Effective Date: June 18, 2025
Notifly is a digital communication tool developed for K–12 schools and educational organizations to simplify and enhance communication between school staff and families. The platform provides access to messaging features, contact tools, and customizable notification systems across various plan levels. Schools and districts use Notifly to streamline everyday communication and promote greater family engagement, academic support, and real-time updates within their learning communities. These services, collectively referred to as the “Services” or the “Platform,” are provided on a subscription basis and are accessible via our web-based platform, https://mynotifly.com (the “Website”), and the mobile application “Notifly” (the “App”).
The Services are operated by Notifly LLC (referred as “Notifly,” “Company,” “we,” “us,” or “our”).
At Notifly, we recognize that protecting your privacy is essential. We are committed to safeguarding the information shared by schools, districts, educators, and families who use our Platform. This includes both the organizations that subscribe to our Services and the individuals whose information may be managed or accessed through the Platform.
Notifly is dedicated to transparency in how we collect, use, and handle personal data. This Privacy Policy outlines the practices and protections that apply to all features and services offered by Notifly.
This Privacy Policy outlines in detail how we collect, use, protect, and disclose personal information when you interact with our Services. The Services include the App, our Website, and all features, content, and functionality that we make available through the Services. Whenever we use the terms “user,” “you,” or “your,” we mean any individual who downloads, accesses, or uses our App, visits our Website, or otherwise engages with our Services.
For the purposes of this Privacy Policy, “personal data” means any information that relates to an identified or identifiable individual, including information that can directly or indirectly identify a person. This includes data defined as “personal information” under applicable laws.
This Privacy Policy applies to personal data we collect:
Notifly may act in different capacities when processing personal data:
Notifly acts as a data controller when you voluntarily provide personal information - such as when you create an account on the Platform, visit our Website, or communicate with us through other channels - or when we automatically collect certain technical and usage information related to your interactions with our Services. In this capacity, Notifly determines the purposes and means of processing such data.
Notifly acts as a data processor when schools, districts, or educational institutions (collectively, “Customers”) use our Services to process personal data of students, parents, or guardians in connection with their educational and administrative purposes, as defined under the applicable agreement between Notifly and each institution (the “Institution Agreement”). In such cases, Notifly processes Personal Data solely on behalf of and under the lawful instructions of the Customer, in accordance with the Customer Data Processing Agreement, which forms an integral part of our Terms of Service.
Please note that this Privacy Policy does not extend to third-party websites, tools, or services that are not owned or controlled by Notifly - even if those providers assist in delivering aspects of the Platform. However, third-party vendors working with Notifly are required to maintain privacy and security protections that are consistent with Notifly’s standards and legal obligations.
This Privacy Policy does not also apply to information collected by Notifly through any other means, including on any other website or app operated by Notifly LLC.
We also encourage you to review our Terms of Service, which outline additional responsibilities and conditions for using the Platform.
Below is a clear overview of the categories of personal information we collect and the specific types of data included in each category.
Please do not send sensitive information (such as social security numbers, racial or ethnic details, political opinions, religious beliefs, health information, criminal records, or trade union membership, etc.) when contacting us.
We do not request, collect, or store any special categories of personal data. In particular, we do not transmit or process school transcripts, class lists, course schedules, disciplinary records, or any medical or health-related information of data subjects through the Platform.
All personal data collected and processed by Notifly falls into the following categories:
When you visit our Website, sign up for an account, or receive emails from us, Notifly and our service providers automatically collect certain information using tracking technologies such as cookies and tracking pixels.
A cookie is a small text file that stores information about your browsing activity and interactions with a website. When you revisit our Website, cookies allow us to recognize your browser and provide a more efficient and personalized experience.
First-party cookies are cookies set directly by Notifly. Third-party cookies are set by external parties that provide functionality or analytics through our Platform (for example, usage analytics). These third parties may recognize your device both when you visit our Website and when you visit other sites that use their technologies.
Notifly uses both first-party and third-party cookies, including persistent and session cookies:
We use cookies for several purposes. Some are strictly necessary for our Website to function, while others help us understand usage patterns, improve performance, and deliver a better user experience.
Essential cookies – These cookies are required for our Website to operate correctly and provide core functionality. Because they are necessary, they cannot be disabled through cookie settings.
Functionality cookies – These cookies enhance usability by remembering user preferences or enabling advanced features. Without them, certain functionality maybe limited.
Analytics cookies – These cookies collect aggregated information to help us understand how users interact with our Website, measure the effectiveness of communications and campaigns, and improve the overall user experience.
