Privacy Policy

MicroCampus is a school management platform operated by Close to the Coast Creative, based in Florida, United States. We provide software for microschools, homeschool co-ops, learning pods, and small educational programs. Our website and platform are available at microcampus.site and its subdomains.

Contact: hello@microcampus.site

This policy applies to:

• Schools — administrators and staff who subscribe to and manage MicroCampus.
• Parents and guardians — who access the platform through their school's portal.
• Students — whose data is managed by their school within the platform.
• Visitors — who browse microcampus.site.

Information provided by Schools:

• School name, address, phone, and contact information
• Administrator and staff names and email addresses
• Student names, grade levels, enrollment dates, and academic records
• Parent and guardian names, email addresses, and phone numbers
• Attendance records
• Progress reports, grades, and portfolio items
• Messages and communications between staff, parents, and students
• Uploaded documents and completed forms
• Payment records (payment card numbers are processed and stored by Stripe — we never store card numbers directly)

Information collected automatically:

• IP address and approximate location
• Browser type and device information
• Pages visited and features used within the platform
• Session and authentication tokens

We use information collected to:

• Provide and operate the MicroCampus platform
• Process payments through Stripe
• Send transactional emails (meeting confirmations, announcements, account notices)
• Send push notifications and SMS alerts, where enabled by the school
• Respond to support requests
• Improve platform features and reliability
• Comply with legal obligations

We do not use student data for advertising, sell data to third parties, or use student data for any purpose other than providing the platform services to the school.

MicroCampus recognizes that student education records are protected under the Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. § 1232g. We operate as a "school official" with a legitimate educational interest in student records, solely to perform services on behalf of the subscribing school.

We agree to:

• Access student education records only as necessary to provide platform services
• Not disclose student education records to third parties except as permitted by FERPA and directed by the school
• Maintain the confidentiality and security of student records
• Return or delete student records upon account termination

The school, as the educational agency, retains responsibility for its own FERPA compliance and for ensuring appropriate authorization before sharing student data with MicroCampus.

Our platform is offered to schools and school administrators, not directly to children. Schools using MicroCampus are responsible for obtaining any necessary parental consent under the Children's Online Privacy Protection Act (COPPA), 15 U.S.C. §§ 6501–6506, before inputting data about children under 13 into the platform. We do not knowingly collect personal information directly from children under 13 outside of the school context.

Florida Information Protection Act (FIPA), Fla. Stat. § 501.171: In the event of a security breach involving personal information of Florida residents, we will notify affected individuals and the Florida Department of Legal Affairs within 30 days of discovery, as required by law.

Florida Student Data Privacy Act, F.S. § 1002.222: Student data processed through MicroCampus is used solely for educational purposes as directed by the school. We do not sell student data, use it for targeted advertising, or build student profiles for non-educational purposes.

We share data with the following service providers only as necessary to operate the platform. Each is contractually bound to protect your data and prohibited from using it for their own purposes.

We do not sell, rent, or trade personal information to any other third party.

We retain school and student data for as long as your account is active. Upon account cancellation or termination, we will delete or anonymize your data within 90 days, unless we are required by law to retain it longer. Schools may request a full data export before deletion by contacting us.

We use industry-standard security practices including:

• HTTPS/TLS encryption for all data transmitted to and from the platform
• Encrypted data at rest via our database provider (Supabase)
• Role-based access controls — staff, parents, and students see only what their role permits
• Secure authentication with hashed passwords

No system is completely secure. While we work hard to protect your information, we cannot guarantee absolute security and are not liable for unauthorized third-party access beyond our reasonable control.

Depending on your location, you may have the right to access, correct, or delete your personal information. To exercise these rights, contact us at hello@microcampus.site. School administrators may manage staff, parent, and student data directly within the platform.

We may update this Privacy Policy from time to time. We will notify schools of material changes by email or in-app notice at least 14 days before the change takes effect. The effective date at the top of this page indicates when the current version was last updated. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

Close to the Coast Creative / MicroCampus
Florida, United States
hello@microcampus.site