This Privacy Policy explains how PandaCheckout (“we,” “us”) collects, uses, and protects personal information in connection with the PandaCheckout platform (the “Service”). It should be read together with our Terms of Service and Data Processing Agreement.
PandaCheckout is a tool used by schools and youth programs to manage student check-in/check-out, attendance, signatures, and related operations. The school or program that signs up (“you” or the “tenant”) is the controller of the Customer Data it enters. We act as a processor on your behalf and, for student education records, as a “school official” under the Family Educational Rights and Privacy Act (FERPA) with a legitimate educational interest, under your direct control.
Subscription billing is processed by our PCI-compliant payment processor. We receive limited details needed to manage your account (such as your email and subscription status); card numbers are handled by the processor and are not stored on our servers.
We do not sell Customer Data or personal information, and we do not use it to train advertising models or for advertising targeting.
We share Customer Data only as needed to provide the Service and as described here. We do not sell data. We use the following categories of service providers, under written agreements that require them to protect data in line with applicable law, including student-privacy requirements where applicable:
We may also disclose information when required by law or to protect rights, safety, or property. We do not disclose Customer Data for advertising purposes.
The Service is designed to be used under a school’s direction. Student records are treated as education records under FERPA, and we access and process them only as a school official with a legitimate educational interest under your direct control. We do not knowingly collect personal information directly from children under 13 for commercial purposes; any child information in the Service is provided and controlled by the school or parent/guardian. Where the Children’s Online Privacy Protection Act (COPPA) applies, we act as an operator only with the school’s authorization and within the permitted “school authorization” exception. We do not use student data for targeted advertising or sell it. See our Data Processing Agreement for the specific commitments.
We retain Customer Data for as long as your tenant is active, and afterward only as needed to comply with legal obligations, resolve disputes, and maintain records (for example, attendance and signature logs that schools may be required to keep). You may request deletion of your Customer Data at any time, except where we are legally required to retain it. When retention ends, we delete or anonymize the data within a reasonable period.
We use reasonable administrative, technical, and physical safeguards: encryption in transit (TLS), access controls, role-based permissions, hashed passwords, encrypted integration credentials, audit logging, and isolated tenant data. Signature images are stored in private cloud storage with restricted access. No method of transmission or storage is fully secure, but we work to protect your data in line with FERPA’s reasonable-safeguards expectations.
If we become aware of a security incident affecting Customer Data, we will investigate and, where required by law or our agreements, notify affected tenants and authorities without undue delay so you can meet your own notification obligations.
Depending on where you operate, you may have rights to access, correct, export, or delete personal information, and to object to or restrict certain processing. School administrators can manage most Customer Data directly in the Service. For other requests, contact us at privacy@pandacheckout.com.
California residents may have rights to know, delete, correct, and opt out of the “sale” or “sharing” of personal information. We do not sell personal information. To exercise rights, email us.
You may have rights to access, rectify, erase, restrict, port, and object to processing, and to withdraw consent. Our lawful basis is contract (to provide the Service) and, where applicable, legitimate interests and legal obligation. If you have concerns, you may contact your supervisory authority or us at privacy@pandacheckout.com.
Because our hosting and subprocessors may be located in the United States or other regions, Customer Data may be transferred outside your country. We use appropriate safeguards, such as standard contractual clauses where required, for such transfers.
Our public marketing pages use cookies for essential functionality and a third-party analytics provider. The logged-in Service uses essential session cookies. See our Cookie Policy for details and choices.
We may update this Privacy Policy from time to time. We will post the updated policy with a new “Last updated” date and, for material changes, provide notice. Continued use constitutes acceptance.
Questions or requests about privacy? Email privacy@pandacheckout.com.