Privacy Policy

1. Introduction

SchoolHouseStock, Inc. ("SchoolHouseStock," "we," "us," or "our") operates the website located at schoolhousestock.com and any related mobile applications or services (collectively, the "Platform"). We are committed to protecting the personal information of all users, including educators who sell resources ("Sellers") and individuals who purchase resources ("Buyers").

This Privacy Policy explains what information we collect, how we use it, with whom we share it, and your rights regarding that information. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Platform.

2. Information We Collect

2.1 Information You Provide Directly

• Account registration: Name, email address, username, and password when you create an account.
• Seller onboarding: Business name, school or organization affiliation, tax identification information (collected and stored by Stripe — see Section 5), bank account details for payouts (handled entirely by Stripe), and a profile bio or photo you choose to upload.
• Purchases: Billing name, billing address, and payment card details (collected and tokenized by Stripe — we do not store raw card numbers).
• Communications: Content of any messages you send to our support team, feedback submissions, or review text you author.
• Content you upload: Resource files (PDFs, presentations, images), product descriptions, pricing information, and any metadata attached to uploaded materials.

2.2 Information Collected Automatically

• Log data: IP address, browser type and version, operating system, referring URLs, pages visited, time spent on pages, and the date and time of each request.
• Device information: Device identifiers, screen resolution, and language preferences.
• Cookies and similar technologies: We use session cookies (required for authentication), preference cookies (to remember your settings), and analytics cookies (to understand how the Platform is used). See Section 9 for details on managing cookies.
• Search and interaction data: Search queries entered on the Platform, products viewed, resources added to cart, and purchase history.

2.3 Information from Third Parties

• Stripe: When you connect a Stripe Express account or make a purchase, Stripe may share confirmation data (such as payout status, charge status, or verification status) with us via webhook events. We do not receive raw financial account numbers from Stripe.
• Printful: If you purchase print-on-demand merchandise, Printful provides us with order fulfillment status and shipping tracking information.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Platform: Creating and maintaining your account, processing purchases, delivering digital downloads, and facilitating payments between Buyers and Sellers.
• Seller payouts: Routing purchase proceeds to Seller Stripe Express accounts, minus the applicable platform fee.
• Communication: Sending transactional emails (order confirmations, download links, payout notifications, account security alerts). We do not send marketing emails without your explicit consent.
• Customer support: Responding to inquiries, resolving disputes, and processing refund requests.
• Fraud prevention and security: Detecting and preventing unauthorized access, fraudulent transactions, abuse of the Platform, and violations of our Terms of Service.
• Platform improvement: Analyzing usage patterns to improve search relevance, product recommendations, and overall user experience.
• Legal compliance: Meeting our obligations under applicable laws, including tax reporting, responding to lawful government requests, and enforcing our agreements.

We do not sell your personal information to third parties for their marketing purposes.

4. Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area or the United Kingdom, our legal basis for processing your personal data is:

• Contract performance: Processing necessary to fulfill our agreement with you (e.g., processing purchases, delivering files, processing seller payouts).
• Legitimate interests: Fraud prevention, Platform security, and improving our services, where these interests are not overridden by your rights.
• Legal obligation: Compliance with applicable laws and regulations.
• Consent: For optional cookies or marketing communications, where we rely on your explicit consent.

5. Payment Processing and Stripe

All payment processing on SchoolHouseStock is handled by Stripe, Inc. and its affiliates. SchoolHouseStock uses Stripe Connect to facilitate direct payments between Buyers and Sellers.

• When a Seller connects a Stripe Express account, Stripe collects and stores that Seller's identity verification documents, bank account information, and tax details directly. SchoolHouseStock does not have access to this raw data.
• When a Buyer completes a purchase, their card details are entered directly into Stripe-hosted payment fields. SchoolHouseStock receives only a Stripe payment reference and the transaction status.
• Stripe's processing of your data is governed by Stripe's own Privacy Policy (available at stripe.com/privacy) and, for Sellers using Stripe Connect, the Stripe Connected Account Agreement.

6. Sharing Your Information

We share your information only in the following circumstances:

• Between Buyers and Sellers: When a Buyer purchases a resource, the Seller receives the Buyer's first name and the product purchased for their records. Sellers do not receive Buyers' email addresses, billing addresses, or payment information.
• Service providers: We share data with third-party vendors who process data on our behalf, including Stripe (payments), Printful (print-on-demand fulfillment), Resend (transactional email delivery), and Meilisearch (search infrastructure). These providers are contractually bound to use data only as directed by us.
• Legal requirements: We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect rights, property, or safety.
• Business transfers: If SchoolHouseStock is acquired, merges with, or transfers substantially all of its assets to another company, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on the Platform before your information is transferred and becomes subject to a different privacy policy.
• With your consent: We may share your information for any other purpose with your explicit prior consent.

We do not sell, rent, or trade your personal information.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Specifically:

• Account information is retained for the life of your account plus 2 years after account deletion, to support dispute resolution and legal obligations.
• Purchase records and order history are retained for 7 years for tax and accounting compliance.
• Server logs are retained for 90 days.
• Support communications are retained for 3 years.

After the applicable retention period, we securely delete or anonymize your personal information.

8. Security

We implement commercially reasonable technical and organizational measures to protect your personal information, including:

• TLS encryption for all data transmitted between your browser and our servers.
• Encrypted storage for sensitive data at rest.
• Access controls limiting employee access to personal data to those with a legitimate business need.
• Regular security reviews and dependency updates.
• Two-factor authentication options for your account.

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If you believe your account has been compromised, contact us immediately at security@schoolhousestock.com.

9. Cookies

We use the following categories of cookies:

You can control cookies through your browser settings. Disabling strictly necessary cookies will prevent the Platform from functioning correctly.

10. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal information, subject to legal retention requirements.
• Portability: Request that we provide your data in a structured, machine-readable format.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Objection: Object to processing based on our legitimate interests.
• Withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at privacy@schoolhousestock.com. We will respond within 30 days (or sooner, as required by applicable law). We may ask you to verify your identity before processing your request.

California residents (CCPA/CPRA): California law provides additional rights, including the right to know what personal information is sold or disclosed for business purposes, and the right to opt out of the sale of personal information. We do not sell personal information. For California-specific requests, contact us at the address below.

11. Children's Privacy

SchoolHouseStock is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@schoolhousestock.com and we will promptly delete such information. Users must be at least 18 years of age to create a Seller account.

12. International Data Transfers

SchoolHouseStock is operated from the United States. If you access the Platform from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country. By using the Platform, you consent to such transfer. Where required by law, we implement appropriate safeguards (such as Standard Contractual Clauses) for international data transfers.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the revised policy on this page with an updated effective date, and where appropriate, by sending you an email notification. Your continued use of the Platform after the effective date of any change constitutes acceptance of the revised policy. We encourage you to review this policy periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us: