Privacy Policy

Summary

This Privacy Policy explains the personal information SchoolIntel, Inc. (“SchoolIntel,” “we,” “our,” or “us”) collects, the purposes for which we process it, with whom we share it, the legal grounds we rely on, and the rights you have. It applies to schoolintel.co, the SchoolIntel web application, and any other service that links to this policy (collectively, the “Services”).

Who we are

SchoolIntel, Inc. is a Delaware corporation. For the purposes of the EU and UK General Data Protection Regulations (“GDPR” and “UK GDPR”), SchoolIntel is the “controller” of personal information processed about visitors to our Services and about school staff included in our database. SchoolIntel is a “processor” of any contact lists or other Customer Data that our customers upload to the platform.

Notice for school staff (GDPR Article 14)

Under Article 14 of the GDPR (and the equivalent UK GDPR provision) we are required to give a specific transparency notice to individuals whose personal data we have collected from sources other than them — in our case, the school staff whose public professional details we aggregate. The substance of that notice is in this policy; this section restates the core points up front so you do not have to hunt for them.

• Who we are. SchoolIntel, Inc., a Delaware corporation. Contact hello@schoolintel.co.
• What categories of personal data we hold about you. Name, current job title, employer (the school), public professional URL (typically the school staff page or a public LinkedIn profile), work email if it has been published or reasonably predicted from public information, and recent professional activity that you or your employer has made public. A full breakdown is in the “Information about school staff” section below.
• Where we got it. Public sources only — school websites, accreditor and association directories, conference programs, hiring boards, group announcements, and public professional networks. We do not buy personal data from data brokers and we do not collect from private sources.
• Why we hold it (legal basis). Legitimate interests — specifically, building and maintaining a database of public professional information so that EdTech vendors can identify the right decision-maker at international schools they want to serve. We have weighed these interests against the rights and freedoms of school staff and only include public, professional information that is reasonably expected to circulate in a B2B context.
• Who we share it with. Our paying customers (when they search the database), our hosting and infrastructure vendors listed at /legal/sub-processors, and authorities where required by law. We do not sell personal data and we do not share it with advertisers.
• How long we keep it. See the retention schedule below — in summary, as long as the underlying public source remains accurate, with permanent suppression after a removal request.
• Your rights. You have the right to access, correct, restrict, object to, and request erasure of the information we hold about you. To exercise any of these rights, email hello@schoolintel.co with “Privacy Rights Request” in the subject. We respond within 30 days.
• Right to lodge a complaint. You can complain to the data-protection authority in your country of residence at any time. For EU residents, a list is available at edpb.europa.eu; for UK residents, ico.org.uk.

Scope of this policy

This policy covers personal information we collect from:

• Visitors to our marketing website (schoolintel.co).
• Customers and authorized users of the SchoolIntel web application.
• School staff whose public professional details we aggregate into our database from public sources.
• Prospects who contact us by email, demo request, or other channels.

Information from customers

When you sign up for or use the SchoolIntel platform we collect:

• Account information. Your name, work email, company name, role, password (hashed), and time zone.
• Billing information. Billing contact, billing address, and the last four digits and brand of your payment card. Full card numbers are handled by our payment processor (Stripe) and never stored on our servers.
• Customer Data you upload. Target school lists, uploaded contact lists you ask us to enrich, notes, saved searches, tags, and exports. We act as the processor of this data and process it under your instructions, governed by our Data Processing Addendum.
• Support communications. The contents of any email, chat, or call you send to our support or sales teams.

Information about school staff

SchoolIntel maintains a database of public professional details about leadership, hiring contacts, and other staff at international schools. We aggregate the following categories of information from public sources:

• Name and current title as published on a school website, accreditor directory, conference program, or public professional network.
• Employer (the school) and, where available, group affiliation (e.g. Nord Anglia, GEMS, Cognita).
• Public professional URL — typically the school staff page or a public LinkedIn profile.
• Work email address if it has been published or predicted from public information (e.g. published institution email-naming conventions). We do not collect personal email accounts.
• Recent professional activity that the individual or their employer has made public (e.g. an announcement that a person has been appointed to a role).

We do not collect home addresses, personal phone numbers, family information, government identifiers, salary, health, political, religious, or other sensitive personal information. We do not track location or behavior on third-party websites. We do not purchase personal data from data brokers.

