Privacy policy

This policy explains how EdStitch (“we”) handles information in Parent Connector, a read-only web app that shows parents their child's Google Classroom assignments. We built it to collect as little as possible.

Information we collect

From parents

• Email address and password (passwords are stored hashed by our authentication provider).
• Any setup answers you give during onboarding.

From a connected student's Google account

When a student authorizes Parent Connector on Google's consent screen, we receive:

• The student's Google account email address and display name.
• OAuth access and refresh tokens that let us read their Google Classroom data on the parent's behalf.
• Read-only access to the student's courses, published coursework, their own submissions (including status and any score the teacher returned), class announcements, and course teacher names.

The full list of scopes and API calls is in our Google Classroom integration overview.

How we use it

• To show the parent their child's classes, assignments, statuses, and deadlines in the Parent Connector dashboard.
• To keep the connection working (refreshing tokens and telling the parent if a reconnect is needed).
• To operate, secure, and debug the service.

We do not use this information for advertising, and we do not sell or rent it to anyone.

Google user data and Limited Use

Parent Connector's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data to provide and improve the user-facing features described above.
• We do not transfer Google user data to others except as needed to run the service (our hosting and database providers), to comply with law, or with the user's consent.
• We do not use Google user data for advertising, and we do not sell it.
• We do not use Google user data to develop, improve, or train generalized AI or machine-learning models.
• No person at EdStitch reads Google user data except with the user's consent, for security purposes, to comply with law, or when it has been aggregated and anonymized.

Storage and retention

• Classroom content (courses, assignments, submissions, scores, announcements, teacher names) is fetched live when a page is viewed and is not saved to our database.
• We store the connected student's email, display name, and OAuth tokens until the parent disconnects that student or deletes their account.
• Data is stored with our infrastructure providers (Supabase for the database and authentication, Vercel for hosting) and is encrypted in transit.

Deleting data and revoking access

• A parent can disconnect a student at any time in Settings. This deletes that student's stored record and Google tokens.
• A student or their school can revoke Parent Connector's access from the Google Account “Third-party apps & services” page or the Google Admin console.
• To delete a parent account and all associated data, email hello@edstitch.com.

Children and students

Parent Connector accounts are for parents. Students don't create accounts; they only authorize read-only access to their own Classroom data through Google. Schools must approve Parent Connector before students under 18 can authorize it. Parent Connector supports a parent's right under FERPA to access their child's education records. If a district uses Parent Connector, we handle student data as directed by that district and applicable law.

Changes

If we change this policy, we'll update the date above and, for material changes, notify parents by email.

Contact

Questions or requests: hello@edstitch.com