Student Data Privacy Notice

Who we are

Rooftop Crew is an after-school student tracker made by NASR LLC, Peachtree Corners, Georgia. We provide it to schools. The school decides which students are added and who can see them; we act on the school's behalf and under its direction.

What we collect

Student details the school provides: student ID code, first and last name, grade, and optional photo.

Guardian contact details the school provides: name, email, phone, and alert preferences.

After-school activity: check-in and check-out times and pickup locations.

Staff and parent sign-in accounts, and a log of who viewed each student's history.

Children do not create accounts or enter information themselves.

How we use it

Only to help the school keep track of students after school and to let guardians see their own child's pickup status. We do not sell student information, use it for advertising or targeted marketing, or build profiles of students for any purpose other than this service.

Who processes it

Hosting and database: Lovable Cloud.

Optional AI assistant for administrators: requests pass through the Lovable AI Gateway to an AI model provider. The assistant receives student codes and attendance details, not student names.

We do not share student information with anyone else unless the school directs us to or the law requires it.

How we protect it

Staff accounts need administrator approval. Guardians see only children linked to their email and can change only alert settings. Check-in records cannot be edited or deleted by staff. Every opening of a student's history is logged for administrators.

How long we keep it

Check-ins and alerts: 1 year. AI assistant conversations: 90 days. Record-view log: 2 years. These are deleted automatically each night.

Student and guardian details stay until the school removes them, a deletion request is completed, or the school's agreement ends — at which point the school's administrator deletes all of its student data.

Your rights as a parent

Under FERPA, the Georgia Student Data Privacy, Accessibility, and Transparency Act, and COPPA, parents may review their child's records, ask for corrections, and ask for deletion.

Signed-in parents can send a request from their child's page. The school reviews it and responds. You can also contact your school directly.

Children under 13

We collect children's information only through the school, for the school's educational purposes, as COPPA allows. The school can review or delete a child's information at any time.

Contact

Questions or concerns: info@nasrllc.com. If we ever learn of unauthorized access to student data, we will notify the affected school promptly so it can inform families.