Summary
- We never sell data, whether it belongs to students, families or website visitors.
- Schools stay in control of the student records they put in Bibnor.
- No advertising, no ad tracking and no profiling of students.
- You can leave with everything, exported in open formats, at no charge.
01Who we are and what this covers
Bibnor LLC (“Bibnor”, “we”, “us”) builds school management software for private and independent schools, including teacher, staff and family portals, PTO tools, events, attendance and billing (together, the “Platform”).
This policy explains how we handle personal information in two different situations:
- On our website (bibnor.com), where we decide how information is used.
- Inside the Platform, where we process information on behalf of a school. There, the school decides what is collected and why, and our written agreement with that school governs how we handle it. If that agreement and this policy differ, the agreement wins.
02Information we collect
When you visit our website
- What you send us. If you email us or request a demo, we receive what you include, typically your name, work email, school, school size, the modules you’re interested in and your message. Demo requests are stored in a Google Sheet in our Google account and sent to our team by email, and we use them only to arrange and follow up on your demo.
- Preferences stored on your device. Your display and accessibility choices are saved in your browser’s local storage so they persist between visits. They never leave your device.
- Standard technical data. Like any website, our hosting provider receives basic request information (such as IP address and browser type) to deliver pages and keep the site secure.
- Web fonts. Our pages load typefaces from Google Fonts, which means your browser requests them from Google’s servers.
We don’t use advertising cookies, cross-site trackers or third-party marketing pixels.
When a school uses the Platform
Depending on which modules a school turns on, the Platform may hold:
| Who | Typical information |
|---|---|
| Students | Name, grade, class, attendance, schedules, pickup authorizations, health and allergy notes, incident records, enrollment details. |
| Parents & guardians | Contact details, relationship to the student, custody and pickup instructions, signed forms, billing and payment history, event RSVPs, volunteer hours. |
| Staff | Name, role, work contact details, class assignments, leave requests, and records of actions taken in the Platform. |
| PTO members | Contact details, volunteer sign-ups, donations and treasury records. |
Card and bank payments are handled by an established payment processor; we don’t store full card numbers on our own systems.
03How we use information
In shortTo run the service a school asked for, and nothing else.
- To provide, maintain, secure and support the Platform for the school that engaged us.
- To respond to your enquiries and arrange demos.
- To send service messages, such as security notices or changes to features you use.
- To meet legal obligations and protect the rights and safety of students, schools and users.
We do not sell personal information, use student data for targeted advertising, or build profiles of students for any purpose other than the school’s educational purposes.
04Student data, FERPA and COPPA
Schools own and control student records. When a school uses Bibnor, we act as a service provider under the school’s direct control, using student information only for the purposes the school authorizes. This is consistent with the “school official” role described in the U.S. Family Educational Rights and Privacy Act (FERPA).
Where children under 13 use the Platform, we rely on the school to provide consent on behalf of parents for use in the educational context, as permitted under the Children’s Online Privacy Protection Act (COPPA), and we use that information only for the school’s benefit.
Parents and eligible students who want to review, correct or delete records should contact their school, which can do so through the Platform. If you contact us directly, we’ll pass your request to the school.
05AI features
Some features use AI to help with repetitive work, such as drafting reports, cleaning up data or flagging items for a person to review. These features work with the minimum information needed for the task, and decisions that affect a student are always left to school staff.
We do not use student data to train general-purpose AI models, and we only use AI service providers under contracts that prohibit them from using school data for their own purposes.
07How we protect it
- Encryption in transit (TLS) and at rest.
- Role-based access, so each person sees only what their role requires.
- Audit logging of access to and changes in school records.
- Regular backups and tested restore procedures.
- Access to production systems limited to staff who need it.
No system is perfectly secure. If we become aware of a security incident affecting personal information, we’ll notify the affected schools without undue delay and support them in meeting their own notification duties.
08How long we keep it
We keep Platform data for as long as our agreement with the school is active. When it ends, the school can export its data in open formats at no charge, and we then delete it within the period set out in that agreement, except where the law requires us to keep something longer.
Emails and enquiries sent to us are kept for as long as needed to respond and maintain our business records.
09Your rights and choices
Depending on where you live, you may have the right to access, correct, delete or obtain a copy of your personal information, and to object to certain uses of it.
- For information held for a school, contact the school, which controls those records.
- For anything else, email us at info@bibnor.com. We’ll confirm who you are before acting, and we won’t treat you differently for making a request.
You can clear the preferences stored on your device at any time through your browser settings, or with Reset all in our accessibility panel.
10Children
Our website is intended for school staff and families, not for children. Children use the Platform only through an account provided by their school, under the school’s supervision and consent.
11Changes to this policy
We’ll update this page if our practices change, and revise the “Last updated” date above. If a change materially affects how we handle school data, we’ll notify our schools in advance, and we won’t apply it to data already collected without the school’s agreement.
12Contact us
For questions about this policy or about how a school’s data is handled, contact us at: