Student Privacy Notice

StormHub is a school-community platform for clubs, events, opportunities, and club coursework. When a school authorizes StormHub, the school controls its educational use and determines who may participate. StormHub operates the application and processes information only to provide, secure, support, and improve that school use.

This notice applies to StormHub accounts, school workspaces, support forms, email delivery, and optional Google Drive connections. Logged-out visitors see fictional demonstration content rather than real school records.

• Account information: name, verified email, selected school, optional high-school grade, role, account status, profile image, policy versions accepted, and an age-13-or-older assurance. StormHub does not ask for a birth date.
• School participation: club membership and leadership, RSVPs, attendance, opportunity signups, bookmarks, and notification preferences.
• Club coursework: assignments, submission status, written responses, links, uploaded files, selected Google Drive files, private feedback, and club coursework grades.
• Communications: contact-form name, reply email, message, category, administrative response, and enabled notification-email content. Support-message content remains in the scoped StormHub workspace; the external support mailbox receives only a generic new-request alert.
• Operations and security: authentication/session information, hashed signup and request identifiers, CAPTCHA results, access timestamps, administrative audit events, errors, and support-access records.
• Product analytics: identifiable event type, time, school, account, related item, and limited technical metadata used for adoption, reliability, and school-scoped statistics.
• Google Drive, when connected: encrypted access and refresh tokens, token expiration, Google account email, selected file identifiers, names, types, and links.
• Account-rights activity: deletion reasons, review status, reviewer notes, and completion dates. Account exports are generated on demand without storing a separate export request.

StormHub does not request official transcripts, report-card grades, disciplinary records, precise location, private student-to-student messages, advertising profiles, or payment-card information.

• Create and secure a school-scoped account.
• Operate clubs, events, opportunities, assignments, submissions, feedback, attendance, and notifications.
• Show school-authorized administrators participation and adoption statistics within their scope.
• Prevent abuse, investigate errors, provide support, keep audit records, and meet school or legal requirements.
• Improve reliability and usability without selling student information or using it for targeted advertising.

• Students see their own account, participation, submissions, grades, and private feedback.
• Ordinary club members see peer first names and last initials with club roles. They do not see peer emails, grades, submissions, attendance records, or private feedback.
• Authorized club roster managers, Advisors, and scoped school administrators may see full roster names when needed for the school activity.
• Club Advisors and scoped school administrators may review and grade private coursework. Student leaders can track completion status but cannot open private submissions or grades.
• Authorized platform administrators can use an audited account-administration directory containing account name, verified email, school or district, role, and account status. This limited directory is used to locate, secure, and administer accounts across the service.
• The platform account directory does not expose private coursework, grades, attendance details, or support-message content. A platform administrator may view that content only through temporary read-only support access for one school after entering a reason. The session expires within 60 minutes, is logged, and notifies that school's administrators.

Roles never authorize access outside their stated school or club scope. StormHub does not publish a searchable public student directory.

Every new account must verify its email and enter the current private access code for the selected school. A school may accept its official email domain or allow other verified email domains, but the school code is required in either case. Administrators can rotate a compromised code without affecting existing accounts. Staff and administrative roles are assigned only by authorized administrators.

The current rollout is limited to high-school communities and people age 13 or older. Signup requires that assurance, and any grade entered must be 9 through 12. StormHub does not use a birth date or publicly expose the assurance.

StormHub uses service providers only to operate the application: Supabase for authentication, database, and private file storage; Vercel for application hosting and scheduled retention; Resend for enabled email delivery; hCaptcha for abuse prevention; and Google when a user chooses Google sign-in, connects Drive, or sends a direct email to a Google-hosted support mailbox. hCaptcha and hosting providers may process network, browser, device, and request information needed to secure and deliver their services.

Information may also be disclosed when directed by the authorizing school, required by law or valid legal process, or necessary to protect users and the service. StormHub does not sell or rent student information and does not disclose it for behavioral or targeted advertising.

Drive is optional. StormHub requests the limited drive.file permission, which covers files selected or created through StormHub rather than a user's entire Drive. Tokens are encrypted at rest and removed when Drive is disconnected or the account is deleted. Google may retain files in the user's Drive until the user or school deletes them there. External links are governed by the destination service.

External AI processing is disabled for the pilot. StormHub does not send student prompts, school records, submissions, or account information to an AI provider. Any future AI feature requires separate school approval and an updated notice before it is enabled.

The following pilot defaults are enforced for transient operational information. School record requirements, a security investigation, or a valid legal hold may require limited information to be preserved longer. Aggregate statistics that no longer identify a person may be retained.

A daily automated task removes expired operational records. Deactivated accounts and school-authored educational records are reviewed before permanent deletion so the system does not destroy information the school is required to preserve. A recorded active legal hold pauses automated deletion; tenant deletion cannot be scheduled or marked complete while a matching hold remains active.

• Users can correct their profile information in Settings.
• Users can download a JSON export of the account information associated with them.
• Users can submit a permanent deletion request from Settings. Authorized administrators review requests to prevent accidental loss and required-record deletion.
• Schools may request access, correction, export, restriction, or deletion of student information under their control.
• Parents or eligible students should use the school's established FERPA record-review process for education-record requests.
• Google Drive can be disconnected at any time from Settings.

StormHub is intended for school-authorized educational and extracurricular use. The present pilot and production configuration does not permit accounts for children under 13. A future elementary or middle-school deployment that may include a child under 13 must remain disabled until StormHub and the authorizing school establish an age-appropriate notice, school authorization and any required parental-consent process. StormHub uses student information only for the school purpose described here and not for an unrelated commercial purpose.

Protections include verified email, school access codes, scoped roles, row-level database security, private file storage, short-lived download links, encrypted Drive tokens, request throttling, CAPTCHA, protected service credentials, administrative audit records, automatic retention, and short-lived upload authorizations bound to an exact user, assignment, path, type, and size. File-type and signature checks reduce accidental or disguised unsupported uploads, but they are not malware scanning. No online service can promise absolute security. Suspected unauthorized access should be reported immediately so StormHub and the affected school can investigate and provide any required notice.

Contact stormhubsupport@gmail.com or use the contact form. For school-record questions, also contact the applicable school administrator.

Contact-form details are stored in StormHub for authorized review. The support mailbox is notified that a request exists but is not sent the student's name, reply address, school, or message body. A person who instead sends a direct email chooses to send that email's address, subject, and body through the configured mailbox provider.

Material changes will be posted on this page with a new effective date. When a change meaningfully affects school-controlled student information, StormHub will seek school approval before applying it to that school's use.