Privacy Policy

Last revised:

Big Nest is a trade name of Building Block Labs, LLC. Big Nest provides a platform used by parent-teacher groups, school support organizations, booster groups, and similar community organizations.

This Privacy Policy explains how Big Nest (“we,” “us,” or “our”) collects, uses, shares, and retains information when you use Big Nest websites, applications, mobile applications, payment features, and related services.

The information we process depends on how you use Big Nest. You may interact with Big Nest as an account holder, organization administrator, parent or guardian, donor, purchaser, volunteer, program participant, funding-request applicant, seller, or website visitor.

Information We Collect

Account and Profile Information

If you create a Big Nest account, we collect information needed to create and manage the account. This may include:

  • your email address;
  • first and last name;
  • phone number;
  • contact type, such as guardian, staff member, or community member;
  • organization memberships;
  • roles and permissions;
  • communication preferences;
  • volunteering preferences; and
  • information about your relationship to a family or student.

Big Nest uses Firebase Authentication to provide authentication services. Depending on the feature you use, sign-in methods may include email and password, Google sign-in, or email sign-in links.

Big Nest does not store your password in its application database.

Donations, Purchases, and Transactions

When you make a donation, purchase merchandise, buy tickets, register for a program, or complete another transaction through Big Nest, we may collect and retain information such as:

  • your name;
  • email address;
  • phone number, when requested;
  • the organization associated with the transaction;
  • the transaction amount;
  • the products, programs, events, or services involved;
  • student or participant information associated with the transaction;
  • fulfillment or distribution information;
  • transaction status;
  • receipt information;
  • payment processor identifiers; and
  • information needed to maintain the organization's transaction and accounting history.

You do not necessarily need a Big Nest account to make a donation, purchase an item, volunteer, or use certain other Big Nest features.

Payment Information

Big Nest uses Stripe to process payments.

When you make a payment, Stripe processes sensitive payment credentials such as your full credit or debit card number and card security code. Big Nest does not directly collect or store your full card number or card security code through the supported payment flows used by the platform.

Big Nest does receive and retain information associated with transactions processed through Stripe. Depending on the transaction and payment method, this may include:

  • your name and email address;
  • phone number or billing information;
  • transaction amount;
  • purchased items, services, registrations, or donations;
  • payment status;
  • transaction and payment identifiers;
  • receipt information; and
  • limited payment-method information, such as card brand and the last four digits of a card.

For certain organization billing features, Big Nest may also retain limited billing information such as billing address, card expiration information, bank name, or the last four digits of a payment account.

When you use a digital wallet such as Apple Pay, information you choose to provide through that wallet, such as your name or email address, may also be provided to Big Nest as part of the transaction.

Stripe's handling of payment information is also governed by Stripe's own privacy practices.

Program and Event Registration Information

Organizations can use Big Nest to manage programs, events, and after-school activities.

Depending on the program, information collected may include:

  • parent or guardian contact information;
  • a student's name;
  • grade or teacher;
  • program or course selections;
  • emergency contact information;
  • authorized pickup information;
  • departure instructions;
  • photo-release choices;
  • an indication that a student has a medical condition;
  • responses to registration questions; and
  • related payment information.

The exact information requested depends on the organization and the program.

Family and Student Information

Big Nest may store information about families and students when that information is provided by parents, guardians, authorized organization personnel, or through organization activities.

This information may include:

  • student names;
  • grade and teacher information;
  • family relationships;
  • school-year history;
  • family contact information;
  • directory preferences; and
  • information associated with registrations, fundraising, or transactions.

Deleting a guardian's Big Nest account does not automatically delete student or family records maintained by an organization.

Volunteer Information

When you sign up to volunteer, Big Nest may collect information such as:

  • your name;
  • email address;
  • the volunteer activity or assignment you selected;
  • dates, times, and quantities associated with the signup; and
  • information needed to send confirmations, reminders, or management links.

You may be able to volunteer without creating a Big Nest account.

Funding Requests

If you submit a funding or reimbursement request, Big Nest may collect information such as:

  • your name and email address;
  • your role;
  • the requested amount;
  • a description of the request;
  • responses to organization-defined questions;
  • reimbursement information;
  • supporting documents;
  • administrative notes; and
  • communications and status history related to the request.

