Student data privacy
A school is trusting us with its families and its students. Here is exactly what that means for their data: what we collect, what we never do, how long we keep it, and how it aligns with the laws that protect students.
What we collect
- Adult contact details for organizers and families: name, email, and phone.
- Coordination facts: who is going, who is a chaperone, who has returned a permission form, and payment status.
- Payment records: amounts, currency, and the payment processor's references. Card numbers are entered directly into the processor's secure fields and never reach Jettova.
- Optional uploaded permission forms: the document a family uploads, stored privately.
What we never do
- Student medical or health records. The emergency and medical layer stays off in the pilot, so none of it is collected or stored.
- We do not sell personal data, ever.
- We do not use student data for advertising, or to build a profile of a student unrelated to their trip.
- We do not share data with third parties except the sub-processors that run the service (listed in the DPA), under data-protection terms.
Built to align with the laws that protect students
Jettova for Schools is built to help a school meet its obligations under the Family Educational Rights and Privacy Act (FERPA), the Children's Online Privacy Protection Act (COPPA), and applicable state student-privacy laws (for example SOPIPA). We support the school as the controller and act only on its instructions.
The full commitments, including sub-processors, security measures, breach notification, and retention, are set out in our Data Processing Addendum, which your counsel can review before you sign up.
Your data, your control
The data belongs to the school
The school is the controller; Jettova is a processor acting on the school's instructions. When the platform is used with K-12 students, Jettova acts as a school official performing an institutional service, and uses covered data only for that.
Access, correction, deletion
Jettova helps the school respond to requests to access, correct, or delete a family's data, and to meet the school's obligations under applicable law.
Retention and auto-deletion
Coordination data lives with the trip and is pruned when it ends. Where the emergency and medical layer is later enabled, that data is deleted on a schedule shortly after the trip, automatically. On termination, we delete or return the school's data at the school's choice.
Export any time
It is your data. A school can request an export of its roster and records at any time, and request deletion, without penalty.
This page describes how the product works and is not a substitute for the executed agreement and DPA between your school and Jettova, Inc., which govern.