Privacy Policy

Notifly provides messaging features, contact tools, and customizable notification systems for schools, districts and individual teachers ("Solo Teachers") on a subscription basis. We are committed to protecting the privacy of schools, educators, and families who use our Platform, and to being transparent about how we handle personal data.

Notifly may act as a data controller when you voluntarily provide information or when we automatically collect technical data about your use of our Services.

Notifly may also act as a data processor when schools or districts ("Customers") use our Services to process personal data of students, parents, or guardians. In this case, we process data solely under the Customer's lawful instructions.

A Solo Teacher (a teacher who opens their own account without a school account) is our Customer for the families they add. We process that data on the teacher's instructions, and the teacher confirms in our Terms of Use that they are allowed to use Notifly with those families.

This Privacy Policy does not apply to third-party websites or services not owned or controlled by Notifly.

We collect the following categories of personal information:

• Contact Information: Full name, phone number, email address.
• User Content: Profile images, message bodies, subject lines, recipient addresses, message logs, and delivery receipts.
• Language Preference and Family Comments: The language a family chooses for messages, and any comment a family leaves on an update through their private NotiFile link.
• Sign-up Information (teachers and school administrators): Your answer to "How did you hear about us?", whether you signed up on the website, iPhone or Android app, the invite code if another teacher invited you, and, for website sign-ups, what brought you to our website (the ad campaign tags or Google click ID in the link, the website you came from and the first page you visited).
• Communications Usage Data: Message events (sent, delivered, opened, bounced), metadata (timestamps, IP addresses, delivery status).
• Transaction Data: Subscription details processed through Stripe. We do not receive your full payment card details.
• Diagnostics Data: Crash logs, performance metrics, device type, and OS version.
• Cookies and Tracking Technologies: Cookies, web beacons, pixels, and local storage.

We do not collect sensitive data such as social security numbers, health information, disciplinary records, or school transcripts.

• Essential cookies — required for core functionality; cannot be disabled.
• Functionality cookies — remember preferences and enable advanced features.
• Analytics cookies — collect aggregated data to improve the user experience.
• Advertising and analytics on our public website — on our public marketing pages only (such as the home page, pricing, the teacher page and sign-up forms for schools and teachers), we use Google Analytics, Google Ads, Meta and TikTok tags to understand how visitors find us and whether our ads work. These tags are never used on pages for parents, guardians, staff or students, or anywhere inside the Notifly app or signed-in portals.

We never use student, parent or teacher data from inside Notifly for advertising, and we never sell it. You can block these tags with your browser's privacy settings or an ad blocker, and the website will still work.

Questions about cookies? Contact privacy@mynotifly.com.

Notifly does not knowingly collect personal information from children under 13 years of age, nor do we market to or sell information about minors.

We operate as a service provider to schools and districts, processing student data solely under their authorization in compliance with COPPA, FERPA, and other applicable education privacy laws.

If you believe a minor has provided data without appropriate consent, contact us at privacy@mynotifly.com.

We use your personal information solely to operate, maintain, and improve the Services:

• Account Management: Creating and managing user accounts, authentication, and access control.
• Service Operations: Delivering core features, facilitating school-to-family communication, and providing technical support.
• Communication: Sending important updates, announcements, or reminders via app, email, or SMS.
• Customer Support: Responding to inquiries and resolving issues.
• Analytics and Reporting: Generating aggregated reports for administrators to improve communication outcomes.
• Security: Verifying identities and protecting the Platform from unauthorized access or misuse.
• Translation: When a family chooses another language, sending the message text to our translation service so the family receives it in that language.
• Growth and Referrals: Learning which channels bring teachers and schools to Notifly, and running the teacher referral program. This uses teacher and administrator sign-up information only, never family or student data.
• Legal Compliance: Meeting obligations under FERPA and other applicable laws.

Notifly sends email and text messages (SMS) on behalf of your school or district, such as announcements, reminders and updates about your child, classroom or school.

