Privacy Policy

1. Who We Are

Berry Suite is a school management platform operated by Lunchbox EdTech Inc. ("Berry Suite," "we," "us," or "our"). Our platform is designed exclusively for private, charter, and independent K-12 schools. If you have questions about this policy, contact us at privacy@berrysuite.xyz.

2. What Data We Collect

We collect data in three contexts:

• School administrators and staff: Name, work email, job title, and school information provided during account setup or form submissions.
• Students and parents (via school): Names, grades, attendance records, assignment data, and communications — all provided by or through the school that has contracted with Berry Suite.
• Website visitors: Standard web analytics (pages visited, browser type, approximate location) via privacy-respecting tools. No third-party ad tracking.

3. How We Use Your Data

• To deliver and operate the Berry Suite platform for your school
• To send service communications (onboarding, support, product updates)
• To improve the product and diagnose technical issues
• To comply with applicable law

We do not sell student data. We do not use student data for advertising. We do not profile students for commercial purposes.

4. FERPA

For schools in the United States, Berry Suite operates as a "school official" under FERPA (Family Educational Rights and Privacy Act). We access education records only as directed by and for the benefit of the school. Schools remain the data controller for student education records. We will cooperate fully with any school's FERPA compliance obligations.

5. Data Retention

We retain school and user data for the duration of the school's active subscription plus 90 days, after which data is deleted from production systems. Schools may request data export before cancellation.

6. Third-Party Services

We use a limited set of trusted sub-processors (cloud hosting, email delivery, payment processing). We do not share identifiable student data with any third-party services outside of operational necessity. A current list of sub-processors is available upon request.

7. Security

All data is encrypted in transit (TLS 1.2+) and at rest. We maintain access controls, audit logging, and regular security reviews. In the event of a data breach affecting your school, we will notify you within 72 hours of discovery.

8. Your Rights

Depending on your location, you may have the right to access, correct, or request deletion of your personal data. To exercise any of these rights, contact us at privacy@berrysuite.xyz. We will respond within 30 days.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify schools of material changes by email at least 30 days before they take effect. Continued use of Berry Suite after the effective date constitutes acceptance of the updated policy.

10. Contact

Questions or concerns? Email us at privacy@berrysuite.xyz or write to: Berry Suite / Lunchbox EdTech Inc., New York, NY.