Privacy Policy

Last updated: 2026-10-17

1. Who We Are

PatioLab is operated by HAGENT & BUSINESS WORLD SL, a company incorporated in Spain (Tax ID: B49271943), with registered address at Cubelo, 66 - Parcela 682, 49360 Cubelo, Zamora. We provide a Physical Education lesson-planning tool for K–12 teachers in the United States and worldwide. You can reach us at hola@patiolab.app.

2. Scope of This Policy

This Privacy Policy applies to patiolab.us and usepatiolab.com and explains how we collect, use, disclose, and protect personal information from users in the United States, with particular attention to:

COPPA — Children's Online Privacy Protection Act (15 U.S.C. §§ 6501–6506)
FERPA — Family Educational Rights and Privacy Act (20 U.S.C. § 1232g)
CCPA / CPRA — California Consumer Privacy Act and California Privacy Rights Act
CAN-SPAM Act — commercial email regulations (15 U.S.C. § 7701 et seq.)

3. Children's Privacy — COPPA Compliance

PatioLab is designed exclusively for teachers and school administrators aged 18 and older. We do not knowingly collect personal information from children under 13, nor do we direct our service at children under 13.

If a teacher uses PatioLab to plan lessons, no student personal data (names, grades, attendance, or any other personally identifiable information about students) is collected or stored by PatioLab. Teachers may create class groups using only a label (e.g. "Period 3 – Grade 7") — no student names, IDs, or contact information are required or requested.

If you believe we have inadvertently collected information from a child under 13, please contact us immediately at hola@patiolab.app and we will delete it promptly.

4. FERPA — Student Education Records

PatioLab does not collect, process, or store student education records as defined by FERPA. Our service is a lesson-planning tool used solely by teachers. No student personally identifiable information (PII) — including names, student IDs, grades, or disciplinary records — is entered into or processed by PatioLab. Accordingly, PatioLab does not act as a "school official" under FERPA, nor does it receive education records from educational institutions.

School districts and teachers remain responsible for ensuring that any external tools they use are consistent with their FERPA obligations. Because PatioLab does not process student PII, no FERPA-specific data-sharing agreement between PatioLab and a school district is required.

5. Information We Collect

We collect only the minimum information necessary to provide the service:

Account information: email address and display name, provided when you register.
Billing information: processed exclusively by our payment processor (Stripe). PatioLab never stores full credit card numbers or bank account details.
Usage data: pages visited, features used, and session duration — collected in aggregate, without linking to individual identities, to improve the product.
Technical data: browser type, operating system, and IP address — retained for security purposes for up to 90 days.

We do not sell your personal information. We do not use your data for targeted advertising.

6. How We Use Your Information

To create and manage your account.
To process payments and send receipts.
To provide customer support.
To send transactional emails (password resets, subscription confirmations). See Section 10 for email rights.
To improve PatioLab's features based on aggregate usage patterns.
To comply with applicable law.

7. California Residents — CCPA / CPRA Rights

If you are a California resident, you have the following rights under the CCPA and CPRA:

Right to Know: request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months.
Right to Delete: request deletion of your personal information, subject to certain exceptions.
Right to Correct: request correction of inaccurate personal information.
Right to Opt-Out of Sale / Sharing: we do not sell or share personal information for cross-context behavioral advertising.
Right to Non-Discrimination: we will not discriminate against you for exercising any CCPA rights.
Right to Limit Use of Sensitive Personal Information: we do not collect sensitive personal information as defined by CPRA.

To exercise any of these rights, email us at hola@patiolab.app with the subject line "California Privacy Request." We will respond within 45 days as required by law.

8. Data Sharing and Third Parties

We share your information only with:

Stripe (payment processing) — subject to Stripe's own privacy policy.
Cloudflare (infrastructure and CDN) — processes IP addresses and technical data to deliver the service.
Law enforcement or government agencies, when required by applicable law or valid legal process.

We do not share your data with data brokers, advertisers, or any third party for marketing purposes.

9. Data Retention and Security

We retain your account information for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law (e.g. billing records, which are retained for 7 years for tax compliance).

We implement industry-standard security measures including TLS encryption in transit, encrypted storage at rest, and access controls limited to authorized personnel.

10. Email Communications — CAN-SPAM Compliance

Any marketing emails we send will clearly identify PatioLab as the sender, include a valid physical mailing address, and provide a clear, functioning unsubscribe mechanism. We honor unsubscribe requests within 10 business days, as required by the CAN-SPAM Act. Transactional emails (receipts, password resets) are not subject to CAN-SPAM opt-out requirements.

11. International Transfers

PatioLab is operated from Spain (European Union). Your personal data is stored on servers managed by Cloudflare within the United States and the EU. By using PatioLab, you consent to the transfer of your information to these locations. We apply appropriate safeguards consistent with GDPR Chapter V for transfers from the EU to the US.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a prominent notice on the site at least 30 days before the changes take effect. Your continued use of PatioLab after that date constitutes acceptance of the updated policy.

13. Contact Us

For any privacy-related questions or requests:
HAGENT & BUSINESS WORLD SL
Cubelo, 66 - Parcela 682, 49360 Cubelo, Zamora
hola@patiolab.app