Privacy Policy
Last updated: January 2025
Our core principle
You own your data. We don't sell it, rent it, or do anything sketchy with it. Assembly exists to make school communication easier—not to monetize the private information of students, teachers, or families.
What we collect (and why)
Basic Account Info
Names, email addresses, and school affiliations—the minimum we need to authenticate users and deliver the right newsletters to the right people.
Content You Create
The blurbs, templates, and newsletters you build inside Assembly. We store this so you can access it, edit it, and send it—and we never peek at it for marketing purposes.
Usage Data
Basic analytics (page views, feature usage) to understand how people use Assembly so we can make it better. No creepy tracking. No third-party ad networks.
What we don't do
We don't sell your data. Not to advertisers, not to data brokers, not to anyone.
We don't show ads. Assembly is funded by school subscriptions, not by exploiting your attention.
We don't train AI models on your content. Your newsletters, blurbs, and templates stay yours.
How we use your data
We use your information to:
- Provide and improve Assembly's core features
- Send transactional emails (password resets, notifications, etc.)
- Provide customer support (only when you reach out or when we're fixing a bug that affects you)
- Analyze usage patterns to prioritize new features and improvements (always in aggregate, never individually)
Who we share data with
Very few people. And only when necessary:
Service Providers
We use third-party services like Vercel (hosting), Supabase (database), and Resend (email delivery). These companies process data on our behalf under strict agreements—they never get to use your data for their own purposes.
Legal Obligations
If required by law (subpoena, court order, etc.), we'll comply—but we'll fight overbroad requests and notify you when legally allowed.
Business Transfers
If Assembly is ever acquired or merged, your data would transfer to the new owner—but only under the same privacy commitments.
Security is part of the product
We take security seriously—not just because it's required, but because schools trust us with sensitive information. Here's how we protect it:
End-to-end encrypted data storage
Role-based access controls
Regular third-party security audits
SOC 2 Type II compliance (in progress)
Your rights
You have the right to:
- Access your data. Request a copy of everything we have on you.
- Delete your data. Ask us to permanently remove your account and associated information.
- Correct your data. Update inaccurate information directly in your settings or by contacting us.
- Export your data. Download your content in a portable format (coming soon).
Student privacy (extra important)
Assembly is designed for schools, which means we often handle student information. We comply with FERPA, COPPA, and other education privacy laws.
Schools control what student data gets entered into Assembly—we never collect it independently. And we treat student information with the highest level of care.
When this policy changes
If we make meaningful changes to this privacy policy, we'll notify you via email and post an updated version here. We'll never make changes that weaken your privacy protections without giving you a chance to opt out.
Questions? We're here.
If you have concerns about privacy or want to exercise your data rights, reach out anytime.
Contact Support