Files and Documents

Big Nest allows users and organizations to upload files and images, including documents, logos, product images, meeting materials, funding-request attachments, and calendar documents.

Files you upload may contain personal information.

Some features may process submitted documents using Google services, including Google Vertex AI, to perform functions such as document classification, information extraction, or content generation.

Communications

Big Nest may collect and retain information associated with emails and other communications sent through the service.

This may include:

  • sender and recipient email addresses;
  • message content;
  • attachments;
  • delivery status;
  • bounce or unsubscribe information;
  • replies; and
  • information about whether certain organization communications were opened or links were clicked.

Big Nest uses SendGrid for many email-delivery functions.

Open and click tracking may be used for certain community or campaign communications when that feature is enabled. Transactional and support communications may use different tracking settings.

Information Collected Automatically

Big Nest uses cookies, browser storage, and similar technologies to operate and improve the service.

These technologies may be used to:

  • maintain sign-in state;
  • remember authentication or invitation workflows;
  • maintain application state;
  • store drafts;
  • recover interrupted transactions;
  • cache information; and
  • measure website and application usage.

Depending on the feature, Big Nest may use cookies, local storage, session storage, IndexedDB, or storage mechanisms provided by Firebase.

Analytics

Big Nest uses Google Analytics on portions of its web services.

Analytics data may include:

  • page or route information;
  • page titles;
  • selected navigation activity;
  • selected application events; and
  • performance information.

Big Nest limits application-supplied analytics information to sanitized page context and approved event data. Query-string contents, authentication tokens, and similar sensitive route values are not intentionally included in Big Nest's analytics page context.

An organization using Big Nest may also configure its own Google Analytics measurement destination for its Big Nest website.

Infrastructure and service providers may separately process technical information associated with a request, such as IP address, browser information, device information, or request metadata.

Big Nest does not currently use third-party advertising networks, advertising pixels, or session-replay software as part of its standard platform implementation.

Mobile App Information

The Big Nest mobile application is primarily used by authorized organization personnel and sellers to perform activities such as in-person sales and payment collection.

The application may store information locally on the device, including:

  • authentication state;
  • organization and sale information;
  • catalog or product information;
  • draft transactions; and
  • information needed to recover an interrupted payment.

Location

On supported iOS devices, Big Nest may request location permission when required for Stripe Tap to Pay.

Big Nest's own application does not use this permission to independently collect or store your precise geographic coordinates. Stripe, Apple, or the device platform may process information associated with payment-location verification under their own privacy practices.

Contactless Payments

Contactless payment credentials are collected and processed using Stripe and platform payment technology. Big Nest receives transaction results and related information rather than the underlying full payment credentials.

How We Use Information

Big Nest uses information to:

  • create and manage accounts;
  • authenticate users;
  • provide organization access and permissions;
  • operate organization websites and administrative tools;
  • process donations and payments;
  • fulfill purchases;
  • administer events and programs;
  • coordinate volunteers;
  • maintain family and student information;
  • process funding requests;
  • provide receipts and transaction histories;
  • send confirmations, reminders, newsletters, and other communications;
  • provide customer support;
  • prevent abuse, fraud, and unauthorized access;
  • maintain, troubleshoot, and improve Big Nest;
  • measure use and performance of our websites and services;
  • recover interrupted transactions or workflows; and
  • maintain financial, operational, and organizational records.

How Information Is Shared

Organizations Using Big Nest

Big Nest is a multi-tenant platform used by independent organizations.

Information you provide in connection with an organization may be accessible to authorized personnel from that organization based on their roles and permissions.

For example, authorized personnel may have access to:

  • donation records;
  • orders and purchases;
  • program registrations;
  • volunteer information;
  • funding requests;
  • family or student information; and
  • administrative reports or exports.

Different roles have different levels of access.

Some information may also be intentionally published on public organization websites, such as board information, sponsor information, organization documents, or other content selected for publication.

