Privacy policy
What we hold, why, and what we never do with it.
The short version
Schools use SteadyMembers to run their memberships. In that relationship the school is responsible for its members’ information, and we process it on the school’s behalf to run the service. We do not sell personal data. We do not use a school’s member data to market anything to those members. Ever.
What we hold
- School account data: the owner’s name and email, the school’s details, staff accounts and roles, and billing records for the school’s subscription to SteadyMembers.
- Member data the school enters: names, contact details, household links, emergency contacts and medical notes the school records, attendance, progress, and membership and payment history — the data the school needs to run itself.
- Signatures: waivers and agreements signed through the portal are kept with the exact text signed, the signer’s typed name, and the time and request details of the signing.
- Operational records: logs the service keeps to run and to keep an audit trail — including records of any support session a school approves, which the school itself can see.
Payments
Card details never touch our servers. Payments are taken by Stripe: a school’s members pay through the school’s own connected Stripe account, and a school’s subscription to SteadyMembers is charged through Stripe as well. We keep the records a ledger needs — amounts, dates, and the processor’s references — not card numbers.
Who else touches the data
A short list of providers runs the service with us: our database and authentication provider stores the data and runs sign-in; our hosting provider serves the application; our email provider delivers the mail the service sends. Each holds only what its job needs, under its own security and privacy terms. When a school connects its own tools through our API, webhooks, or Zapier, the school chooses what those tools receive.
Support access
Our team cannot browse a school’s data at will. The operator console shows school counts and health, not member names. Working inside a school requires a support session the school approves, for a set time, with every change recorded in the school’s own support record.
Your rights and the school’s
A school can export all of its data, free, at any time. Members asking about their own information should start with their school — it is their record, held in the school’s account. If a school leaves, its data is deleted from the live service after the export window closes, apart from records the law requires us to keep (such as payment records).
Changes and contact
If this policy changes in a way that affects what we do with data, we will tell school owners before it takes effect. Questions about privacy go to the same support channel as everything else: write to us through your school’s console, or at the contact on our site, and a person will answer.