Student information stays connected to the work it supports.
This policy explains how Notestra collects, uses, shares, retains, and protects information for teachers, music schools, families, and students.
Information we collect
We collect account and workspace information, student and guardian contact details, schedules, attendance, lesson notes, assignments, invoices, payment records, messages, policy settings, repertoire activity, support requests, and technical security logs. We do not sell personal information or use student records for behavioral advertising.
How information is used
Information is used to provide the subscribed Notestra modules, authenticate users, apply workspace policies, deliver requested communications, process Notestra subscription payments, provide support, prevent abuse, and improve reliability.
Service providers
Notestra may use hosting, database, email, payment, monitoring, and AI service providers. Stripe processes Notestra subscription payments. When an AI feature is enabled, only the information needed for the requested draft or teaching aid is sent to the configured provider; generated material remains subject to teacher review.
Children and student accounts
Schools, teachers, and guardians must create or authorize student access. Notestra does not knowingly allow a child under 13 to create an independent workspace account. Where verifiable parental or school authorization is required, access remains limited until that authorization is recorded. Guardians may request access to, correction of, or deletion of a child's information.
Retention and deletion
Active workspace records are retained while needed to provide the service. Security logs are ordinarily retained for up to 12 months. Expired account tokens are removed on a rolling basis. After a verified deletion request and applicable billing or legal retention periods, customer content is deleted from active systems and ages out of backups under the backup retention schedule.
Your choices
Workspace owners and guardians may request an export, correction, restriction, or deletion by contacting xuhuang66921@gmail.com. We verify the requester's identity and relationship before releasing or changing student records.
Security and changes
Notestra uses access controls, encrypted transport, password hashing, audit records, signed payment webhooks, and restricted service credentials. No system can guarantee absolute security. Material policy changes will be presented through the service or by email before they take effect.