ConciergePad LLC ("ConciergePad", "we", "us" and/or "our") is committed to your privacy. This privacy policy applies to all ConciergePad platforms including the website, Customer portal, ConciergePad iPad application, and mobile application available for end users.
ConciergePad enables our Customers to decide which data is integrated with and shared on our platforms. Our Customers are responsible for data shared with ConciergePad platforms. Our End Users may also choose to share Personal Data (personally identifiable data).
This Site is operated by ConciergePad and has been created to provide information about ConciergePad and the ConciergePad visitor registration services we provide to our customers ("Services") to our Site visitors ("you", "your"). This Privacy Policy sets forth ConciergePad's policy with respect to information including personally identifiable data ("Personal Data") and other information that is collected from Visitors to the Site. We commit to transparency in our data collection and use practices.
Information Schools give us — When Schools register for our Services, they provide certain information about the School, Parents, and students, such as Parent's name, email address and phone number, student ID, classroom and other information maintained in the School's information systems such as bus route number, teacher name, and information about student absences. We also receive information from Schools and Parents when they send us a message, for example by email or by submitting a help request through the Site. The School may also provide us information about Educational Professionals such as name, email address and cell phone number to take advantage of some of our Services.
Information you give us — When you register for our Services you provide certain information such as School name, student's name, point of contact name, physical address, email address and phone number. In addition, to use the Services you are required to provide your pick-up method and student's name. If you discover incorrect information while using our Services, please contact hello@getconciergepad.com and we will assist in correcting it.
Information we get when you use the Services — Like most websites and online services, certain information is automatically collected when you use our Services, visit our Site, read our emails, or otherwise communicate with us. For example, information about your device and its software, such as your IP address, browser type, Internet service provider, platform type, device type, operating system, date and time stamp, a unique ID that allows us to identify your browser, mobile device or your account, and other similar information. Information about the way you use our Service is also collected, for example, the pages you visit, the links you click, how frequently you access the Site, whether you open emails or click the links contained in emails, and other actions you take on the Service or Site. When you access our Site from a mobile device, we may collect unique identification numbers associated with your device or our mobile application, mobile carrier, device type, model and manufacturer, and mobile device operating system. Your location may also be collected. We may also collect analytics data, or use third-party analytics tools, to help us measure traffic and usage information for our Services.
We and your School may also place advertisements on the Site. We collect information related to these advertisements such as who clicks on them, the School they are affiliated with, and the time and date the advertisement was clicked.
Through the course of providing Services, we may have access to personally identifiable information about students ("Student Data") that is provided by you. We have access to Student Data only as requested by the School and Parents and only for the purposes of performing Services on the School's behalf. The type of Student Data we collect will depend on how the School uses the Services.
We receive Student Data only from the School and Parents. We never interact with the student directly. Student Data is confidential. We do not use Student Data for any purpose other than to provide the Services on the School's behalf, in accordance with contractual agreements with the School. Our collection, use, and disclosure of Student Data is governed by our Terms of Use, our agreement(s) with the School, the Family Educational Rights and Privacy Act (FERPA), the Children's Online Privacy Protection Act (COPPA), and all applicable laws which relate to the collection of Student Data. Please contact your School if you have questions about the information they provide us and their use of technology service providers like ConciergePad LLC.
This section fully explains how ConciergePad collects, uses, stores, and deletes face data and biometric information. There are two separate features relevant to this section and both are described in complete detail below.
What face data is collected: When a school administrator enables the optional facial recognition feature, enrolled adult individuals — employees, repeat visitors, volunteers, and authorized parents or guardians picking up students — may voluntarily have their face scanned on a kiosk device. The captured image is transmitted via an encrypted API call (TLS 1.2+) directly to Amazon Web Services Rekognition, which converts the image into a facial embedding — a mathematical vector representation of facial geometry. This embedding is stored in an AWS Rekognition Collection within our AWS account.
What is not retained: The raw facial image is not retained anywhere after the embedding has been generated. ConciergePad's own application servers, SQL databases, and internal infrastructure do not store, transmit, or maintain any facial images or biometric embeddings at any point. The only record retained in ConciergePad's own database is a non-biometric authentication event log containing an individual ID, timestamp, and the type of access event — no face data, no images, no embeddings whatsoever.
All planned uses of face data: Facial recognition data is used solely for identity verification in the following adult-only contexts:
Face data is never used for marketing, advertising, analytics, behavioral tracking, or any purpose outside of the identity verification workflows described above.
Minors: ConciergePad does not collect, process, or store facial recognition data from any individual under the age of 18 under any circumstances. Facial recognition is exclusively used with consenting adults.
Enrollment and consent: This feature is 100% opt-in. It requires explicit action by both the school administrator and the individual being enrolled. No individual is enrolled without intentional action from both parties.
Third parties and storage location: Facial embeddings are stored exclusively within AWS Rekognition Collections hosted in the United States (us-east-1). AWS acts as our contracted infrastructure processor under a Data Processing Addendum (DPA) and does not sell, share, or use our data to train its own models. No facial data is shared with, sold to, or transmitted to any other third party, vendor, advertiser, or analytics platform of any kind.
