Our Philosophy

Many individuals have traded a measure of their personal privacy for greater safety and ease of use. At Stavertical Systems, we understand that supporting our customers requires thoughtfully balancing the privacy rights of those we serve with the essential functions of the solutions we develop.

Welcome to our Site

Stavertical Systems (“we,” “us,” or “our”) operates https://www.schoolmapper.ca (the “Site”). This page outlines how we collect, use, and safeguard personal information gathered from visitors to the schoolmapper.ca website. We handle your information solely to maintain, improve, and secure the Site. By accessing or using the Site, you consent to the practices described in this policy.

We do not share your personal information with any third parties. Any data you provide—whether through forms, cookies, or other interactions—is treated as confidential. This includes information such as your Internet Protocol (IP) address, browser type and version, device details, pages you view, timestamps of visits, time spent on the Site, and related usage statistics.

To help us enhance your experience and improve our content, we utilize analytic systems (of our choice), which collects and processes the information described above.

Stavertical Systems Privacy Policy

Effective Date: 03/1/2023

Stavertical Systems (“we,” “us,” or “our”) provides software, systems, websites, and services (“Services”) designed to enable customers (“you,” “your,” “users”) to manage and process information at your sole discretion. This Privacy Policy describes how we handle personal data in connection with your use of the Services and clarifies your rights and responsibilities.

1. Your Control Over Data

You are solely responsible for the information you choose to submit, upload, or process within the Services. You determine what data is collected, how it is used, and who it is shared with. We do not independently verify, monitor, or curate any information you enter.

You retain full control over the content and personal data you provide. You may update, correct, or delete your data at any time through the tools provided within the Services, subject to any applicable contractual obligations.

2. Our Role as a Service Provider

To the extent that personal data is entered into our Services, Stavertical Systems acts solely as a service provider (sometimes referred to as a “data processor”) processing data on your behalf. We do not determine the purposes or means of processing your data. Accordingly, you are the “data controller” responsible for compliance with all applicable privacy laws, including but not limited to:

PIPEDA (Canada)
FOIP (where applicable)
GDPR (European Union, where applicable)
Other regional or sector-specific privacy laws

We disclaim any responsibility or liability for the legality, accuracy, or appropriateness of any personal data you submit or for any decisions you make regarding that data.

3. No Responsibility for Customer Data

You acknowledge and agree that:
You are solely responsible for ensuring that any personal data you enter into the Services has been collected and processed in compliance with all applicable laws. Any privacy or FOIP violations can only arise from your own actions or omissions, as you alone determine what data to process. Stavertical Systems shall not be held liable for any claims, losses, or damages arising from the content, accuracy, disclosure, or security of any data you provide, except to the extent required by applicable law.

4. Security

We implement reasonable administrative, technical, and organizational measures designed to protect your data against unauthorized access, loss, or disclosure. However, you acknowledge that no system can guarantee absolute security, and you agree that you are solely responsible for implementing additional safeguards appropriate to your data.

5. Use of the Services at Your Discretion

By using the Services, you accept full responsibility for any data you choose to upload or process. You understand that you do so voluntarily and at your own discretion.

6. Your Data, Your Rights

You have full control over the information you choose to store with Stavertical Systems. At any time, you may request that we permanently delete some or all of your data from our systems. In most cases, we can process deletion requests within 24 hours during regular business days.

You may also request a copy of your data. Please note that preparing a complete export and arranging secure electronic delivery may take up to five (5) business days. We are only able to export data in the format generated and maintained by our systems. We are not able to reformat, restructure, or convert data into alternate formats to make it compatible with other systems or entities.

7. Security and Privacy

(a)Your Data, Always Yours:
At StaVertical Systems, we believe firmly in data ownership: your data is your own. Our role is to empower you with tools that let you generate, edit, visualize, and manage that data to benefit your organization and those you serve. We do not claim ownership over your content or misuse your data for any unrelated purpose.

(b)Secure Multi-Tenant Architecture:
Our solutions are built using a robust multi-tenant design that enforces physical and logical data separation between organizations. Each tenant is served through dedicated, encrypted SSL connections—ensuring that data remains siloed and inaccessible to other tenants.

(c)Network Access Controls:
Access to our platforms is tightly restricted using IP-level firewall rules, reducing the potential attack surface. Administrative backends and core infrastructure are shielded from the general internet wherever possible.

(d)End-to-End Data Encryption & Authentication Standards:
All data transmitted between you and our systems is encrypted using industry-standard HTTPS/TLS protocols. User passwords are never stored in plain text—they are irreversibly hashed using strong cryptographic algorithms. For tenants using secure authentication protocols like OAuth with Google Workspace, we never store or process your password directly. Multi-Factor Authentication (MFA) is encouraged wherever supported.

Effective Date and Changes to This Policy

This Privacy Policy is effective as of 03/01/2023 and will remain in effect unless modified. Any updates or changes to its provisions will take effect immediately upon being posted on this page.

Stavertical Systems and Matthew Stavert reserve the right to revise or update this Privacy Policy at any time. We encourage you to review this Policy periodically to stay informed of any changes. Your continued use of the Services after any revisions are posted will signify your acceptance of those changes and your agreement to be bound by the updated Privacy Policy.

If we make any material changes to this Policy, we will notify you either by sending a notice to the email address you have provided or by posting a prominent notice on our website.