You can opt out of most non-essential cookies by adjusting your browser or device settings. Most browsers allow you to accept or reject cookies, delete existing cookies, or be notified when a new cookie is placed on your device. Please refer to your browser’s help menu for specific instructions.
If you disable or block cookies, some portions of our Website or Services may not function as intended.
If you have questions about how we or our third-party partners use cookies or tracking technologies, you may contact us at privacy@mynotifly.com.
In addition to cookies, Notifly and our service providers (such as SendGrid and Twilio) may use other tracking technologies — including clear gifs, web beacons, or tracking pixels — to better understand how our communications and Services are used.
For example, we use pixels in emails sent via SendGrid to determine whether messages have been opened or links have been clicked. This helps us measure the effectiveness of our communications, monitor message deliverability, and maintain reliable service performance.
These technologies collect limited information such as email addresses, timestamps, IP addresses, and device data related to message activity.
Notifly is committed to protecting the privacy of all users — especially children under the age of thirteen (13). We comply fully with the Children’s Online Privacy Protection Act (COPPA) and process, store, and use children’s personal data only when permitted by law and with proper consent.
Notifly does not knowingly request, collect, or market to individuals under thirteen (13) years of age, nor do we knowingly sell any personal information relating to minors.
Notifly operates as a service provider to schools and districts and processes student data solely under their authorization and direction, in compliance with COPPA, FERPA, and other applicable education privacy laws and regulations. The Platform is intended for use by authorized school or district personnel and their designated users only.
Children under thirteen (13) are not permitted to create accounts or directly submit personal data through the Platform. Any processing of student personal information — including, but not limited to, name, contact details, or any other identifiable data — is performed only under the written instructions of the educational institution and solely for the purpose of enabling the Platform’s functionality and supporting secure, authorized communication between users and students parents, in accordance with our Institution Agreement and Customer Data Processing Agreement.
If you believe that a minor under thirteen (13) has provided personal data to us without appropriate consent, please contact us at privacy@mynotifly.com so we can investigate and remove the information if necessary.
If we become aware that we have inadvertently collected data from a child under thirteen (13) outside of our agreements with a school or district, or without proper authorization, we will promptly delete the data, deactivate any related accounts, and remove the information from our systems as quickly as reasonably possible.
Parents or guardians who have questions about their child’s data, or who wish to modify or delete it, should contact their child’s school or district directly. Notifly will coordinate with the educational institution to honor such requests in compliance with applicable privacy laws and contractual obligations.
At Notifly, protecting your privacy is a top priority. Any personal information you share with or that we collect is used solely to operate, maintain, and improve our Services. Below are the primary ways your information may be used:
If you have provided an email address or phone number, Notifly may send you important administrative or service-related messages — such as alerts, updates, or confirmations — on behalf of your school or district. In some cases, these communications may also include relevant summaries or reminders tailored to your role or notification preferences.
By maintaining a Notifly account and not opting out, you acknowledge and agree that you may receive messages via email or SMS from school staff, administrators, Notifly, and authorized service providers. Depending on your mobile service plan, standard data or messaging rates may apply; these charges are your responsibility.
You can opt out of most non-critical messages at any time by clicking the unsubscribe link included in the communication or by adjusting your notification preferences within your account settings. To permanently stop receiving SMS messages, simply reply “STOP” to any Notifly text.
Please note that certain essential or legally required communications (such as account security alerts or service interruptions) may still be sent even if you opt out of optional notifications.
Notifly uses personal data provided by users solely to deliver and improve the Services we offer. We do not sell, rent, or trade your personal information.
We disclose data only in accordance with the Family Educational Rights and Privacy Act (FERPA) and other applicable privacy laws, in the following circumstances:
Before sharing any personal data, Notifly ensures that each third-party provider maintains robust privacy and security standards, equal to or exceeding those we uphold ourselves.
Notifly does not share personal information with any individual or entity that is not legally authorized to access it under FERPA, applicable state privacy laws, or contractual obligations.
A list of critical third-party vendors (e.g., AWS, Twilio, Freshworks) — including links to their privacy and security policies — is maintained and made available upon request.
All vendors handling student data are contractually bound to comply with FERPA, COPPA, District Acceptable Use requirements, and relevant state and local regulations
We use Stripe, Inc. (“Stripe”) to process subscription payments. When you make a purchase through our Services, your payment information (such as credit or debit card details, billing address, and transaction data) is collected and processed directly by Stripe. Stripe acts as an independent data controller with respect to payment processing and may process your personal data in accordance with its own legal and regulatory obligations, such as fraud prevention and compliance with financial regulations.
