1. Information We Collect

• Instructor Account Information: When you register for an account, we collect your username, email address, password hash (salted and encrypted; we never store plain-text passwords), center timezone, and billing customer ID managed securely through Stripe.
• Classroom & Student Management Data: To provide classroom tracking tools, you may enter student first and last names, subject classifications (e.g., Math, Reading), registration dates, attendance check-in/out timestamps, schedule preferences, conference milestone progress, and library book loans.
• Technical & Session Data: We use essential session cookies strictly to keep you securely authenticated while navigating the platform. We do not use third-party advertising cookies or cross-site tracking tools.

2. Student Privacy & Data Minimization

• Minimal Data Principle: TiTo Tracker is built around student data minimization. We only collect the minimal identifiers necessary for classroom operation (first name, last name, and class level).
• No Sensitive Student Data: We do not collect or store student home addresses, phone numbers, birth certificates, Social Security numbers, government IDs, or payment information from students or their parents.
• Children's Privacy Protection: TiTo Tracker is an administrative tool intended for adult educators and instructors. Students do not create accounts or interact directly with the platform.

3. How We Use Your Information

• To provide and operate your classroom check-in, scheduling, library, and conference milestone dashboards.
• To process subscription payments and send transactional billing receipts via Stripe.
• To send important administrative notifications, such as password reset tokens, username lookups, and direct support replies.
• To maintain platform security, prevent unauthorized access, and troubleshoot software performance.

4. We Never Sell Your Data

• Zero Advertising / Data Brokerage: We do not sell, rent, license, or monetize your personal information or your student records to any third party for advertising or marketing purposes. Period.

5. Trusted Third-Party Service Providers (Subprocessors)

We partner with industry-leading infrastructure providers strictly to operate the platform securely:

• Stripe: For PCI-compliant subscription and payment handling.
• Amazon Web Services (AWS SES): For sending secure, authenticated transactional emails (password resets, registration confirmations).
• Cloudflare: For DDoS protection, web application firewall security, and bot prevention (Cloudflare Turnstile).
• Secure Cloud Hosting & Database: For encrypted database hosting and daily automated backups.

6. Data Security & Storage

• All web traffic between your browser and TiTo Tracker is encrypted using industry-standard HTTPS / TLS encryption.
• Passwords are cryptographically salted and hashed before database storage.
• Database access is restricted, firewalled, and accessible only by authorized administrative infrastructure.

7. Your Data Rights & Deletion

• You maintain full control over your center's data. You can edit, deactivate, or reactivate student records at any time.
• If you choose to close your account, you can request full deletion of your master account and all associated classroom and student database tables by contacting support.

8. Contact Us

If you have any questions or privacy inquiries regarding your data, please contact us at: contact@titotracker.com.