Privacy Policy
Last updated: March 15, 2026
1. Introduction
Building Hope Impact Fund ("we," "us," or "our") operates SchoolStack Budget ("the Service"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the Service.
2. Information We Collect
Account Information
When you create an account, we collect your name, email address, and password (stored in hashed form).
Financial Model Data
When you use the Service, you provide school profile information, enrollment projections, revenue assumptions, staffing plans, expense estimates, and related financial data. This data is stored to allow you to save, edit, and export your models.
Usage Data
We automatically collect certain information about how you interact with the Service, including pages visited, features used, timestamps, browser type, and device information. This data is used to improve the Service and for aggregate analytics.
Guest Usage
The guest Founder Quick-Start Wizard at /underwriting can be used without an account. Data entered in guest mode is stored locally in your browser (localStorage) under the key guest_underwriting_model_v1 and is not transmitted to our servers unless you choose to run a readiness analysis or download an Excel workbook, at which point the form data is POSTed to /api/public/consultant or /api/public/export-budget respectively. We do not retain guest submissions beyond the duration of the API call. Clearing your browser storage erases your guest model permanently.
3. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Service
- Process and store your financial models
- Generate consultant-grade analyses and financial projections
- Send you important service-related communications
- Monitor usage patterns to improve the Service
- Detect and prevent fraud or abuse
4. Data Sharing
We do not sell your personal information or financial model data to third parties. We may share your information only in the following circumstances:
- Service Providers: With trusted third-party service providers who assist in operating the Service (e.g., hosting, database management), bound by confidentiality obligations
- Legal Requirements: When required by law, subpoena, court order, or governmental request
- Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice
- With Your Consent: When you explicitly authorize sharing
5. Data Security
We implement industry-standard security measures to protect your data, including encrypted data transmission (TLS/SSL), hashed password storage, and access controls. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
6. Data Retention
We retain your account data and financial models for as long as your account is active. You may delete your financial models at any time through the Service. If you request account deletion, we will remove your personal data within 30 days, except as required by law or for legitimate business purposes.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Export your financial models in standard formats
- Object to certain data processing activities
- Withdraw consent where processing is based on consent
To exercise any of these rights, contact us at admin@schoolstack.ai.
8. Cookies and Local Storage
Essential Cookies & Local Storage
The Service uses browser local storage and session tokens for authentication and to preserve your wizard progress. These are essential for the functioning of the Service and do not require consent.
Analytics Cookies
We use Google Analytics (GA4) to understand how visitors interact with the Service, including pages visited, session duration, and general usage patterns. Google Analytics sets cookies (such as _ga and _ga_*) to distinguish unique users and track sessions.
Analytics cookies are only set after you provide consent via the cookie notice displayed when you first visit the site. If you decline, no analytics cookies are placed and the Service functions normally. You can change your preference at any time by clicking "Cookie Preferences" in the footer of any page, which will re-display the cookie notice.
We configure Google Analytics with IP anonymization enabled. We do not use advertising cookies or share analytics data with third parties for marketing purposes.
9. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the revised policy.
11. Contact
If you have questions about this Privacy Policy, please contact us at admin@schoolstack.ai.