Privacy Policy

This is a starter policy and should be reviewed by a legal professional before launch.

Effective October 22, 2026

Information we collect

We collect your name, school, account email, volunteer goals and session details: organization, cause, date, hours, description, organizer name and optional organizer email. We also store organizer sign-off names and roles, confirmation dates, dispute notes, and secure links. Authentication, hosting and security systems process technical information such as IP addresses and basic request logs.

How we use it

We use this information to provide your account, manage goals, obtain organizer sign-off, protect verification and create your service record. Organizer email addresses are used only for requesting sign-off, not marketing. When a Premium student logs a session with an organizer email, ServeStamp emails that organizer on the student's behalf only to request sign-off, with up to two reminders. Organizers can opt out using the link in any email and will not be emailed again. We keep a send log (session, recipient, email type, status and time) to enforce limits and prevent abuse; students can see the log for their own sessions.

Who can see it

Your account records are private to you. Anyone with an active sign-off link can review that session and your name. Anyone with your public record link can see your name, school and verified sessions, including organizer sign-off details. Share links only with intended recipients. Organization suggestions may include aggregate organization names and cities, never other students' individual records.

Parents and guardians

With Premium, a student can invite a parent or guardian to a read-only progress view. The student enters the parent's email and we send a secure, single-use invite link; the parent signs in with that same email to connect. Parents can see the student's first name, verified and pending hour totals, goals and deadlines, recent sessions with verification status, milestones, and can download the verified log. Parents never see journal entries, photos, organizer email addresses or Application Helper drafts. The student controls sharing: they can remove a parent at any time in Settings and removal takes effect immediately. Parents can opt in to a weekly progress email and turn it off at any time; these emails are recorded in the same send log. If the student's Premium ends, the parent view pauses until it is renewed.

Schools and chapters

Students choose whether to join a school or NHS chapter after reviewing a sharing notice. Advisors on an owner-approved chapter can see actively linked students' full names, session dates, organizations, hours, causes, verification status, verifier names and roles, verification dates, and chapter requirement progress. Advisors cannot edit student data and never receive journals, photos, Application Helper drafts, organizer emails or email logs. Students may join more than one chapter for free and leave anytime in Settings; leaving, chapter pausing or chapter deletion ends advisor access immediately. Advisors can export the allowed records and send in-app reminders, not chapter reminder emails. Previously downloaded copies cannot be recalled. Chapter requests include school, chapter name and school email for owner review. We never sell student data. Schools remain responsible for their own consent and student-privacy obligations during this pilot.

Service providers and storage

Hosting, authentication and database providers process information to operate ServeStamp. School directory data comes from public education sources; nonprofit suggestions use ProPublica. Search terms for nonprofit names are sent to that service. We do not sell personal information or use it for targeted advertising.

Retention and deletion

We keep account information while your account is active. You can delete sessions or delete your account in Settings; account deletion removes your profile, goals, sessions and sign-off tokens. Contact hello@servestamp.com for access, correction or deletion requests. Service logs and backups may remain for limited operational or legal retention; previously downloaded PDFs and recipients' copies cannot be recalled.

Students and children

ServeStamp is intended for users age 13 and older. It is not directed to children under 13. If you believe a child under 13 provided personal information, contact us so we can remove it. Parents, guardians and schools should review applicable consent and student-privacy requirements. Using ServeStamp does not itself create a school-authorized education-record agreement.

Security and your choices

Access controls and one-time links help protect records, but no system is perfectly secure. Keep your password and share links private. Contact us about suspected misuse, privacy rights or questions at hello@servestamp.com.

Cookies

We use a small amount of essential storage to keep you signed in and remember your settings. We don't use advertising cookies and we don't sell your information. Our hosting provider, Lovable, collects basic visit and performance statistics to run and improve its service. Read our Cookie policy for each item's purpose and lifetime.

Policy updates

We will update the effective date when this policy changes and provide notice of material changes as required by law.