Last updated: 2026-04-30 Effective date: 2026-04-30

This Privacy Policy describes how Carline Calling, a service of Cornado, LLC ("Carline Calling", "we", "us", or "our"), collects, uses, and protects information when schools and their staff use our dismissal coordination service at carlinecalling.com and related applications (the "Service"). It is written to be readable. If anything here is unclear, email us at support@carlinecalling.com.

Plain-language summary

Carline Calling exists for one purpose: helping a school run its dismissal safely. We collect only what the Service needs in order to do that job. We do not sell data. We do not use personal information for advertising. We do not track users across other websites. Students do not have accounts; only school staff do. Dismissal activity records are automatically deleted after 30 days.

Who uses Carline Calling

Our direct customers are K-12 schools. Within a school, individual users include administrators, carline managers, teachers, and read-only display viewers. Students and parents do not sign in to the Service. Student information appears in the system only as part of the school's roster, which the school provides and controls.

What we collect

Information about staff users

When a school invites a staff member and that person accepts, we collect and store:

Email address.
Display name (first + last, or a name you choose on your Settings page).
Role(s) within the school (e.g., Administrator, Carline Manager, Teacher).
Authentication identifiers issued by our identity provider (Clerk), including a user identifier and session metadata.
Timestamp of your last login and, for operational purposes, IP address and user-agent string associated with sessions.

Roster data provided by the school

Schools upload rosters so the Service can recognize families at dismissal. Roster data includes:

Student first and last name.
Classroom assignment.
Family grouping (which students are siblings) and family display name.

We do not collect or store parent or guardian contact information (names, email addresses, phone numbers, or home addresses). The school is responsible for the accuracy of roster data and for obtaining any parental notices or consents required under its own policies and applicable law.

Dismissal activity

While dismissal is running, the Service records operational events so classrooms can display the correct call list:

Which student was called for pickup, at what time, and by which staff user.
Any stay request, who requested it, and whether it was approved or denied.
Any undo of a call, including who performed the undo.

These records exist to make the system auditable and safe. See Data retention below.

Billing data

When a school pays for a subscription, our billing provider (Stripe) collects the cardholder name, billing address, and payment instrument details on our behalf. Stripe handles card numbers directly; we never see or store them. We receive and store subscription status, invoice history, and the billing email address associated with the school's account.

Support communications

If you email support@carlinecalling.com or privacy@carlinecalling.com, we keep the content of the email and the address you wrote from so we can respond and keep a record of the request.

Technical and service-operation data

We collect standard server logs (request metadata, status codes, error traces, and the requesting IP address) and product telemetry needed to keep the Service available, secure, and performant. See Data retention for how long these are kept.

What we do not collect

Carline Calling is intentionally narrow. We do not collect, and the Service has no interface for collecting, photographs of students, GPS or location data, biometric identifiers, Social Security Numbers or other government identifiers, student identification numbers, grades, attendance or disciplinary records, health or medical information, advertising identifiers, cross-site tracking cookies, or third-party analytics pixels.

How we use information

We use information only to:

Provide the Service to the school and its staff.
Authenticate users and keep accounts secure.
Maintain an audit trail of dismissal actions for school accountability.
Communicate with staff users about the Service (e.g., invitations, account notices).
Investigate abuse and enforce our Terms of Service.
Comply with legal obligations and, where applicable, respond to lawful requests from school officials or authorities.
Operate and improve the Service, including diagnosing errors and measuring reliability. We do not use personal information to train external machine-learning models.

We do not sell personal information. We do not disclose personal information to third parties for their own marketing. We share information only in these limited cases:

With the school. The school's administrators can see the data belonging to their own school.
With sub-processors. Third-party vendors that process information on our behalf to run the Service (see Sub-processors below).
For legal reasons. When required by a valid legal process or to protect rights, safety, or property of users, the school, or the public.
Business transfers. In connection with a merger, acquisition, financing, or sale of assets, in which case the acquirer will be bound by this Privacy Policy or will provide notice of material changes.

Sub-processors

We rely on a small set of vendors to operate the Service. Each is contractually required to protect information to at least the standard we do.

Clerk: identity and authentication (staff user accounts, session management, account-related email such as invitations and verification).
Amazon Web Services (AWS): hosting (compute, database, storage, content delivery, and transactional email) in the United States.
Stripe: subscription billing for schools that pay online.

This is the complete set of third-party sub-processors that handle customer information. If we add or change a sub-processor, we will update this policy and notify customers as described in our Data Processing Agreement, available on request.

