Last Updated: July 6, 2026
This Student Data Privacy Policy explains how Art2fund Inc. ("Art2fund," "we," "us," or "our") collects, uses, shares, protects, retains, and deletes Student Data in connection with Art2fund school art, creative, educational, fundraising, gallery, museum, museum shop, and product-ordering programs.
This Policy is intended for schools, districts, parent-teacher organizations, parent-teacher associations, school coordinators, teachers, parents, legal guardians, and other participating organizations that need to understand how Art2fund handles student-related information.
This Policy supplements the Art2fund Terms and Conditions, the Art2fund Privacy Policy, the Parent Consent or Activation Terms, and the Artwork and Gallery Visibility Notice. If Art2fund signs a separate written agreement, district agreement, data processing agreement, or student data addendum with a Participating Organization, that written agreement may supplement or control over this Policy for the subject matter it covers.
This Policy applies to Student Data processed by Art2fund in connection with Programs operated for or with Participating Organizations.
This Policy does not replace a Participating Organization's own privacy notices, school policies, district policies, parental consent practices, FERPA notices, directory information policies, student record policies, procurement requirements, fundraising approvals, or technology vendor review procedures. Participating Organizations remain responsible for their own legal, policy, and approval obligations.
Capitalized terms not defined in this Policy have the meanings given in the Art2fund Terms and Conditions.
"Student Data" means information that identifies, relates to, describes, is reasonably capable of being associated with, or is linked or reasonably linkable to a Student Artist in connection with an Art2fund Program.
Student Data may include Artwork, the information written on an Artwork Sheet, student name, class, school, teacher, QR code, Access Code, activation details, Personal Page data, Museum data, Museum Shop data, gallery visibility data, order-related information linked to a Student Artist, support requests, and related technical or operational identifiers.
"De-identified Data" means information that has been processed so it is not reasonably linkable to a specific Student Artist, Parent, household, school user, or Student Data record, taking into account the available data and reasonable safeguards.
"Participating Organization" means a school, district, parent-teacher organization, parent-teacher association, nonprofit organization, business, or other organization that participates in or helps organize an Art2fund Program.
Art2fund provides art education, creative project, digital gallery, museum, museum shop, product-ordering, production, fulfillment, support, and reporting services for Participating Organizations.
Depending on the Program and written agreement, Art2fund may act as:
Where a Participating Organization discloses education records or personally identifiable information from education records to Art2fund under FERPA or a similar student privacy law, Art2fund will use that information only for the purpose for which it was disclosed, as permitted by the applicable written agreement, school direction, and law.
Art2fund's Program flow is designed to limit Student Data before a Parent activates a Personal Page.
Before activation, a Participating Organization may upload scanned Artwork Sheets. Art2fund may process those scans by separating the designated drawing area from the designated name or class area. At that stage, Art2fund may have only the Artwork image and a separate image of the name or class area, without an activated Personal Page or additional Parent-provided Student Data.
Art2fund may generate downloadable flyers or other Program materials, personalized per Artwork, with a QR code or Access Code linked to the applicable Artwork.
A Parent or legal guardian may then activate the Student Artist's Personal Page using the QR code or Access Code. During activation, the Parent may enter or confirm:
Activating a Personal Page does not create a general student account, parent account, or Buyer account. Access remains tied to the QR code, Access Code, direct link, or other access method associated with the applicable Program materials.
Only after activation with Parent authorization should the Student Artist's Artwork become visible in the applicable Personal Page, Museum, Museum Shop, Class Gallery, or School Gallery.
If a Personal Page is not activated, the Student Artist's project participation ends at the non-activated Artwork stage. Non-activated Artwork should not be published further in a Personal Page, Museum, Museum Shop, Class Gallery, or School Gallery.
Art2fund may process the following categories of Student Data, depending on the Program and user actions:
Art2fund does not intend to collect Social Security numbers, student ID numbers, birth dates, grades, health information, disciplinary records, academic records, lunch status, disability information, or other sensitive education records unless expressly required for a specific Program and covered by a separate written agreement.
Users and Participating Organizations should not upload, write, submit, or include unnecessary personal information, sensitive information, protected records, third-party content, or unrelated data on Artwork Sheets or in Program materials. Art2fund may reject, remove, delete, crop, mask, restrict, or decline to process materials that include unnecessary or inappropriate information or that create a legal, privacy, safety, operational, or production risk.
Student Data may be collected:
Art2fund uses Student Data only for Program-related, service-related, operational, legal, security, and support purposes.
These purposes may include:
Art2fund does not sell Student Data.
Art2fund does not use Student Data for targeted advertising or profiling.
Art2fund does not use Student Data to build unrelated marketing profiles.
Art2fund does not use Student Data or Student Artist Artwork to train artificial intelligence models.
Art2fund does not direct marketing to children.
