Privacy Policy

1. Information We Collect

a. Personal Information

• Name
• Email address
• Phone number
• Affiliated school/program
• Payment information (via Stripe)
• Communication preferences

b. Non-Personal Information

• IP address
• Browser type
• Pages visited
• Time spent on site

2. How We Use the Information

• Facilitate campaign setup and school fundraising activities
• Process payments securely through Stripe Connect
• Communicate with users about transactions or updates
• Provide administrative or technical support
• Improve our services and website experience
• Use student/teacher data only for fundraising purposes authorized by the school or district

3. How Information Is Shared

We do not sell or rent your personal data.

We may share limited information with:

• Stripe for payment authentication and compliance
• Schools or campaign administrators associated with your transactions
• Third-party services (email delivery, analytics, customer support) bound by confidentiality agreements

We will never sell or disclose student or teacher personally identifiable information (PII) for advertising, marketing, or other commercial purposes.

4. Stripe Payment Processing

We use Stripe Connect to process all payments. Sensitive payment information is transmitted directly to Stripe and never stored or processed on our servers.

Stripe’s privacy policy: https://stripe.com/privacy

5. Data Security

• SSL (Secure Socket Layer) encryption
• Role-based access control
• Data minimization and retention best practices
• Regular reviews of third-party processors and integrations
• All vendors with access to student/teacher PII must meet the requirements of New York Ed Law §2-d

6. Data Retention & Deletion

• Student and teacher PII is retained only as long as necessary to operate active fundraising campaigns.
• Data is permanently deleted within 90 days after a campaign closes unless otherwise required by law.
• Aggregate, de-identified data may be retained for reporting and analytics.

7. Compliance with New York Education Law §2-d

Music Supporters complies with New York State Education Law §2-d requirements:

• Educational purpose: Student and teacher PII is collected and used only for fundraising activities authorized by the school/district.
• Parents’ Bill of Rights: Parents and eligible students have the right to inspect, review, and receive a copy of their child’s data; to have PII protected with safeguards; and to be notified of any unauthorized disclosure.
• No sale of data: PII will never be sold or used for marketing.
• Data minimization and deletion: PII is deleted within 90 days after campaign completion unless otherwise required by law.
• Security safeguards: Encryption, firewalls, and strict access controls protect PII.
• Breach notification: In the event of a data breach involving student or teacher PII, Music Supporters will notify affected schools and the New York State Education Department within the legally required timeframe.

8. Your Rights

Depending on your location, you may have the right to:

• Access or update your information
• Request deletion of your data
• Object to or restrict certain processing activities
• Lodge complaints with a data protection authority

To exercise these rights, email us at: support@musicsupporters.org

9. Children’s Privacy

We do not knowingly collect or solicit personal data from children under 13.

For students under 18, information may be collected only with authorization by their school or program and used strictly for fundraising purposes. Students cannot create accounts independently.

If we discover unauthorized collection, we will delete the data immediately.

10. Parents’ Bill of Rights for Data Privacy and Security

In accordance with New York Education Law §2-d and similar state laws, Music Supporters provides the following assurances:

• Student and teacher data will be used only for educational fundraising purposes.
• Personally identifiable information (PII) will never be sold or used for marketing purposes.
• PII will not be shared with third parties except as required to provide the fundraising services (e.g., payment processing) under strict confidentiality.
• Parents and eligible students have the right to inspect, review, and receive a copy of their data.
• Parents may request correction of inaccurate information and deletion of their child’s data.
• Data security safeguards include encryption, firewalls, and role-based access controls.
• In the event of a breach, Music Supporters will notify affected schools and state education authorities within legally required timeframes.
• PII is retained only as long as necessary to operate fundraising campaigns and is deleted within 90 days after campaign completion unless otherwise required by law.

11. Changes to This Policy

We may update this Privacy Policy from time to time.

Changes will be posted here with an updated “Effective Date.”

12. Contact Us

If you have any questions or concerns about this Privacy Policy, you may contact us at:

Email: support@musicsupporters.org

Address: Music Supporters LLC, 5 Old Barn Road, Duxbury, MA 02332, USA

Helping school music programs simplify fundraising, grow community support, and operate more efficiently across the country.

© 2025 Music Supporters. All rights reserved.