Privacy Policy

1. Introduction

Schoolsfirst Colorado ("we", "us", or "our") operates a merchandise platform for Colorado schools. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

By using Schoolsfirst Colorado, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

We collect information you provide directly to us, including:

• Name and contact information (email address, phone number, mailing address)
• School affiliation and role (for school administrators)
• Payment information (processed securely through Square)
• Order and purchase history
• Account credentials (email and password)

2.2 Automatically Collected Information

When you use our platform, we automatically collect:

• Device and browser information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, interactions)
• Cookie and tracking data (see our Cookie Policy below)

2.3 School Administrator Information

For school administrators, we additionally collect:

• School name, address, and contact information
• 501(c)(3) tax-exempt status verification
• Square OAuth credentials (stored securely and never shared)
• School branding information (logos, colors, custom content)

3. How We Use Your Information

We use the information we collect to:

• Process and fulfill orders
• Communicate with you about orders, products, and services
• Provide customer support
• Manage school storefronts and administrative dashboards
• Process payments through Square (payments go directly to each school's Square account)
• Send marketing communications (you can opt-out at any time)
• Improve our platform and develop new features
• Detect, prevent, and address technical issues or fraudulent activity
• Comply with legal obligations

4. Payment Processing

All payment processing is handled by Square, Inc. Each school connects their own Square account through OAuth, and payments go directly to the school's Square merchant account. We never store your full credit card information on our servers.

Square's privacy policy governs the collection and use of your payment information. Please review Square's Privacy Policy at https://squareup.com/us/en/legal/general/privacy.

5. Information Sharing and Disclosure

We may share your information in the following circumstances:

• With Schools: Order information is shared with the relevant school for fulfillment and tracking
• With Service Providers: We share information with vendors who help us operate our platform (hosting, analytics, email services)
• For Legal Reasons: We may disclose information if required by law or to protect our rights and safety
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred

We do not sell your personal information to third parties.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure storage using Supabase with row-level security policies
• OAuth token encryption and automatic refresh
• Regular security audits and updates

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights and Choices

You have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your account and personal information
• Opt-Out: Unsubscribe from marketing emails using the link in any email
• Cookie Control: Manage cookies through your browser settings

To exercise these rights, please contact us at privacy@schoolsfirst.co.

8. Children's Privacy

Our platform is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe we have collected information from your child, please contact us immediately.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. Cookies are small data files stored on your device. We use:

• Essential Cookies: Required for authentication and shopping cart functionality
• Analytics Cookies: Help us understand how visitors use our platform
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings, but disabling cookies may affect platform functionality.

10. Third-Party Links

Our platform may contain links to third-party websites (such as school websites or social media). We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the platform after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us: