Privacy Policy

This Privacy Policy explains what information RallyPTA, LLC (a West Virginia limited liability company, "RallyPTA," "we," "us") collects, how we use it, and the choices you have. It covers two kinds of data: (1) account and billing data that RallyPTA itself controls, and (2) family, member, and volunteer data that officers enter into their Organization's account, which the Organization controls and RallyPTA processes on its behalf.

1. Information we collect

Account data. Your email address (used for passwordless sign-in), name, and which Organizations and roles you're associated with.

Organization data. Your PTA's name, school name, fiscal year, and similar profile details.

Directory & volunteer data. Family contact information (name, email, phone) and, if an officer chooses to enter it, a student's first name and grade level for directory purposes. This information is entered by PTA officers, not collected directly from students, and families can ask their PTA to opt out of the shared directory.

Financial data. Dues payment records, budgets, transactions, and reimbursement requests entered or generated through the app. Card numbers are never stored on our servers — payments are handled directly by Stripe.

Usage & technical data. Basic log and error data (via Sentry) used to diagnose problems, and a session cookie used to keep you signed in.

2. How we use information

• To provide and operate the service (sign-in, dashboards, dues collection, treasury tracking, volunteer sign-ups).
• To send transactional email — magic-link sign-in, invites, receipts, and account notices.
• To process subscription and dues payments through Stripe.
• To monitor for and fix errors (Sentry).
• To respond to support requests.

We do not sell personal information, and we do not use family or student directory data for advertising.

3. Who we share information with

We use a small number of service providers to run RallyPTA, each of which processes data only as needed to provide their service to us:

• Stripe — payment processing for platform subscriptions and dues.
• Resend — sending transactional email.
• Vercel — application hosting.
• Neon — database hosting.
• Sentry — error monitoring.

We don't share your Organization's data with other Organizations, and we don't share it with third parties for their own marketing purposes.

4. Children's privacy

RallyPTA is not directed at children and is designed to be used by adult officers and volunteers. Any information about students (such as a first name and grade) is entered by a parent or PTA officer for directory purposes, not collected by us directly from a child. If you believe a child has provided us information directly, contact us and we will remove it.

5. Data retention

We retain Organization data for as long as the Organization's account is active. If an Organization closes its account, we will delete or anonymize its data within a reasonable period, except where we're required to keep financial records longer for legal or tax purposes.

6. Your choices

You can review or correct your account information at any time. To request deletion of your personal data, or to ask your PTA to remove your family from its directory, contact your PTA officers directly (they control that data) or email us and we'll help route the request.

7. Security

We use industry-standard practices to protect data in transit and at rest, including encrypted connections and a database provider with encryption at rest. No system is perfectly secure, and we encourage you to keep your email account secure since it's used for sign-in.

8. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify officers by email.

9. Contact

Questions about this policy or your data? Email us at hello@rallypta.org.