Privacy

Whose data this is

Doorpost is used by schools. The school is the controller of its students' records; Doorpost (The Data Design Group) processes them on the school's behalf. Family documents — birth certificates, immunization records, custody papers, insurance cards — belong to the family. A school holds a share of them while a student is enrolled, and that share ends on the school's retention schedule or when the family stops sharing, whichever comes first.

What we collect

Student and household information the school enters or families confirm; attendance, grades, forms, messages and payments recorded by the school; documents families upload; and ordinary server logs (pages visited, a hashed IP address, browser type). We do not sell any of it, and we do not use it for advertising.

Who can see what

School staff see what their role allows. Families see their own children. Every time anyone at a school opens a family document, the access is logged and the family can read that log. Platform staff at Doorpost access a school's data only to operate the service or on the school's request, and that access is logged too.

Where it lives

On servers we operate. Family documents are encrypted at rest with a key that is not stored beside them. Backups are encrypted and kept off-site. Ownership of family documents can be recorded with MeCentral, so a record goes with the family to its next school.

Email and text messages

Schools send messages through Doorpost by email, text message, and in the app. A parent can turn off text messages under Settings, except for emergency broadcasts, which a school may send by every channel.

Children

Students do not have Doorpost logins. Families and schools act on their behalf.

Leaving

A school can export its records at any time. When a school leaves Doorpost, its data is deleted on a schedule it sets, and family documents were never the school's copy to begin with.

Questions

Write to privacy@doorpost.org.