Privacy Policy
How Sub collects, uses, shares, stores, and deletes information when schools, workspace admins, and staff use the platform.
Scope
This Privacy Policy applies to the public Sub website, workspace application forms, and the Sub product used to manage leave requests, approvals, teacher coverage, classroom assignments, and related school operations.
When a school or district uses Sub, that organization generally decides why the information is processed. In those cases, Sub acts as a service provider or processor for the school.
Information we collect
- Account details such as names, work email addresses, role labels, and school or workspace affiliation.
- Operational data such as leave requests, approval decisions, timetable or classroom coverage data, substitution assignments, and related audit history.
- Workspace setup information such as school name, address, contact details, timezone, and plan or deployment preferences.
- Files, notes, or attachments that a school or authorized user uploads into the product.
- Technical and security information such as session data, browser type, approximate device metadata, IP address, logs, and misuse-prevention signals.
How we use information
- Provide, secure, and improve the Sub service.
- Authenticate users, manage sessions, and enforce access controls.
- Process leave workflows, approvals, and coverage planning within a workspace.
- Respond to support requests, onboarding inquiries, or workspace applications.
- Investigate bugs, suspected abuse, fraud, or security incidents.
- Meet legal obligations and maintain business records.
How we share information
We do not sell personal information or use school data for third-party advertising. We share information only when necessary to operate the service, comply with law, protect rights and safety, or follow customer instructions.
- With the school, district, or workspace that controls the account.
- With service providers that help us host, secure, support, or operate the platform.
- With legal authorities when required by applicable law, regulation, subpoena, or court order.
- As part of a merger, acquisition, financing, or reorganization, subject to appropriate confidentiality and continuity protections.
Retention and deletion
We retain information for as long as needed to provide the service, satisfy legal or contractual obligations, resolve disputes, and enforce agreements. Schools may request deletion or return of workspace data, subject to applicable law and legitimate backup, audit, and security retention needs.
Security
We use administrative, technical, and organizational safeguards designed to protect information. Current platform controls can include role-based access controls, session protections, CSRF defenses, request throttling, and security monitoring. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.
Your choices and rights
Schools and districts may access, correct, export, or delete workspace data under their control, subject to applicable law and contract. Individual rights may depend on local law and the role of the school or district as controller.
For requests about a school-managed account, contact your school or workspace administrator first. For questions about this policy, contact us at admin@infinitysolutions.app.