Each record in our database is timestamped and linked back to the public source it was extracted from. Records are kept fresh by re-checking those public sources; when the source disappears or the person leaves the role, the record is updated or removed.

Information collected automatically

When you visit our website or use the application, we and our service providers collect:

• Device and connection information — IP address, browser type and version, operating system, device type, and referring URL.
• Usage information — pages viewed, features used, search terms inside the application, time stamps, and error logs.
• Diagnostic information — performance metrics and crash reports that help us keep the platform reliable.

Cookies and tracking

We use a small number of cookies and similar technologies. The full list, what each one does, and how to control them is in our Cookie Policy. We do not use third-party advertising cookies or cross-site tracking.

How we use information

We use the information we collect to:

• Provide, operate, secure, and improve the SchoolIntel platform.
• Build and maintain the SchoolIntel database of international school intelligence so customers can identify the right schools and the right contacts.
• Authenticate customers, process payments, and manage subscriptions.
• Respond to demo requests, support tickets, and sales conversations.
• Detect and prevent fraud, abuse, scraping, and other violations of our Acceptable Use Policy.
• Send essential product communications (e.g. service announcements and security alerts). Marketing emails are sent only to recipients who opted in and can be unsubscribed at any time.
• Comply with legal obligations.

Inferences and automated processing

SchoolIntel produces inferencesfrom the information we collect — for example, a recency rank that scores how recently new evidence about a school has appeared, a confidence score for a predicted work email, a tag indicating that a hiring signal is “fresh,” or a recommended next action for a sales team. We treat these inferences as personal information when they are tied to an identified individual.

We do not make decisions that produce legal or similarly significant effects about anyone using solely automated means. Inferences inform what our customers see in the product; the decision to contact you, or not, is always made by a human at the customer's organization.

You have the right to ask us about the inferences we hold about you, contest their accuracy, and request that we remove them. Email hello@schoolintel.co and we will respond within 30 days.

Legal bases (GDPR/UK GDPR)

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Contract. To provide the Services to our customers under our Terms of Service.
• Legitimate interests. For (i) building and maintaining the SchoolIntel database from public professional sources so EdTech companies can identify decision-makers at the schools they serve, (ii) securing the platform against abuse, and (iii) growing our business. We have weighed these interests against the rights and freedoms of school staff and only include public, professional information that is reasonably expected to circulate in a B2B context. School staff have an unconditional right to object — see below.
• Consent. For any cookies or marketing communications that require it. You can withdraw consent at any time.
• Legal obligation. Where we must process information to comply with applicable law.

How we share information

We share personal information only as described below. We do not sell or rent personal information to advertisers or data brokers, and we do not share personal information with any third party for their independent marketing purposes.

• Service providers. Vetted vendors that host our infrastructure, send transactional email, process payments, or provide analytics. They process information only on our instructions and are listed on our Sub-processors page.
• Customers (in the case of school staff records). When a customer searches our database, we surface matching school staff records to them as part of the Service. Customers are bound by our Acceptable Use Policy and may not use this information to spam, harass, or train AI models that replicate our database.
• Corporate transactions. If we are involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred subject to standard confidentiality protections; we will notify affected individuals where required.
• Legal and safety. Where required by law, valid legal process, or to protect the rights, property, or safety of SchoolIntel, our customers, or the public.

International data transfers

SchoolIntel is based in the United States and our infrastructure is primarily hosted there. If you are accessing the Services from outside the United States, your information will be transferred to, stored in, and processed in the United States. For transfers from the EEA, the United Kingdom, or Switzerland, we rely on the European Commission's Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, or another lawful mechanism. A copy of the SCCs we use is available on request to hello@schoolintel.co.

Data retention

We keep different categories of personal information for different periods, set by what we need to operate the Services and what applicable law requires. The schedule below is the operative one.

Where a longer retention is required by applicable law, we keep the affected information for the legally required period. Removal requests are honored permanently — see the school staff removal section.

Records about school staff are retained for as long as the underlying public source remains accurate. We re-check public sources on a regular cadence and remove records when the role is no longer current or the underlying source has been taken down. Removal requests are honored permanently — see below.

