Draft version: August 12, 2026 · 2026-09-03
Who is responsible
DECAF Publixations, LLC is the program/provider and Rosser Gallery is the Education Hub and physical or virtual host. Their final controller and processor roles must be confirmed in the partner data agreement before launch.
Information collected
Family intake is limited to guardian contact and language, student name, grade, school and district, course or preview interest, schedule and format preference, optional counselor contact, signature, and consent choices. Instructor intake is stored separately and contains contact, subjects, experience, credentials, location, availability, and an optional résumé URL.
Why it is used
Information is used to verify the guardian, route a course-interest request, support school follow-up, show case status, review possible instructors, protect the service, and create deidentified program metrics. Optional marketing requires separate consent.
Who may receive it
Need-to-know DECAF and Rosser personnel and the verified school or district contact assigned to a case may receive the minimum information needed. Scoot receives information only when an adult chooses to continue to Scoot’s separate application.
Live voice processing
Voice audio is processed live by the configured voice service. The Hub does not retain raw audio or complete transcripts; it keeps only confirmed structured values and privacy-safe service events. The typed form remains available.
Retention
Identifiable family case data is scheduled for deletion 90 days after case closure. Deidentified metrics and required consent or audit evidence may be retained. Final legal holds and deletion procedures must be confirmed before launch.
Access, correction, and deletion
A guardian may request access, correction, or deletion through the verified privacy contact that will appear here before launch. School records and official Course Choice registration remain controlled by the school or district.
Security
The planned controls include verified email, expiring access links, need-to-know staff roles, encryption, rate limits, and logs that avoid student details. No internet service can guarantee absolute security.
Privacy contact
Contact channel pending partner verification. Do not launch intake while this field is pending; the final page must publish a monitored DECAF/Rosser privacy email and response process.