Privacy, in plain English
Last updated November 11, 2026
Your school's data belongs to your school. We use it to run PTO Magic for you, and for nothing else. We never sell it, never share it for marketing, and never show ads.
What we collect
- Officers and members: name, email, and the settings you choose (like how you want reminders).
- Your school's records: people you add, projects, tasks, posts, volunteer sign-ups, budgets, ledger entries, receipts and files you upload.
- Volunteers who sign up from a link: the name, email and optional phone they type in.
- Billing: Stripe handles card details. We only see the plan, status and the last four digits.
What we don't collect
We don't ask for students' names or records, and PTO Magic isn't built for them. Please don't upload report cards, health information or anything a school would keep in a student file. Kids never sign in. We don't use ad trackers or third-party analytics.
Who helps us run it
A few trusted services process data only so PTO Magic can work:
- DigitalOcean hosts our servers and files in the United States.
- Stripe handles payments.
- Resend sends our emails (sign-in links, reminders, receipts).
- Anthropic powers the writing and “Ask PTO Magic” features. When you use them, the relevant records are sent to answer your request. Anthropic doesn't train its models on that data.
Cookies
One cookie keeps you signed in. If you arrive from a friend school's link, a second cookie remembers that for 60 days so they get credit. That's it.
Who at your school sees what
Your school's owner and admins decide who's on the team and what role each person has. Money is visible only to officers and the treasurer. Volunteers who sign up from a link see only the sign-up page.
Keeping it safe
No passwords to leak: you sign in with a one-time link or code. Data travels over HTTPS. Each school's records are walled off from every other school's, and we test that wall automatically.
Getting your data out, or deleting it
Export your ledger anytime from the Money page. Want a full copy, or want your school deleted? Email us and we'll do it within 30 days. If you cancel, we keep your records for 90 days in case you come back, then delete them.
Changes and questions
If we change this in a way that matters, we'll email your school's owner first. Questions? Write to hello@ptomagic.com. A real person reads every one.