← Back to Student Section

Privacy Policy

Last updated: April 23, 2026

1. Who we are

Student Section ("Student Section", "we") provides fundraising software to K-12 schools, athletic departments, booster clubs, and school-affiliated organizations in the United States.

We operate as a School Official with a Legitimate Educational Interest under FERPA, 34 C.F.R. § 99.31(a)(1)(i)(B). A school's decision to enable a fundraising campaign on Student Section constitutes that school's direction and authorization of Student Section as such a school official.

2. What we collect

Participants (students)

  • First name + last initial
  • Team / group affiliation
  • Phone number and/or email (only when supplied by the coach or, with parental consent, by the student)
  • Date of birth (used only to determine whether we need parental consent under COPPA; not stored in a form that exposes exact age publicly)
  • Parent or guardian email (for under-13 participants, for consent and deletion requests)

We do not collect: GPA, student ID numbers, home addresses, class schedules, grades, disciplinary records, or any other information that falls under a school's "education records" as defined by FERPA.

Donors

  • Name, email, phone number (as supplied at the time of donation)
  • Payment details are collected by Stripe — Student Section never sees card numbers, expiration dates, or CVCs

School staff (coaches, athletic directors, district admins)

  • Name, email, role
  • Hashed password (bcrypt, 10 rounds)
  • School / district affiliation

3. How we use it

  • Deliver the fundraising campaign the school has authorized
  • Send transactional messages (consent requests, donation receipts, milestone notifications that the user explicitly subscribed to)
  • Aggregate reporting for the school's own financial records

We do not:

  • Sell or rent any personal information
  • Use student information for targeted advertising, student profiling, or any non-educational purpose
  • Share data with third parties except sub-processors strictly necessary to run the service (Stripe for payments, Twilio for SMS, Resend for email) — each bound by equivalent confidentiality terms

4. COPPA — parental consent for under 13

If a participant enters a date of birth indicating they are under 13, Student Section:

  1. Blocks the participant from setting up their fundraising page
  2. Asks the participant for a parent or guardian email
  3. Sends that parent a magic-link consent request describing what data will be collected, why, and how it will be used
  4. Unblocks the participant only after the parent clicks the link and grants consent (Verifiable Parental Consent)
  5. Allows the parent to revoke consent or delete their child's data at any time from the same page

A parent may also email privacy@homefieldraise.com at any time to request review, correction, or deletion of their child's data.

5. FERPA — School Official role

Student Section is designated by each contracting school as a School Official with a Legitimate Educational Interest. That means:

  • Student Section uses education records only for the purpose the school directed (running the fundraiser)
  • Student Section is under the school's direct control with respect to those records
  • Student Section does not re-disclose records to third parties without the school's prior written consent

Schools remain the authoritative holders of their students' education records.

6. Michigan SOPPA — student data protections

For Michigan schools, the Student Online Personal Protection Act applies. Student Section commits to:

  • No targeted advertising using any student, parent, or guardian data
  • No student profiling for any purpose other than the specific educational fundraising use case the school authorized
  • No sale or rental of student information under any circumstance
  • Security controls including TLS 1.3 in transit, AES-256 at rest, MFA on admin access, and audit logs of every administrative action
  • Breach notification to the school within 48 hours of any confirmed unauthorized access

7. Data retention and deletion

Student Section automatically purges identifying fields (name, phone, email) on a participant record 90 days after the owning campaign's end date. Aggregated totals (dollars raised, donor counts) are preserved in the school's reporting because they are the school's own records, not the student's.

Parents or guardians may request earlier deletion at any time — either from the consent page link or by emailing privacy@homefieldraise.com. We will complete the deletion within 7 days and email a confirmation.

Retention of payment records follows IRS requirements (currently 7 years) because those are the school's financial records — they do not contain student identifiers after the 90-day purge.

8. 501(c)(3) integrity — no Individual Fundraising Accounts

Every dollar donated through Student Section flows directly to the paying school or booster organization's Stripe Connect account. No funds are credited to individual student accounts, and no participant earns a personal monetary reward, fee offset, or dues credit for their fundraising performance.

Receipts and tax documentation are issued by the school's 501(c)(3), not by Student Section.

9. Your rights

  • Access — email privacy@homefieldraise.com for a copy of the data Student Section holds about you or your child
  • Correction — same email for any factual corrections
  • Deletion — see section 7
  • Opt-out of marketing — every marketing email contains an unsubscribe link; participant marketing is off by default and only enabled if the parent explicitly opts in

10. Contact

Student Section
Privacy Officer: privacy@homefieldraise.com
General support: hello@homefieldraise.com

Questions? Email privacy@homefieldraise.com. See also our Terms of Service.