Privacy Policy

1. Introduction

SafeLane ("we," "our," or "us") provides school pickup queue management services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using SafeLane, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

We collect the following information necessary to provide pickup management services:

• Parent/Guardian Information: Name, email address, phone number
• Student Information: Student name(s), grade level(s), optional pickup number(s)
• Vehicle Information: Make, model, color, license plate number
• Account Information: Family ID, 4-digit PIN (encrypted)

2.2 Automatically Collected Information

• Device Information: Browser type, screen resolution, timezone, device fingerprint (for security)
• Usage Data: Check-in times, pickup locations, pickup completion times
• Security Data: Login attempts, device verification codes, PIN attempts

2.3 Information We Do NOT Collect

• Student grades or academic records
• Attendance records
• Disciplinary information
• Medical information
• Financial information

3. How We Use Your Information

We use collected information solely for the following purposes:

• Pickup Management: Facilitate efficient student pickup and queue management
• Communication: Send registration confirmations, device verification codes, and service-related notifications
• Security: Verify authorized users, prevent unauthorized access, detect and prevent fraud
• Service Improvement: Analyze usage patterns to improve our service (aggregated, anonymized data only)
• Compliance: Maintain records for safety, security, and legal compliance

4. Information Sharing and Disclosure

4.1 We Share Information With:

• Your School: Authorized school staff can view your pickup information through the staff dashboard
• Service Providers:
  • Supabase (database hosting - SOC 2 Type II compliant)
  • Resend (email delivery)
  • Vercel (application hosting)

4.2 We Do NOT:

• Sell your personal information to third parties
• Share your information with advertisers
• Use your information for marketing purposes (except service-related communications)
• Share your information across schools (data is isolated by school)

4.3 Legal Disclosure:

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to:

• Comply with legal process
• Protect the rights, property, or safety of SafeLane, our users, or the public
• Detect, prevent, or address fraud, security, or technical issues

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS/SSL
• Secure Storage: Data is stored in secure, SOC 2 compliant data centers
• Access Controls: Role-based access controls limit who can view data
• Authentication: PIN-based authentication and device verification
• Monitoring: Continuous security monitoring and logging
• Regular Updates: Security patches and updates applied regularly

⚠️ Important: While we use industry-standard security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your information as follows:

• Active Accounts: While your account remains active
• Inactive Accounts: Up to 1 year after account deactivation
• Pickup History: Retained for school safety and compliance records (typically 3-7 years per school district policy)
• Security Logs: Retained for 90 days for security monitoring and incident response

After the retention period, data is permanently deleted from our systems.

7. Your Rights and Choices

7.1 You Have the Right To:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Opt-Out: Unsubscribe from non-essential email communications
• Data Portability: Request your data in a portable format

7.2 How to Exercise Your Rights:

Contact your school administrator who can access the SafeLane admin panel to:

• Update your information in the Family Management section
• Deactivate your account
• Request data deletion

Alternatively, email us at support@justautomate.info

8. Children's Privacy (COPPA Compliance)

SafeLane does not knowingly collect personal information directly from children under 13 years of age. Our service is designed for use by parents, guardians, and school staff only.

• Parent/Guardian Control: All student information is provided by parents or guardians who consent to the use of this service
• No Child Accounts: Children do not create accounts or log into the system
• School Authorization: Schools verify parent/guardian authorization before granting access

If you believe we have inadvertently collected information from a child under 13, please contact us immediately at support@justautomate.info

9. FERPA Compliance

SafeLane is designed to comply with the Family Educational Rights and Privacy Act (FERPA), which protects the privacy of student education records.

• Limited Scope: We collect only the minimum information necessary for pickup management
• No Education Records: We do not access, store, or process student education records (grades, test scores, attendance, disciplinary records, etc.)
• School Control: Schools maintain control over their data and can request deletion at any time
• Directory Information: Information collected (student name, grade) is generally considered "directory information" under FERPA, which schools may disclose without consent unless parents have opted out

Schools using SafeLane should ensure compliance with their own FERPA policies and procedures.

10. State-Specific Privacy Rights

10.1 California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information (Note: We do NOT sell personal information)
• Right to non-discrimination for exercising privacy rights

10.2 Other State Rights

Residents of Virginia, Colorado, Connecticut, and other states with comprehensive privacy laws have similar rights. Contact us to exercise these rights.

11. International Users

SafeLane is based in the United States. If you are accessing our service from outside the U.S., please note that your information will be transferred to, stored, and processed in the United States.

By using SafeLane, you consent to the transfer of your information to the United States and acknowledge that U.S. data protection laws may differ from those in your country.

12. Third-Party Links

Our service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for legal, operational, or regulatory reasons.

• Notification: We will notify schools via email of any material changes
• Effective Date: Changes become effective on the date posted at the top of this policy
• Continued Use: Your continued use of SafeLane after changes constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically.

14. Data Breach Notification

In the unlikely event of a data breach that compromises your personal information:

• We will notify affected schools and users within 72 hours of discovering the breach
• We will provide information about what data was affected and steps being taken
• We will comply with all applicable data breach notification laws

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices:

We will respond to privacy requests within 30 days.