.

8. Cookies + tracking

Bellplan uses session cookies that are required for authentication and a small set of first-party analytics events that help us understand how the product is used (which pages are visited, which actions are triggered). We do not use third-party advertising cookies.

9. Changes to this policy

We may update this policy from time to time. When we make material changes we’ll notify school administrators by email at least thirty (30) days before the changes take effect. The latest version will always live at this URL.

10. Contact

Questions, requests, or concerns about this policy should be directed to garrett.coughlin.001+bellplan@gmail.com. We aim to respond within five (5) business days.