Privacy Policy
Plain-language summary: centers put student names and attendance into PACE; that data belongs to the center and we process it only to run the service. We collect the minimum, we don't sell or share personal information for advertising, kiosks only ever see names, and attendance records are kept at least two years and are exportable. Questions: support@paceattend.com.
1. Who we are and scope
PACE is operated by Belal Zahran, sole proprietor doing business as PACE, in Orange County, California. This policy covers paceattend.com, the PACE application, and the kiosk interface. It applies to two kinds of people: center owners (our customers) and students whose information centers enter into the service.
2. What we collect
- Center owner accounts: name, email address, sign-in credentials (or your Google account identity if you sign in with Google), center name and timezone, and billing records once subscriptions launch (payments are processed by Stripe; we never store card numbers).
- Student records, entered by the center: first and last name, session length, attendance timestamps, optional classwork/homework yes-no answers, an optional parent phone number, and optional free-text notes. We deliberately collect no student birthdays, addresses, photos, or accounts. Students never log in.
- Technical data: standard server logs (IP address, browser type, timestamps) and the minimum cookies/local storage needed for sign-in sessions, theme preference, and kiosk device credentials. No advertising trackers, no analytics resold to anyone.
- Website analytics: our public marketing pages (paceattend.com, including this page and the Terms page) use Google Analytics to understand visits in aggregate - pages viewed, approximate location, and how visitors found us. Google Analytics sets cookies on those pages. It does not run inside the PACE application itself, and no student information is ever sent to it. You can opt out with the Google Analytics opt-out browser add-on or by blocking cookies for our marketing pages.
3. Children's information
Student records are entered and controlled by the center, which has the direct relationship with families. Centers are responsible for providing any notices to, and obtaining any consents from, parents or guardians that their circumstances require. PACE processes student information solely on the center's behalf to provide attendance tracking, applies data minimization (names only on kiosks; minimal fields overall), and never uses student information for marketing, profiling, or advertising of any kind.
4. How we use information
To provide and secure the service (check-ins, boards, history, reports, backups); to communicate with center owners about their account (trial status, service notices); and to comply with law. We do not sell personal information, and we do not "share" it for cross-context behavioral advertising as defined by the CCPA/CPRA.
5. Who processes data for us
We use a small set of infrastructure providers under contract: Supabase (database and authentication hosting, United States), Vercel (web hosting), Google (optional sign-in), Stripe (payments, once billing launches), and a transactional email provider for service emails. Each processes data only to provide their service to us.
6. Retention and deletion
Attendance records are retained for at least two (2) years to meet centers' record-keeping obligations, and are never silently deleted — removals in the app are reversible hides, with an audit trail for corrections. If a center account is closed, its data remains exportable during the read-only period; centers may request full deletion after the retention window at support@paceattend.com.
7. Security
All traffic is encrypted in transit (TLS) and data is encrypted at rest by our hosting providers. Every center's data is isolated with database-level row security; kiosk devices authenticate with per-device secrets that can be revoked instantly and can only ever read student names and session state. Access to production systems is limited to the operator.
8. Your rights (California and elsewhere)
Center owners can access and export their center's data from the dashboard at any time. California residents may request access, correction, or deletion of their personal information (subject to the retention obligations above) and will not be discriminated against for exercising these rights. Requests about student records should go to the student's center, which controls them; we support centers in fulfilling such requests. Contact: support@paceattend.com.
9. Changes
Material changes to this policy will be versioned, posted here, and presented in the app for re-acceptance where required. Continued use after the effective date constitutes acceptance.
10. Contact
PACE · Orange County, California · support@paceattend.com