COPPA statement

Our product is designed for schools, not children

VenueOS is a business-to-business (B2B) service sold to K-12 school districts. We are not directed to children, and we do not knowingly collect personal information directly from children under 13. Administrative users — teachers, principals, district IT staff — are always adults.

School-authorized consent

Under the Children's Online Privacy Protection Act (COPPA), a school can provide consent on behalf of parents for the collection of personal information from children under 13, but only for the use and benefit of the school and for no other commercial purpose. Where your district uses VenueOS features that touch information about students under 13, we rely on this school-authorized consent, consistent with FTC guidance.

As a condition of the service, your district represents that:

• It has the authority to provide consent for its students in lieu of parental consent, as permitted under COPPA.
• It has posted appropriate notices to parents describing how student data is used.
• It provides parents with a mechanism to review or request deletion of their child's information.

What we collect

VenueOS's core product does not collect personal information from students under 13. If your district enables optional features (for example, a student-portal kiosk or an interactive classroom display that shows individual student names), we process only the minimum information necessary to deliver that feature and only as instructed by your district.

What we never do

• We do not require or collect more information from a child than is reasonably necessary to participate in an activity.
• We do not use children's personal information for behavioral advertising.
• We do not sell or rent children's personal information.
• We do not use children's personal information to train AI models.

Parental rights

Parents have the right to review the personal information we have about their child, refuse further collection or use, and request deletion. Because we act on behalf of the school, these requests are normally routed through your district's records office. Parents who have been directed to contact us can email coppa@edusignage.app and we will coordinate with the district.

Data retention and deletion

We retain student information only as long as needed to provide the service or as otherwise required by law. On termination of a district's subscription, we delete student information within 90 days of the grace period ending, unless retention is required for legal or safety reasons (for example, audit logs of emergency events).

Security

See the security section of our privacy policy for full details. In short: TLS 1.2+ in transit, AES-256 at rest, role-based access control, Argon2id password hashing, signed emergency broadcasts, and immutable audit logs.

Contact

For COPPA-related questions, contact coppa@edusignage.app.