Privacy and security
A one-page summary for your privacy officer, IT team or purchasing office. The full detail is in our privacy policy.
No student accounts, ever
Lessons are taught by adults from printed PDFs. Students never sign in, and we never ask for or knowingly collect information about them.
Only what an account needs
Name and email to sign in; role, school and grades only if a teacher adds them. We never sell or rent personal information.
Alberta PIPA and CASL
We follow Alberta's Personal Information Protection Act and Canada's anti-spam law. Questions get an answer within 30 days.
What this means for student-privacy rules
Because no student information reaches us, there are no student records on our side for laws such as FERPA or COPPA, or provincial school privacy rules, to apply to. Teachers' own information is covered by our privacy policy.
If your district needs a data privacy agreement or a vendor privacy questionnaire, send it to privacy@fieldbooklearning.com and we'll review it. Our standard data processing terms, with subprocessors, breach notice and EU/UK transfer clauses, are in data protection and security.
Service providers
| Provider | What it does for us |
|---|---|
| Cloudflare | Hosts the website and the database; delivers our internal email alerts. |
| Resend | Sends sign-in link emails. Receives only the teacher’s email address and the message. |
| Sign-in, only when a teacher chooses “Continue with Google”. | |
| Stripe | Card payments, subscriptions, invoices and refunds. We never see card numbers. |
These providers may store or process information outside Canada, including in the United States.
How long we keep information
- Teacher accounts: until the teacher deletes the account, or automatically after two years without a sign-in.
- Messages, quote and kit requests: deleted automatically after two years.
- School licence teacher lists: until the licence owner removes a teacher, and deleted 90 days after the licence ends.
- Orders and invoices: seven years, as Canadian tax law requires.
Security
- HTTPS everywhere.
- Sign-in sessions use secure, HTTP-only cookies, and only a scrambled (hashed) form of the session token is stored.
- Card details go straight to Stripe and never touch our systems.
- Database access is limited to the people who run Fieldbook.
Accessibility
Lesson PDFs are tagged for screen readers and have bookmarks. Our accessibility statement lists what we test, what we know isn't right yet, and how to ask for another format.
Buying for a school
Quotes, purchase orders and invoices in Canadian or US dollars: request a quote or see school licences. Supplier details, the school licence agreement, the safeguarding statement and the accessibility report are on purchasing and compliance.