We only send text messages to a phone number whose owner has opted in, either by choosing text messages on a Notifly sign-up form or by replying START to a Notifly message. Message frequency varies. Msg & data rates may apply.

Reply STOP to any Notifly text to opt out at any time, or HELP for help. You can also email support@mynotifly.com.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

We do not sell, rent, or trade your personal information. We share data only as permitted by FERPA and applicable privacy law:

• Third-Party Service Providers: Service providers that help us run Notifly: Amazon Web Services (hosting, storage and Amazon Translate for message translation), Twilio (text messages), SendGrid (email), Stripe (payments), Google reCAPTCHA (bot protection on forms) and MailerLite (website contact forms). Each is bound by a data processing agreement, uses the data only to provide its service to us, and may not sell it or use it for advertising.
• Schools and Districts: Authorized administrators may access user data to manage staff accounts and facilitate platform operations.
• Legal Compliance: We may disclose data when required by law or to protect user safety.
• Teacher Referrals: If you sign up with another teacher's invite link, that teacher can see that someone joined with their link, and we email them your name when you first start a paid plan so they know they earned their free month.
• Website Analytics and Advertising Partners: On our public marketing pages only, Google, Meta and TikTok receive website visit information through their tags, as described in section 5.
• Corporate Transactions: In a merger or acquisition, personal data may be transferred with advance notice.
• With Your Consent: We will notify you before sharing data with any third party not acting on Notifly's behalf.

Subscription and top-up payments are processed by Stripe, Inc. Your card details are entered on Stripe's secure pages and are governed by Stripe's privacy policy. We never receive or store your full card number.

To manage billing, we share with Stripe the school or account name, the administrator's email address, and the plan and number of seats purchased. From Stripe we receive payment status, billing dates and invoice records, which we use to keep your plan active, send receipts and billing notices (such as failed-payment, cancellation and price-change emails), and prevent fraud.

Notifly never uses data from inside Notifly (student, family, staff or message data) for advertising, never builds advertising profiles from it, and never sells it. Ads are never shown inside Notifly.

To find new teachers and schools, we advertise Notifly on services such as Google, Meta and TikTok. The tags on our public marketing pages (section 5) let those services measure our ads and may let them show our ads to people who visited those pages. You can block these tags with your browser's privacy settings or an ad blocker.

Data is encrypted in transit (HTTPS) and at rest, and stored in the United States on Amazon Web Services. Access is limited to authorized Notifly staff using multi-factor sign-in, and administrative actions are recorded in an activity log. Databases are backed up continuously and restores are tested.

Data Breach Response

In the event of a confirmed data breach, we will investigate, contain, and mitigate the breach and notify the affected Customer within 72 hours where legally required.

Retention of Personal Data

We keep a school's or Solo Teacher's data while its Notifly account is active. When a school or Solo Teacher closes their account, its data is deleted within 90 days, or sooner on written request, unless the law requires us to keep it longer. Backups that contain deleted data expire within a further 14 days.

• Managing Your Account: Log in to review, update, or correct your account information.
• Opting Out of Communications: Opt out of non-essential messages at any time via the unsubscribe link or account settings.
• Deleting Your Account: Use the account deletion page at mynotifly.com/delete-account, or contact your school/district or Notifly's support team. Upon verification, your account will be deactivated and your personal data deleted within 90 days. Schools can ask for earlier deletion and a written confirmation once it is done.
• Administrative Access: Authorized school administrators can view and manage the accounts of their own school's staff through the Notifly admin portal.

Notifly does not currently respond to "Do Not Track" (DNT) browser signals, as no uniform industry standard for DNT has been established. If a standard is adopted, we will update this Privacy Policy accordingly.

We may update this Privacy Policy from time to time. Material changes will be communicated by email or other appropriate channels, typically at least 7 days before taking effect.

Your continued use of Notifly after changes are posted constitutes acceptance of the updated Policy.