We do not have access to your full payment card details. We only receive limited information from Stripe necessary to confirm your subscription and maintain your account (e.g., payment confirmation, expiration date of your subscription).
Notifly does not use personal data or user records for behavioral targeting or commercial advertising. We do not create user profiles for marketing purposes. All data collected is used strictly as defined in this Privacy Policy.
While school or district staff may include links to third-party websites within the Platform, Notifly has no control over such external websites and assumes no responsibility for their content, privacy practices, or data handling policies. Before interacting with external websites, users are encouraged to review those sites’ privacy policies and terms.
Notifly is committed to upholding strict privacy and data protection standards. We work closely with schools and districts to ensure compliance with FERPA and all applicable privacy regulations. Our staff, contractors, and service providers are held to the same standards and are contractually bound to handle data securely and responsibly
We use a variety of security technologies and procedures to help protect your personal data from unauthorized access, use or disclosure. We secure the personal data you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use or disclosure. All personal data is protected using appropriate physical, technical and organizational measures.
To keep your information secure, we use industry-standard encryption methods both during transmission and while data is stored on our servers. All account-related information is housed on secure servers behind firewalls, and advanced security protocols are in place to safeguard your data against unauthorized access.
We regularly update our infrastructure and employ best practices in cybersecurity to ensure that personal information remains confidential, protected, and only accessible to authorized users.
We also encourage all users to play an active role in protecting their accounts by using strong passwords, logging out when not in use, and reporting any suspicious activity immediately.
In the event that Notifly becomes aware of a confirmed data breach involving personal data, we will take immediate steps to investigate, contain, and mitigate the breach. Notifly will notify the Customer in accordance with applicable data protection laws and the terms of our Institution Agreement and Customer Data Processing Agreement.
If required by law or at the request of the Customer, we will also notify affected users. Our goal is to notify the Customer within 72 hours of confirming a breach - sooner if applicable law or the contract mandates it.
Should any action be required on the part of the Customer in response to the breach, Notifly will provide guidance and support to help facilitate a coordinated and effective response.
Notifly retains personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy or to meet applicable legal, regulatory, or contractual obligations. The specific retention period depends on the type of data collected and the reason for its processing.
Personal data associated with your account is retained for the duration of your active relationship with Notifly and for a limited period after your account has been deactivated. Unless a longer retention period is legally required or necessary for legitimate business purposes (such as resolving disputes or enforcing agreements), we will delete or anonymize personal data within approximately 90 (ninety) days following account deactivation.
We may retain limited personal data when we have an ongoing legitimate business need to do so — for example, to comply with legal obligations, maintain accurate business and financial records, or meet reporting and audit requirements.
When we no longer have a legitimate need to process your personal data, we will securely delete or anonymize it. If immediate deletion is not possible, we will isolate and securely store the information until deletion becomes feasible.
You may also request the deletion of your personal data at any time, as described in the “Your Choices and Control Over Information” section of this Privacy Policy. Upon receiving such a request, Notifly will work with the relevant school or district (where applicable) to ensure that the data is deleted in accordance with applicable laws and Institution Agreements.
The data we process on behalf of Customers in connection with the Services is stored and secured according to the Terms of Service and Customer Data Processing Agreement.
Notifly provides users with tools and options to manage personal information and communication preferences responsibly.
Most web browsers and some mobile devices offer a “Do Not Track” (“DNT”) setting that allows you to express your preference not to have your online activities monitored or collected. Currently, no uniform standard exists for recognizing or responding to DNT signals.
Accordingly, Notifly does not respond to DNT browser requests or similar mechanisms at this time. If an industry or legal standard for DNT is established in the future, we will update this Privacy Policy to reflect our compliance with that standard.
In accordance with California law, we confirm that we do not respond to DNT signals because no standardized process for doing so has been adopted.
A list of active third-party service providers used by Notifly, including the types of data shared and links to their privacy policies, will be made available upon request.
Notifly may update, revise, or modify this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. If any material updates are made - such as changes to how we collect or use personal information, or adjustments that may affect the user data - we will notify by email or other appropriate channels. Typically, this notice will be given at least seven (7) days before the updated Privacy Policy takes effect, unless a shorter notice period is required or unavoidable.
We encourage users to periodically review this Privacy Policy to stay informed about how their information is handled. Your continued use of Notifly following the posting of any updates means you accept those changes.
If you have questions about your account, this Privacy Policy, your data rights, or Notifly’s privacy practices, you can contact us by email at privacy@mynotifly.com
We’re committed to ensuring your privacy and will respond to your inquiries in a timely and transparent manner.ki