Your records stay yours.

You keep ownership of the records you submit. That includes names, grades, attendance, and files. Archiva has permission to host and process them so the product can run, including backups and the PDFs you ask for. We do not sell those records.

The legal version of this page is the Privacy Policy. The contract is the Terms.

We do not sell personal information, student records, or membership files. We do not share them with advertisers or data brokers. The site does not load advertising tags.

A co-parent you invite can see the children you allow. A student login sees that student's own work, and only the parts you turn on. Companies that host the app, take payment, or send email process information so Archiva can run. They do not use it to advertise to you. We also disclose information when the law requires it.

We keep our own notes on how the product is used. A note can include the page, a control we marked for counting, the window size, and about how long the visit lasted. It does not include what you typed or the text on the page. When you are signed in, the note is tied to the account.

If the browser sends Do Not Track or Global Privacy Control, we do not record those usage notes. A submitted application, a payment, and an error report are still kept.

A student login is narrower. We record which page was open and how long it stayed open. We do not record what the student clicked or the text on the page.

The product is set to remove usage notes older than about 90 days.

If the app crashes, an error report may include a masked picture of the failed page. Text on the screen, anything that was typed, and photos are hidden in that picture.

Archiva for Home and Archiva for Associations are separate products. They do not share a student list.

If a family accepts a link to an association, the link records that the household and the family account are connected. Accepting it does not give association staff a login to the Home gradebook, and it does not make that parent a staff member.

Staff at the association see the roster their association collected. Those records belong to the association. Archiva stores them for the association.

The database refuses a request unless a rule allows it. Each family's records are tied to that family. A signed-in parent can read that family's records. A student login can read that student's records, and cannot change the family account, billing, or invites. Another family cannot read yours with the app's database login.

The family owner can limit which children another adult in the household is allowed to see.

The key that can skip those rules stays on our server. It is not included in the pages sent to the browser. When an operator opens a family's records in the support console, that access is logged. Families cannot read that log.

We run tests that ask for another family's records and expect the database to refuse.

The site is served over HTTPS. Data in transit is encrypted with TLS, and browsers are told to keep using HTTPS. Records in the database are encrypted at rest with AES-256.

Payments go through our payment processor. We store a customer id and a subscription id. We do not store the full card number.

Sign-up confirmation, password reset, and invite email are sent by our email provider.

Passwords are hashed by the sign-in service. We do not keep the password itself. A student PIN is stored in a form that can be checked and cannot be read back as the digits. An access link is checked the same way. We also keep a copy of the current link so a parent can show the same QR code again. Only the server can read that copy.

In production, a Social Security number an association chooses to store is encrypted before it is saved.

From Reports you can generate a report card, a transcript, and an attendance log. The PDFs are built from what you entered.

You can edit and delete students, classes, and school years in the app. A delete is refused while a finalized grade on that record is still locked. The app asks you to unlock those grades first.

There is no button in Settings that downloads the whole account or deletes it. Email support@myarchiva.com from the address on the account. Use the subject “Privacy Request,” and say whether you want a copy or deletion. We check that we are writing to the account holder.

You can cancel renewal in the billing portal or in Settings, under Billing. Cancellation takes effect at the end of the current paid period, unless the portal says otherwise. Canceling does not delete the records. When the subscription is canceled, the account is read-only. You can still open what you saved. You cannot add work, enter grades, mark attendance, or generate a new report until you subscribe again.

If a payment fails, you can keep using Archiva while a past-due notice is showing. The account becomes read-only once the subscription is canceled. A complimentary period that is still running keeps the account editable until that period ends.

To remove one child's family records, delete the student in the app, or email us with the subject “Child Privacy Request.” Deleting a child from an association roster is the association's decision. A shorter page about children is Children's privacy.

Write support@myarchiva.com and put Security in the subject. Tell us what you found and how to reach you. There is no separate security address.