Last updated: July 4, 2026

Canopy is a connected school growth platform operated by Global Cloudr, Inc. (“Canopy,” “we,” “us”). This Privacy Policy explains what information we collect through the Canopy platform and website (usecanopy.school and app.usecanopy.school), how we use and protect it, and the choices available to you. Student and school data is also covered by our Student Data Privacy commitments, which control in the event of any conflict.

Who this policy covers

School clients and their staff — the schools that subscribe to Canopy and the administrators, teachers, and staff who use it.
Individuals whose information a school puts into Canopy — for example, people who appear in photos uploaded to PhotoVault, or subjects of stories created in Canopy Stories.
Website visitors — anyone who visits our public marketing site.

Information we collect

Information schools and staff provide. Account and workspace details, names, email addresses, roles, and the content schools upload or create — including photos and media, story submissions, newsletter content and subscriber lists, and social-media posts.

Information about individuals in school content. Schools may upload images, names, and other information about students, staff, and community members as part of their normal use (e.g., event photos, student success stories). We process this information on the school’s behalf and under the school’s direction.

Third-party account connections. When a school connects a social media account (Canopy Reach) or an email provider (Canopy Community), we store the access credentials needed to publish on the school’s behalf. These credentials are encrypted at rest.

Information collected automatically. Basic technical data such as IP address, browser and device type, and usage/diagnostic information, used to operate, secure, and improve the service.

How we use information

To provide, maintain, and secure the Canopy platform and its products (PhotoVault, Stories, Reach, Community, Create).
To authenticate users and enforce workspace-scoped access controls.
To provide support and communicate about the service.
To monitor for errors, abuse, and security issues.
To market Canopy — measuring how our website performs and advertising our own services to prospective schools. This uses website-visitor data only, described under Cookies, analytics, and advertising.
To comply with legal obligations.

We do not sell personal information. We do not use student data to build advertising profiles or for any purpose other than providing the service to the school.

This boundary is deliberate and worth stating plainly: the information schools and their communities put into the Canopy products — photos, story submissions, subscriber lists, rosters, posts — is never used for advertising, ours or anyone else’s. The marketing activity described below concerns visitors to our public website only, and the two are kept separate.

Cookies, analytics, and advertising

Where this applies. This section covers our public website (usecanopy.school). The Canopy application itself (app.usecanopy.school and the products within it) uses only the cookies required to keep you signed in and to keep the service secure — no advertising or cross-site tracking cookies are used inside the application.

What we use. Our website uses cookies and similar technologies, including Google Tag Manager and Google Analytics, to understand how visitors find and use the site — which pages are read, which content leads to a demo request, and whether the site is working correctly. Pages with a sign-up or download form also load a form from HubSpot, which we use to receive and manage those enquiries; submitting a form sends the details you enter to HubSpot on our behalf.

Advertising. We use website-visitor information to advertise Canopy to prospective schools. This includes Google Analytics advertising features such as remarketing, which allow us to show our ads to people who have visited our site. Because these features involve disclosing identifiers to advertising platforms, they may be treated as “sharing” personal information for cross-context behavioral advertising under California law. You can opt out at any time using the controls below.

Campaigns we run for schools. As a service, we also run marketing campaigns on behalf of client schools — including Google Ads, Facebook and Instagram advertising, remarketing, and SMS messaging — directed at each school’s own audiences and under that school’s direction. Those campaigns do not use information about other schools, and they do not draw on student data held in the Canopy products. Where a school asks us to send SMS messages, the school is responsible for having obtained the recipients’ prior express written consent, and recipients can stop messages at any time by replying STOP.

What we never do. We do not use student data, school content, or anything stored in a school’s workspace to build advertising profiles, and we do not sell personal information.

Your choices.

Most browsers let you block or delete cookies through their settings. Blocking analytics cookies will not affect your ability to use the site.
Google offers a browser opt-out for Google Analytics.
We honor the Global Privacy Control (GPC) signal. If your browser sends GPC, we treat it as an opt-out of targeted advertising.
California residents. You have the right to know what personal information we collect, to request its deletion or correction, and to opt out of the sale or sharing of personal information for cross-context behavioral advertising. To opt out, send a GPC signal from your browser or contact us at the address below. We will not discriminate against you for exercising these rights.
Residents of other U.S. states with comprehensive privacy laws have comparable rights, including opting out of targeted advertising. The same controls apply.

AI and automated content

Canopy Stories uses third-party AI services to help schools turn submissions into draft content. Submitted text may be sent to our AI subprocessors to generate drafts, which a staff member reviews before use. We do not permit these subprocessors to use school or student content to train their models beyond what is necessary to provide the service.

Service providers (subprocessors)

We use a limited set of vetted service providers to run Canopy. A current list is available on request and may include providers for: cloud hosting and database/storage, authentication, transactional email, AI content generation and media rendering, email marketing delivery, social-media publishing, error monitoring, and rate limiting. Each is bound to appropriate confidentiality and data-protection obligations.

Data retention

We retain information for as long as a school maintains an active account, and as needed to provide the service and meet legal obligations. Schools may request export or deletion of their workspace data as described below and in our Student Data Privacy commitments.

Security

We use technical and organizational measures designed to protect information, including encryption in transit, encryption at rest for stored third-party credentials, role-based and workspace-scoped access controls, and audit logging of sensitive actions. No system is perfectly secure, but we work to protect the data schools entrust to us.

Your rights and choices

School clients control the data in their workspace. If you are a student, parent, or staff member and wish to access, correct, or delete information a school has placed in Canopy, please contact your school — they are the controller of that data. We will assist schools in responding to such requests. For website-visitor data, contact us at the address below.

Depending on where you live, you may also have the right to know what personal information we hold about you, to request its correction or deletion, and to opt out of targeted advertising. See Cookies, analytics, and advertising for the controls available, or contact us using the details below.

Children’s information

Some schools serve minors. Where Canopy processes information about children, it does so on the school’s behalf under the school’s authority, consistent with applicable law. See our Student Data Privacy page for details on FERPA and COPPA.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated to school clients, and the “last updated” date above will change.

Contact us

Questions about this policy or our data practices: robert@globalcloudr.com, or Global Cloudr, Inc., 131 Wilton Dr., #1, Campbell, CA 95008.