Privacy Policy

1. Overview

BandXP Live is an achievement and progress tracking platform for K-12 band programs. It is used by band directors and their students within school programs. This policy explains what information we collect, how we use it, and the choices schools have. In short: we collect the minimum information needed to operate the platform for your school program, we keep each school's data isolated, and we never sell or share your information for advertising or any other purpose outside of your program.

2. Who Uses BandXP Live

There are two kinds of people who interact with the platform:

• Band directors (and any staff editors a director invites). Directors register accounts and use the platform to record student achievements and progress.
• Students at participating schools. Students do not have personal accounts. They access the platform only through a school-assigned PIN. They cannot sign in with an email address or any external login (Google, Apple, etc.), and they cannot create profiles, message other users, post content, or interact with the application in any way other than viewing.

3. What Information We Collect

From directors (when they register and use the platform):

• Name
• Email address
• School affiliation

About students (entered by the director):

• Student name
• School-assigned PIN
• Achievement and progress information that the director records about the student

What we do not collect from students:

• Email addresses, phone numbers, or home addresses
• Parent or guardian contact information
• Device identifiers, precise location, or biometric data
• Photos, videos, audio recordings, or any uploaded files

4. How Students Access the Platform

Student access is strictly view-only. A student enters their school-assigned PIN and can see the achievement and progress information that their director has recorded for them. That is the entire student experience.

Students cannot:

• Upload any photos, videos, audio, or other files
• Submit responses, scores, comments, or any other content
• Send messages or communicate with anyone through the platform
• View, interact with, or contact other students or users
• Modify any data in the application

5. How We Use Information

We use the information described above for one purpose: to operate the BandXP Live platform for your school's band program. That includes letting directors record and manage achievement data, and letting students view their own progress.

We do not sell, rent, or trade your information. We do not share it with data brokers, advertisers, or marketing networks. We do not use it to build advertising profiles, and we do not use it for any purpose unrelated to running the program at your school.

6. No Behavioral Tracking or Advertising Cookies

BandXP Live does not use advertising cookies, third-party advertising trackers, or cross-site tracking technologies. We do not run advertising on the platform, and we do not allow third-party advertising networks to collect information about you or your students through our service.

7. Data Isolation Between Schools

Each school's data is fully isolated from every other school on the platform. Directors, staff, and students at one school cannot see, access, or interact with data belonging to another school. Records are partitioned at the database level so that information stays inside the school program it belongs to.

8. Third-Party Service Providers

We use a small number of trusted service providers to run the platform. They process information on our behalf, under their standard terms, and only to deliver the service:

• Supabase — database hosting. All BandXP Live data is stored in Supabase, with encryption in transit and at rest.
• Vercel — web hosting. Vercel delivers the BandXP Live application to your browser.
• Resend — transactional email. Resend sends operational emails to directors only (for example, account messages, password resets, billing receipts, and confirmations of deletion requests). Resend is not used for marketing email, and students do not receive email from BandXP Live.

None of these providers receive student data for their own purposes. They act only as processors on our behalf.

9. Data Retention and Deletion

Directors can request deletion of their program's data at any time by emailing support@bandxp.live. On a verified request, we will remove the program's student records, achievement data, and associated information from our systems and confirm when the deletion is complete. Director account information is retained for as long as the account is active and is removed when the account is closed.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make a material change, we will notify directors by email and update the "Last updated" date at the top of this page. Continued use of the platform after a change means you accept the updated policy.

11. Contact

For any questions, concerns, or requests related to this Privacy Policy — including data deletion requests — please contact us at support@bandxp.live.