How long face data is retained and why: Facial embeddings are retained only for as long as the individual is actively enrolled in the facial recognition feature. We store facial embeddings during this period specifically to enable accurate identity verification at each subsequent clock-in, check-in, or pickup event during active enrollment. Once enrollment ends — through employee termination, an administrator removing the individual, or the school deactivating the feature — we call the AWS Rekognition DeleteFaces API and the embedding is permanently and irreversibly deleted. Facial data is not stored indefinitely. Retention never extends beyond the active enrollment period under any circumstances.
What this feature does: ConciergePad uses Amazon Textract Analyze ID to extract text fields from government-issued photo identification documents such as driver's licenses presented by school visitors during check-in. This is a standard optical character recognition (OCR) process — the feature reads and extracts text such as the visitor's name, date of birth, and ID number from the document.
Face data: The photograph that physically appears on a government-issued ID card is not analyzed, detected, processed, extracted, matched, or stored as biometric data. Textract Analyze ID performs document text extraction only. ConciergePad performs no facial analysis, face matching, or biometric processing of any kind on visitor ID photographs.
Retention: No facial data is retained from this feature whatsoever. The document image used for OCR processing is not persistently stored in ConciergePad's infrastructure after text extraction is complete.
We use the information we collect to operate, maintain, and improve our Site, Services, and their functionality, and to communicate with our Schools and Parents. To the extent we share your information, we will only share it with those who adhere to standards consistent with our Privacy Policy and practices. We may disclose your information in the following ways:
From time to time, we may use your information to contact you via e-mail to determine whether you are happy with our services and send you customer satisfaction surveys. You retain the ability to opt out of such e-mail communications by following the opt-out procedures in the email.
We disclose your information to companies we use as contractors or agents to perform services for us, such as administering our websites, systems, and software, hosting maintenance, and other such services. These service providers may have access to or process your information only to the extent necessary for them to perform services for us.
We maintain reasonable administrative, technological and physical safeguards designed to improve the integrity, privacy, confidentiality, and security of your information.
All data is securely and exclusively hosted in FERPA-compliant data centers on Amazon AWS. User roles are clearly defined to manage access levels. Student Personal Information is protected by a password for your privacy and security. You may help protect against unauthorized access by selecting and protecting your password appropriately and limiting access to your computer and browser by signing off after you have finished accessing your account.
Any information collected through the Service is stored and processed in the United States. If you use our Service outside of the United States, you consent to have your data transferred to the United States.
Company endeavors to protect user information to ensure that user account information is kept private; however, Company cannot guarantee the security of user account information. Unauthorized entry or use, hardware or software failure, and other factors may compromise the security of user information at any time. If we learn of a security systems breach, we may attempt to notify you electronically so that you can take appropriate protective steps. Once your information is removed from the Site, copies of your information, other than Student Data, may remain stored in backup systems or cached and archived pages.
If your school or district chooses to use third party single sign-on (e.g., Google or Clever) for access to the Applications, you may have to provide us with your username (or user ID) so that your identity can be authenticated through the third party account (the "SSO Account"). When the authentication is complete, we'll be able to link your account with the SSO Account. That linking may allow us to access and collect certain personal information, such as your name and email address, your user ID for the SSO Account, data tokens used to implement single sign-on and connect with your SSO Account profile, and other personal information that your privacy settings on the SSO Account permit us to access. We encourage all schools or districts to carefully choose privacy settings in SSO Accounts to limit the exchange of information. We never receive or store passwords for any of your SSO Accounts.
Google Single Sign-on Restricted and Sensitive Scopes Disclosure: ConciergePad's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
In addition to the guidelines outlined in our Terms, we do not knowingly collect any information from children under the age of 13 and we rely on the School to provide notice and obtain parental consent and any other required authorizations for all student information we collect. We will never target advertisements to students or sell students' personally identifiable information to third parties for any purpose.
As stated in Section 4 of this policy, ConciergePad does not collect, process, or use facial recognition or biometric data from any individual under the age of 18, under any circumstances. This applies across all features and all use cases on all ConciergePad platforms.
Please contact us at hello@getconciergepad.com if you believe we have inadvertently collected personal information of a child under 13 without proper consent so that we may delete it as soon as possible.
SMS messages frequency may vary and message and data rates may apply. Data obtained through the short code program will not be shared with any third-parties for their marketing reasons or purposes.
We may modify or update this Privacy Policy from time to time. You should review this page periodically. If we make significant changes that affect your rights, we will take reasonable efforts to notify you of those changes via the email address provided by you or a prominent notification when you access the Site or use the Services. Your continued use of the Site or Services indicates that you have read, understood and agreed to the current version of our Privacy Policy. If you do not agree with our Privacy Policy, you can always opt-out by deleting your account and ceasing to use our Services.
The Site may contain links to websites and apps operated and maintained by third parties, over which we have no control. Privacy policies on linked sites may be different from our Privacy Policy. You access such linked sites at your own risk. You should always read the privacy policy of a linked site before disclosing any information to such site.
If you have any questions or concerns about this Privacy Policy or our data practices, please reach out:
ConciergePad LLC
9990 SW 77th Ave Suite 204, Miami, FL 33156
General: hello@getconciergepad.com
Support: support@getconciergepad.com