Privacy Policy

Last Updated: May 4, 2025

Introduction

Welcome to Pay By Parent ("we," "our," or "us"). Pay By Parent is a Shopify App that enables minors under the age of 18 to send product information or shopping carts to their parents or guardians for review and purchase approval via text message (using Twilio) or email (using SendGrid). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

We are committed to protecting the privacy of children under the age of 13 and comply with the Children's Online Privacy Protection Act (COPPA). This policy outlines our practices concerning the collection of information from children under 13.

Information We Collect

From Parents/Guardians:

• Contact information (email address and/or phone number)
• Payment information (processed securely through Shopify's payment system)
• Communication preferences
• Transaction history related to requests from minors

From Minors Under 18:

• No Personally Identifiable Information (PII) is stored for children under 13
• For children under 13, we collect only the minimal information necessary to connect them with their parent/guardian, and this information is purged after the connection is made
• For users 13-17: We may collect limited information necessary to facilitate the request process, such as:
  • Non-persistent identifiers to maintain session information
  • Shopping cart contents and product preferences
  • Message content included in the request to parents/guardians

Automatically Collected Information:

• Device information (browser type, IP address, device type)
• Usage data (how the service is accessed and used)
• Cookies and similar technologies for service functionality

Information Transmitted via Third-Party Services:

• Messages sent via Twilio (for text messages): Messages sent through our service using Twilio will transmit the content of your communications through Twilio's secure network
• Messages sent via SendGrid (for emails): Email content sent through our service will be processed by SendGrid

How We Use Information

We use the collected information to:

• Facilitate the request and approval process between minors and parents/guardians
• Process transactions through Shopify's platform
• Send notifications about product requests and approvals via Twilio (SMS) or SendGrid (email)
• Improve our service and customer experience
• Respond to customer service inquiries
• Comply with legal obligations

Communication Services via Twilio and SendGrid

• Text messages (SMS): We use Twilio to send text messages between minors and their parents/guardians. Messages are transmitted securely through Twilio's network.
• Emails: We use SendGrid to facilitate email communications between minors and their parents/guardians.

COPPA Compliance

Pay By Parent is designed with children's privacy in mind and complies with the Children's Online Privacy Protection Act (COPPA). Here's how we handle information from children under 13:

1. Parental Consent: We require verifiable parental consent before collecting, using, or disclosing personal information from children under 13. Parents will receive direct notice about our information practices.
2. Limited Collection: We collect only the information necessary to facilitate the connection between minors and their parents/guardians.
3. No Storage of Children's PII: We do not store personally identifiable information from children under 13 in our database.
4. Parental Rights: Parents/guardians have the right to:
   • Review their child's information
   • Refuse further collection or use of their child's information
   • Request deletion of their child's information
5. Data Security: We use reasonable security measures to protect all data, including any temporary information related to children.

Data Sharing and Disclosure

We may share information in the following circumstances:

• Service Providers: We share information with third-party service providers who perform services on our behalf, including:
  • Shopify (hosting our app and processing transactions)
  • Twilio (for text message communications)
  • SendGrid (for email communications)
• Legal Requirements: We may disclose information if required to do so by law or in response to valid requests by public authorities.
• Business Transfers: If we're involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• With Your Consent: We may share information with your consent or at your direction.

Third-Party Service Providers

Twilio: When you use our service to send text messages, your communication data is transmitted through Twilio's secure network. Twilio may process certain metadata related to message transmission. For details on how Twilio handles your data, please see Twilio's Privacy Policy.

SendGrid: When you use our service to send emails, your communication data is processed by SendGrid. For details on how SendGrid handles your data, please see SendGrid's Privacy Policy.

Data Security

We implement appropriate technical and organizational measures to maintain the security of your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

Our service providers (Twilio and SendGrid) also maintain strict security standards designed to protect your data in their systems.

Data Retention

We retain information only for as long as necessary to provide our services and fulfill the purposes described in this Privacy Policy. We will retain and use information:

• As necessary to comply with our legal obligations
• As necessary for legitimate business purposes
• As necessary to resolve disputes

For Children Under 13: We do not retain any personally identifiable information from children under 13 after the parent/guardian transaction is complete or parental consent is withdrawn. Any temporary connection information is purged after the transaction process is completed.

Your Rights and Choices

For Parents/Guardians:

• Access and Review: You have the right to access and review any information we have collected about you and your child.
• Correction: You may request that we correct inaccurate information.
• Deletion: You may request that we delete your information or your child's information from our records.
• Opt-Out: You may opt out of receiving marketing communications from us.
• Consent Withdrawal: You may withdraw any consent you previously provided for the collection, use, and disclosure of your child's personal information.

To exercise these rights, please contact us using the contact information provided at the end of this Privacy Policy.

For California Residents:

Under the California Consumer Privacy Act (CCPA), you have the right to:

• Know what personal information is being collected about you
• Know whether your personal information is sold or disclosed and to whom
• Say no to the sale of personal information
• Access your personal information
• Request deletion of your personal information
• Not be discriminated against for exercising your privacy rights

Cookies and Similar Technologies

Our service may use cookies and similar tracking technologies to collect information about how you interact with our app. Cookies are small data files stored on your device. We use cookies to:

• Maintain your session and preferences
• Understand how you use our service
• Improve our service
• Remember your preferences

You can choose to disable cookies through your browser settings, but this may affect your ability to use certain features of our service.

International Data Transfers

Your information may be transferred to and processed in countries other than the one in which you reside. These countries may have data protection laws that are different from those in your country.

Specifically, our servers are located in [insert server location], and our service providers (Twilio and SendGrid) operate globally. By using our service, you consent to this transfer, storing, and processing.

Children's Privacy

Our service is designed with children in mind, and we are committed to protecting children's privacy in accordance with COPPA and other applicable laws.

For users under 13, we:

• Require verifiable parental consent before collecting any personal information
• Collect only the minimal information necessary to connect children with their parents/guardians
• Do not store children's personally identifiable information after the transaction is complete
• Provide parents with the ability to review, delete, and control their children's information
• Do not condition a child's participation on providing more information than necessary

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We will provide additional notice if there are material changes that impact your rights or how we use your information.

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of our service after policy changes constitutes your acceptance of the updated Privacy Policy.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Noctivity Inc.
Email: privacy@noctivity.com
Phone: [Privacy contact phone]
Address: [Your company address]

For matters related to children's privacy or to provide or withdraw parental consent, please contact us directly at coppa@noctivity.com