Privacy Policy
Plain-language summary: centers put student names and attendance into PACE; that data belongs to the center and we process it only to run the service. We collect the minimum, we don't sell or share personal information for advertising, kiosks only ever see names, and attendance records are kept at least two years and are exportable. Questions: support@paceattend.com.
1. Who we are and scope
PACE is operated by Belal Zahran, sole proprietor doing business as PACE, in Orange County, California. This policy covers paceattend.com, the PACE application, and the kiosk interface. It applies to two kinds of people: center owners (our customers) and students whose information centers enter into the service.
2. What we collect
- Center owner accounts: name, email address, sign-in credentials (or your Google account identity if you sign in with Google), center name and timezone, and billing records for your subscription (payments are processed by Stripe; we never store card numbers).
- Student records, entered by the center: first and last name, session length, attendance timestamps, optional classwork/homework yes-no answers, an optional parent phone number, and optional free-text notes. We deliberately collect no student birthdays, addresses, photos, or accounts. Students never log in.
- Technical data: standard server logs (IP address, browser type, timestamps) and the minimum cookies/local storage needed for sign-in sessions, theme preference, and kiosk device credentials. No advertising trackers, no analytics resold to anyone.
- Website analytics: our public marketing pages (paceattend.com, including this page and the Terms page) use Google Analytics to understand visits in aggregate - pages viewed, approximate location, and how visitors found us. Google Analytics sets cookies on those pages. It does not run inside the PACE application itself, and no student information is ever sent to it. You can opt out with the Google Analytics opt-out browser add-on or by blocking cookies for our marketing pages.
3. Children's information
Student records are entered and controlled by the center, which has the direct relationship with families. Centers are responsible for providing any notices to, and obtaining any consents from, parents or guardians that their circumstances require. PACE processes student information solely on the center's behalf to provide attendance tracking, applies data minimization (names only on kiosks; minimal fields overall), and never uses student information for marketing, profiling, or advertising of any kind.
4. How we use information
To provide and secure the service (check-ins, boards, history, reports, backups); to communicate with center owners about their account (trial status, service notices); and to comply with law. We do not sell personal information, and we do not "share" it for cross-context behavioral advertising as defined by the CCPA/CPRA.
Text messages (SMS)
Centers that turn on PACE Announcements can send one-way informational texts, such as closures and schedule changes, to the parent mobile numbers they keep in PACE. A center only messages a number after the parent gives the center consent, and the center records that consent in PACE for that number (date, number and who recorded it). PACE sends these texts on the center's behalf, and every text starts with "PACE for" and the center's name (details: Text message consent). Reply STOP to any message to stop receiving texts and HELP for help. Message and data rates may apply, and message frequency varies.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent are never shared with any third party, except with our text-message delivery provider (Twilio) solely to deliver the messages.
5. Who processes data for us
We use a small set of infrastructure providers under contract: Supabase (database and authentication hosting, United States), Vercel (web hosting), Google (optional sign-in), Stripe (payments), Twilio (text-message delivery, only for centers that turn on Announcements), and a transactional email provider for service emails. Each processes data only to provide their service to us.
6. Retention and deletion
Attendance records are retained for at least two (2) years to meet centers' record-keeping obligations, and are never silently deleted — removals in the app are reversible hides, with an audit trail for corrections. If a center account is closed, its data remains exportable during the read-only period; centers may request full deletion after the retention window at support@paceattend.com.
7. Security
All traffic is encrypted in transit (TLS) and data is encrypted at rest by our hosting providers. Every center's data is isolated with database-level row security; kiosk devices authenticate with per-device secrets that can be revoked instantly and can only ever read student names and session state. Access to production systems is limited to the operator.
Security incidents. If we confirm that a center's data has been accessed without authorization, we will notify the affected center without unreasonable delay and within the time required by applicable law. That notice will describe what information was accessed, what we have done in response, and what steps we recommend the center take.
8. Your rights (California and elsewhere)
Center owners can access and export their center's data from the dashboard at any time. California residents may request access, correction, or deletion of their personal information (subject to the retention obligations above) and will not be discriminated against for exercising these rights. Requests about student records should go to the student's center, which controls them; we support centers in fulfilling such requests. Contact: support@paceattend.com.
9. Changes
Material changes to this policy will be versioned, posted here, and presented in the app for re-acceptance where required. Continued use after the effective date constitutes acceptance.
10. Contact
PACE · Orange County, California · support@paceattend.com