Security

We use industry-standard administrative, technical, and physical safeguards to protect personal information. These include encryption in transit (TLS 1.2+) and at rest, role-based access controls, audit logging, vendor security review, secret rotation, and least-privilege infrastructure. We test our security regularly and address findings on a risk-prioritized basis. No system is perfectly secure, however, and we cannot guarantee absolute security.

Your rights

Depending on your location and your relationship with SchoolIntel, you may have rights to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete personal information.
• Have your personal information deleted.
• Restrict or object to certain processing.
• Receive your information in a portable format.
• Withdraw consent where consent is the legal basis.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email hello@schoolintel.co with the subject line “Data Rights Request.” We will respond within 30 days.

School staff: removal & access requests

If your name appears in the SchoolIntel database and you would like to see what we hold about you, correct it, or have it removed, you can make that request directly. We do not require you to be a customer and we do not charge for removal.

• Removal: email hello@schoolintel.co with the subject “Data Removal Request” and include your full name, current school, and a public profile URL (LinkedIn or your school staff page) so we can locate the record. We will action removal within 30 days, suppress your record from re-indexing, and confirm completion in writing.
• Access:email the same address with the subject “Data Access Request.” We will provide a copy of the information we hold about you and the public sources from which we aggregated it.
• Correction:email the same address with the subject “Data Correction Request.” If we cannot verify the correction against a public source, we will mark the record accordingly or remove it.

US state privacy rights

If you are a resident of a US state with a comprehensive privacy law, you have additional rights described below. To exercise any of these rights, email hello@schoolintel.cowith “[State] Privacy Request” in the subject. We respond within 45 days (extendable by 45 days where the law permits and the request is complex).

We do not sell personal information for money, and we do not share personal information for cross-context behavioral advertising as those terms are defined in California, Colorado, Connecticut, and similar laws. We honor the Global Privacy Control (GPC) browser signal as a valid opt-out for sale and sharing in the states that recognize it.

Right to appeal.Where state law provides an appeal right and we deny a request, you may appeal by replying to our denial. We will respond to the appeal within 60 days (Connecticut: 45 days). If we deny the appeal we will provide the contact information for your state's Attorney General office.

Authorized agents.You may designate an authorized agent to make a request on your behalf in any of the states listed above. We will verify the agent's authority and your identity before completing the request.

Sensitive personal information (CPRA)

Under the California Privacy Rights Act, certain categories of information are designated as “sensitive personal information” (sensitive PI), including precise geolocation, government identifiers, financial account credentials, racial or ethnic origin, religious or philosophical beliefs, union membership, contents of mail/email/text messages, genetic data, biometric identifiers, health information, and sexual orientation or sex life data.

SchoolIntel does not collect or process any category of sensitive personal information about school staff or about visitors to the marketing website. The only category of information we collect that is treated by California law as potentially sensitive is the work email and work phone of customers when they create an account; we use those solely to authenticate the customer, deliver the Services, and provide support — not to infer characteristics about the individual.

Because we do not use sensitive PI for any purpose beyond what is strictly necessary to provide the requested Services, the CPRA right to limit use and disclosure of sensitive PI does not change how your data is processed. You can still exercise the right by submitting a request; we will confirm in writing that no further restriction was needed.

EU and UK representatives

SchoolIntel is established in the United States. Where required by Article 27 of the GDPR (for processing of EU personal data) and the equivalent UK GDPR provision, we have appointed representatives in the EU and the United Kingdom who can be contacted directly by data subjects and supervisory authorities on matters related to the processing of personal data.

• EU representative: appointment in progress. Until the appointment is complete you can also reach our privacy team at hello@schoolintel.cowith “EU GDPR Article 27” in the subject and your request will be routed accordingly.
• UK representative: appointment in progress. The same address applies in the interim.

We will update this section with the named representatives and their physical addresses once appointments are finalized; affected data subjects do not need to take any action.

Children's privacy

SchoolIntel is intended for use by adults working in B2B sales, marketing, and revenue operations. The Services are not directed to children under 18, and we do not knowingly collect personal information from children. The records we maintain about international schools concern staff, not students, and we take active steps to exclude any data that might pertain to a student.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will revise the “Last updated” date at the top of this page and, if you have an account, notify you by email or in-app notice before the changes take effect.

Contact us

Questions, complaints, or requests can be sent to:

SchoolIntel, Inc.
hello@schoolintel.co