The safest data is the data we never hold.
Written for the person who has to sign off on this. The short version: no student information system connection, no card numbers, and roles that actually restrict what staff can reach.
What Admittee does not hold
**No student information system data.** There is no roster sync, no enrolment feed, no grades and no student records. Nothing about a student arrives from PowerSchool, Skyward, Infinite Campus or anything else. The reasoning is here — most of what a facility calendar and a box office need is not in an SIS, and every integration into one is a permanent obligation.
**No card numbers.** Payments run through Stripe. Card details are entered into Stripe's own fields and never reach Admittee's servers or database, which keeps the PCI surface where it belongs.
The people Admittee does know about are the ones who transact with you: buyers, renters, participants and their households. That is a much smaller and less sensitive set than a student body, and it is built from what those people actually did rather than imported.
Inside an account
Roles
What each person can reach is limited by role, including a Finance role for the business office that sees money without seeing everything else.
Facility permissions
Staff who run one building can be scoped to it, with approvals and attribution tied to the facility.
Activity log
A filterable record of who changed what and when, across the account, plus a history drawer on individual records.
Passkeys
Sign-in supports passkeys, so an account does not have to rest on a password somebody reuses.
Direct payouts
Money moves into your own connected Stripe account on your own schedule. We do not hold funds between collection and disbursement.
Your data leaves with you
Exports on the reports that matter. There is no contract to exit and no retention hold.
Questions
Where is data stored?
In Google Cloud (Firestore), with payments handled by Stripe. Ask us for specifics if your district needs them in writing — we would rather answer a real question than publish a vague reassurance.
Do you sell or share data?
No. Buyer and family data belongs to the organization that collected it.
What about marketing consent?
Recorded where it was given, so an opt-in is attributable and an export can be trusted rather than assumed.
Who do we contact about a security question?
Contact us and it reaches the people who build it, not a queue.