Art2fund does not use the Parent email address linked to a Personal Page or Artwork for general newsletters, unrelated marketing, or unrelated promotional emails unless the recipient separately opts in or Art2fund is otherwise permitted to do so by applicable law.
Art2fund does not publish or share real Student Artist Artwork, Personal Pages, Museums, Museum Shops, or related Digital Project Pages for Art2fund's own public advertising, public social media, testimonials, portfolio examples, or unrelated promotional purposes unless Art2fund obtains any separate permission required by law.
Art2fund does not knowingly allow service providers to use Student Data for their own advertising, profiling, resale, or unrelated purposes.
FERPA generally applies to schools and school districts that receive funds from the U.S. Department of Education, and to education records maintained by or for those schools.
Art2fund is not a school and does not determine whether particular information is an education record under FERPA. Participating Organizations are responsible for determining whether FERPA or similar student privacy laws apply to their use of Art2fund.
Where a Participating Organization discloses personally identifiable information from education records to Art2fund under a FERPA exception, written agreement, school official model, or other legal basis, Art2fund will:
Participating Organizations remain responsible for providing any notices, directory information disclosures, consent processes, school official determinations, direct control requirements, policy approvals, and recordkeeping required by FERPA or similar laws.
Art2fund's Programs are intended to be organized by Participating Organizations and activated or managed by Parents or legal guardians.
Children under 13 should not create accounts or submit personal information to Art2fund without Parent or legal guardian involvement and authorization.
Art2fund's Personal Page activation flow may require the activating person to confirm that they are the Parent or legal guardian of the applicable Student Artist and agree to the applicable Parent Consent or Activation Terms, privacy notices, and Program-specific terms.
Where a school or district uses Art2fund for an educational purpose and is legally permitted to provide consent on behalf of Parents under COPPA, Art2fund will use the Student Data covered by that school consent only for the educational or school-authorized purpose and not for unrelated commercial purposes. Art2fund may still provide Parent-facing notices and Parent request options where feasible.
Art2fund does not knowingly require a child to provide more personal information than is reasonably necessary to participate in the applicable Program. Parents may contact Art2fund to review, correct, remove, or request deletion of Student Data associated with their child's activated Personal Page, subject to the limits described in this Policy.
Art2fund does not intend to administer surveys that request sensitive student or family information covered by the Protection of Pupil Rights Amendment ("PPRA").
Participating Organizations are responsible for determining whether PPRA, school board policies, district policies, or other local student privacy rules apply to their Program participation, communications, artwork collection, gallery sharing, or fundraising activities.
State student privacy, education technology, consumer privacy, breach notification, biometric, records-retention, procurement, fundraising, or child-protection laws may impose additional requirements. Art2fund may address those requirements through a separate written agreement, student data addendum, data processing agreement, district form, subprocessor list, security exhibit, or state-specific notice where needed.
Art2fund may share Student Data with service providers and partners only as needed to operate the Services, run Programs, process orders, produce Products, deliver Products, provide support, protect the Services, comply with law, or perform other Program-related functions.
Service provider categories may include:
Art2fund may share print-ready Artwork designs or production files with production partners. Art2fund may share Buyer order details, such as name, shipping address, Product selections, and order information, with production partners, fulfillment partners, shipping carriers, and related service providers as needed to produce and deliver Products.
Payment information entered by a Buyer may be submitted directly to Art2fund's third-party payment processor. Art2fund may provide basic order and transaction information to the payment processor, but Art2fund does not intend to receive or store full payment card details entered directly with the payment processor.
Art2fund requires service providers that process Student Data for Art2fund to use Student Data only for authorized services and to protect it with appropriate safeguards.
If Art2fund is involved in a merger, acquisition, reorganization, financing, sale of assets, bankruptcy, or similar business transaction, Student Data may be transferred or disclosed as part of that transaction only as permitted by applicable law and applicable written agreements. Any successor handling Student Data must protect it consistently with this Policy or provide any notice or commitments required by law or agreement.
Art2fund may use subprocessors and service providers to operate the Services. Art2fund remains responsible for selecting service providers that are appropriate for the services they perform and for requiring them to protect Student Data according to their role.
Where applicable, Art2fund will require service providers that process Student Data to:
Art2fund may provide a subprocessor or service provider list to Participating Organizations on request or through a separate written agreement.
Access to Student Data is limited based on role and Program function.
Depending on the Program, Student Data may be accessible to:
Class Websites and Class Galleries are accessed by Teachers using usernames and passwords. School administration tools are accessed by School Coordinators or other authorized school administrators using usernames and passwords. School Coordinators may be able to view, manage, or resend Teacher login details through school administration tools. Personal Pages, Museums, Museum Shops, and School Galleries may be accessed through QR codes, Access Codes, or direct links, depending on the page type.