Data retention

Dismissal activity records (calls, stay requests, undos) are automatically purged 30 days after they are created.
Roster data (students, classrooms, families) persists while the school's subscription is active. Schools can replace their roster through a full-roster import at any time, or through the admin interface.
User accounts persist while the user is a member of the school's organization. When an administrator removes a user, the account and its associated profile data are deleted within 30 days.
Audit logs (records of administrative actions taken inside the Service) are retained for 13 months to support security investigations and compliance reviews.
Server and application logs (request metadata, error traces, IP addresses) are retained for 90 days.
Billing records (invoices, subscription history) are retained for 7 years to comply with U.S. tax and accounting obligations.
Support communications are retained for 2 years from the date of the last reply, unless a longer period is needed to resolve an ongoing issue.
On termination of the school's subscription, customer data is deleted or returned within 30 days, unless a legal hold or regulatory obligation requires us to retain specific records for longer.

Security

We take reasonable and appropriate organizational and technical measures to protect information, including encryption in transit (TLS 1.3), encryption at rest (AES-256) on database storage, row-level database isolation enforced in the database itself, role-based access control, full audit logging of user actions, least-privilege engineering access subject to review, and encrypted backups.

No system can be guaranteed perfectly secure. If we become aware of a security incident that affects personal information, we will notify affected customers without undue delay and in accordance with applicable law and our Data Processing Agreement.

Your rights

Depending on where you live, you may have rights to access, correct, delete, port, or restrict processing of your personal information, or to object to processing. Residents of California, Virginia, Colorado, Connecticut, and other U.S. states with comprehensive privacy laws have specific rights under their respective laws.

To exercise your rights, email privacy@carlinecalling.com from the address associated with your account, or ask your school administrator to submit a request on your behalf. We will verify your identity before we act on a request and will respond within 45 days. If we decline to act, we will tell you why; you may appeal by replying to our response, and you may designate an authorized agent to submit a request on your behalf.

Staff users: You can view and update your display name and preferences on the Settings page. To delete your account, contact your school administrator or email us.
Parents and students: Because the school is the customer and controls the roster, please direct access, correction, and deletion requests to your school. We will support the school in fulfilling those requests.

No sale or sharing. We do not sell personal information, and we do not "share" personal information for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act (as amended by the CPRA). We have not done so in the prior twelve months and have no plans to. We will not deny service, charge a different price, or provide a different level of service because you exercised a privacy right.

Students and children's privacy

Carline Calling is designed to be used by school staff. The Service is not directed to children, and children do not create accounts. Roster data about students is provided to us by the school.

FERPA. Under the U.S. Family Educational Rights and Privacy Act, Carline Calling processes student information as a "school official" with "legitimate educational interest" under 34 CFR § 99.31(a)(1), acting under the direction of the school. The school remains the controller of its student records; we process those records only for the educational purpose of running dismissal. Schools should ensure their annual FERPA notice to parents reflects the use of outside school officials such as Carline Calling.

COPPA. Under the Children's Online Privacy Protection Act, we rely on the school to authorize our collection and use of information about children under 13, consistent with FTC guidance on COPPA compliance in schools. We use information about children under 13 only for the educational purpose authorized by the school, and for no other purpose.

State student privacy laws. Where applicable, Carline Calling is designed to comply with state student privacy laws, including California's Student Online Personal Information Protection Act (SOPIPA), Illinois' Student Online Personal Protection Act (SOPPA), and New York Education Law § 2-d. We are willing to execute the Student Data Privacy Consortium (SDPC) standard Data Privacy Agreement where a school district requires it.

What we do not do. We do not use student information to build profiles for non-educational purposes, to serve advertising, to train external machine-learning models, or to sell to third parties.

Ownership. Student data remains the property of the school and, as applicable, the student's parents or guardians. Carline Calling claims no ownership of student data.

Cookies and similar technologies

The Service uses only cookies and similar technologies that are strictly necessary for authentication and session management. We do not use advertising cookies, tracking pixels, or third-party analytics that follow users across other sites. Our authentication provider (Clerk) and our billing provider (Stripe) may set cookies on their own domains when you sign in or make a payment, controlled by their respective privacy policies.

International data transfers

The Service is hosted in the United States and is intended for use by U.S.-based schools. We do not actively target customers outside the United States.

Changes to this policy

We may update this Privacy Policy to reflect changes in the Service, in law, or in our practices. If changes are material, we will notify the school's administrator by email or through the Service before the change takes effect. The "Last updated" date at the top of this page reflects the most recent revision.

Contact us

Privacy questions and requests: privacy@carlinecalling.com. General support: support@carlinecalling.com. Our Data Processing Agreement and other contract documents are available on request.