Privacy Policy

 Last updated: April 7, 2026

 Bluedesk ("we", "us", "our") operates the Bluedesk platform, including web and mobile applications, providing school communication and website management services. This Privacy
 Policy explains how we collect, use, and protect your information.

Information We Collect

 Account Information
 - Name, email address, and phone number
 - Role within your school (staff, guardian, administrator)
 - Profile photo (optional)

Communication Data
 - Messages sent through the chat feature between staff and guardians
 - Announcements, newsletters, and journal entries created by staff
 - Contact form submissions from website visitors

Device Information
 - Device tokens for push notifications (iOS and Android)
 - App version and platform type
 - Browser type and IP address for web access

Usage Data
 - Login timestamps and session information
 - Pages visited within the admin dashboard
 - Feature interactions for improving the platform

How We Use Your Information

 - School Communication: Facilitating messaging between staff and parents/guardians
 - Notifications: Sending push notifications, emails, and announcements
 - Website Management: Powering your school's public-facing website
 - Platform Improvement: Understanding usage patterns to improve features
 - Security: Protecting accounts through authentication and access controls

Data Storage and Security

- All data is encrypted in transit using TLS/SSL
 - Data is stored on secure cloud infrastructure in Australia (AWS ap-southeast-2)
 - Passwords are encrypted using industry-standard hashing (bcrypt)
 - Access to data is restricted by role-based permissions

Data Sharing

 We do not sell, trade, or share personal information with third parties except:

 - Service Providers: Cloud hosting (AWS, DigitalOcean), email delivery (Mailtrap/Zoho), and push notification services (Apple APNS, Google FCM) necessary to operate the platform
 - Legal Requirements: When required by law or to protect our legal rights
 - School Administration: School administrators can view staff and guardian information within their school account

Data Retention

 - Account data is retained while your school's subscription is active
 - Chat messages are retained for the duration of the school's account
 - You may request deletion of your personal data at any time
 - Deactivated accounts are retained but access is revoked

Your Rights

 You have the right to:

 - Access your personal data held by the platform
 - Correct inaccurate information in your profile
 - Delete your account and associated data
 - Export your personal data in a portable format
 - Opt out of non-essential email communications and push notifications

Children's Privacy

 Bluedesk is designed for use by school staff and parents/guardians. We do not knowingly collect personal information directly from children. Student information is managed by
 school administrators in accordance with their school's policies.

Push Notifications

You can manage push notification preferences within the mobile app settings. Notification preferences include the ability to enable/disable push and email notifications, and set
 quiet hours.

Cookies

 Our web platform uses essential cookies for:

 - Session management and authentication
 - Theme preferences (light/dark mode)
 - Security (CSRF protection)

 We do not use third-party tracking or advertising cookies.

Changes to This Policy

 We may update this Privacy Policy from time to time. We will notify users of significant changes via email or platform notification. Continued use of the platform after changes
 constitutes acceptance of the updated policy.

Contact Us

 If you have questions about this Privacy Policy or your data, please contact us:

 - Email: info@bluedesk.au
 - Website: https://bluedesk.au