Direct-link pages may be accessed by anyone who receives the relevant link, QR code, or Access Code. Parents and Participating Organizations are responsible for deciding who they share links with, subject to applicable school policies and Program terms.
Art2fund does not intend active Personal Pages, Museums, Museum Shops, Class Galleries, or School Galleries for real Student Artists to be searchable public profile pages. However, Art2fund cannot guarantee that a QR code, Access Code, direct link, or copied page content remains private after it is shared by a Parent, Student Artist, Buyer, Teacher, School Coordinator, Participating Organization, invited viewer, or other recipient.
Art2fund uses reasonable administrative, technical, and physical safeguards designed to protect Student Data from unauthorized access, use, disclosure, alteration, loss, or destruction.
Safeguards may include:
No online service, school system, email system, payment provider, hosting provider, carrier, or production workflow can guarantee absolute security. Users should protect QR codes, Access Codes, direct links, usernames, passwords, and other access methods.
If Art2fund becomes aware of a security incident involving Student Data, Art2fund will take reasonable steps to investigate, contain, assess, remediate, and document the incident.
Art2fund will notify affected Participating Organizations, Parents, regulators, or other parties as required by applicable law, applicable written agreements, and the circumstances of the incident.
Art2fund will not promise a universal notification deadline in this Policy because legal requirements and contract obligations may vary by state, district, data type, and incident type.
Participating Organizations and School Coordinators should promptly notify Art2fund if they become aware of unauthorized access, wrongly shared links, incorrect Artwork associations, privacy complaints, lost credentials, or other issues involving Student Data.
Art2fund retains Student Data only as long as reasonably needed for Program operation, Personal Page activation, gallery and Museum presentation, Museum Shop operation, Product production, order fulfillment, customer support, Program Proceeds reporting, accounting, tax, legal compliance, security, fraud prevention, backups, dispute handling, and other purposes described in this Policy, the Privacy Policy, the Terms, or a separate written agreement.
Retention periods may vary by data type and Program. For example:
Where a separate written agreement requires a specific retention, deletion, return, or de-identification period, Art2fund will follow that agreement for the Student Data it covers.
Parents and legal guardians may contact Art2fund to request access, correction, removal, deactivation, or deletion of Student Data connected with their child's activated Personal Page, Museum, Museum Shop, or related Digital Project Pages.
Each Personal Page may include a removal or deletion option. Before any Products have been ordered through the applicable Personal Page, Museum Shop, or ordering flow, a Parent may be able to change the Student Artist's name, class, or email address through available Program tools. Before any Products have been ordered, the School Coordinator may also be able to correct the Student Artist's name or class through school administration tools. After a Product has been ordered, changes may require Art2fund support review because order, production, personalization, fulfillment, accounting, and support records may already depend on the submitted information.
Participating Organizations may contact Art2fund to request correction, deletion, return, de-identification, export, or restriction of Student Data associated with their Program, subject to the applicable written agreement, law, and Program status.
Art2fund may need to verify the identity and authority of the requester before responding to a request. Art2fund may coordinate with the Participating Organization where a request affects school-controlled records, Class Galleries, School Galleries, Program reporting, or school administration tools.
Art2fund may not be able to delete all Student Data immediately where the data is needed for:
Removal or deactivation of a Personal Page, Museum, Museum Shop, or gallery does not undo orders already placed.
Art2fund may use De-identified Data or aggregated data for reporting, analytics, service improvement, product improvement, operational planning, quality control, security, business analysis, and similar purposes.
Art2fund will not attempt to re-identify De-identified Data except where necessary to test de-identification methods, investigate security issues, comply with law, or as otherwise permitted by applicable law.
Participating Organizations are responsible for:
Parents are responsible for:
Art2fund Inc. is a United States company, but Art2fund personnel, affiliates, contractors, or service providers may access or process Student Data in the United States, the European Union, or other locations where Art2fund or its service providers operate.
Art2fund will protect Student Data as described in this Policy regardless of where it is processed, subject to applicable law and written agreements.
Art2fund may update this Student Data Privacy Policy from time to time. Updated versions may be posted on the Art2fund website, provided through school administration tools, included in Program materials, or otherwise made available through the Services.
The updated Policy will be effective as of the date stated in the updated Policy or as otherwise permitted by applicable law. If a separate written agreement requires specific notice of changes, Art2fund will provide notice as required by that agreement.
To ask questions or make a student data or privacy request, contact Art2fund:
Art2fund Inc.
228 E 45TH ST STE 9E
NEW YORK NY 10017
United States
Customer Support: info@art2fund.com
Legal Notices: legal@art2fund.com
Privacy Requests: privacy@art2fund.com
When making a request, please include enough information for Art2fund to review it, such as your name, role, school or organization, Student Artist name as entered in the Program, class, Personal Page or Museum link if available, order number if applicable, and the request you want Art2fund to review.