Service Providers

Big Nest uses third-party service providers to operate portions of the platform. These include services such as:

  • Google Firebase and Google Cloud for authentication, database storage, backend processing, hosting, file storage, security services, logging, backups, and related infrastructure;
  • Stripe for payments, billing, digital wallets, refunds, and contactless payments;
  • SendGrid for email delivery and related email processing;
  • Google Analytics for website and application measurement;
  • Google Vertex AI for certain document-processing and content-generation features;
  • Formspree for certain website forms; and
  • platform and infrastructure providers needed to deliver Big Nest services.

The information provided to a service provider depends on the feature being used.

We may disclose information when reasonably necessary to comply with applicable law, legal process, or governmental requests, or to protect the rights, safety, security, and integrity of Big Nest, organizations using the service, our users, or others.

Account Deletion

You can permanently delete your Big Nest account from the account or profile settings available in Big Nest.

Account deletion permanently removes your Big Nest authentication account and primary account profile and removes your active access to organizations associated with that account.

It also removes specified account-specific information, such as organization memberships, permissions, account preferences, verification records, and certain invitations.

Information That May Remain After Account Deletion

Deleting your Big Nest account does not necessarily delete records of activities or transactions that occurred before the account was deleted.

Big Nest and organizations using Big Nest may retain records such as:

  • donations;
  • purchases and orders;
  • program and event registrations;
  • funding requests;
  • volunteer commitments;
  • family and student records;
  • historical board or committee records;
  • payment and receipt information;
  • emails and communication history;
  • uploaded documents;
  • accounting and financial records; and
  • other organizational records.

These records may continue to include identifying information such as your name, email address, student information, transaction identifiers, or other information stored with the original record.

We may retain this information when needed to preserve transaction and accounting history, operate organization programs, maintain organizational records, prevent fraud or misuse, resolve disputes, or comply with applicable obligations.

Deleting an account does not automatically:

  • cancel an order;
  • cancel a registration;
  • cancel a volunteer commitment;
  • cancel a pending payment; or
  • issue a refund.

Information previously exported, downloaded, emailed, or otherwise received by an organization or another recipient may also remain in that recipient's possession.

Data Retention

Different types of information are retained for different periods depending on the purpose for which the information is used.

Some temporary information has specific automated expiration or cleanup periods. Other organizational and transactional records do not currently have a single platform-wide automatic deletion period.

Big Nest may retain information for as long as reasonably necessary to:

  • provide the service;
  • preserve transaction, accounting, and organizational history;
  • maintain security and prevent fraud;
  • resolve disputes;
  • meet operational or contractual needs; and
  • comply with applicable legal obligations.

Big Nest also maintains system backups. Information removed from active systems may remain for a period of time in existing backups until those backups are replaced or deleted through normal backup processes.

Children and Teen Users

Big Nest is used by schools, parent organizations, families, booster groups, and other school-support organizations and may process information about students and children as part of services such as program registration, family records, fundraising, ticket sales, volunteering, and school activities.

Big Nest accounts are intended for users age 13 or older. Children under 13 should not create or independently use a Big Nest account.

Organizations using Big Nest determine which eligible users may act on their behalf and what permissions those users should receive. For example, a high school or booster organization may authorize a student age 13 or older to use seller features for activities such as ticket, merchandise, or fundraising sales.

Big Nest may also process information about students who do not have Big Nest accounts. This information may be provided by parents, guardians, or authorized organization personnel and may include information such as a student's name, grade, teacher, emergency contacts, pickup information, program participation, or other information needed to provide the organization's services.

If you believe a child under 13 has created a Big Nest account, please contact us.

Your Choices

Depending on the service or feature, you may be able to:

  • view or update account information;
  • change communication preferences;
  • unsubscribe from certain community or marketing communications;
  • choose whether to provide optional information;
  • change family-directory participation settings; and
  • permanently delete your Big Nest account.

Some transactional, security, legal, or organizational communications may still be sent when necessary to provide a service you requested or administer an existing transaction.

Security

Big Nest uses technical and organizational measures intended to protect information processed through the service.

Depending on the feature, these measures include:

  • encrypted network connections;
  • Firebase Authentication;
  • application authorization controls;
  • Firestore access rules;
  • server-side authorization checks;
  • Stripe-hosted or Stripe-mediated payment credential collection; and
  • other security and abuse-prevention controls.

No method of transmitting or storing information is completely secure, and Big Nest cannot guarantee absolute security.

You are responsible for protecting your account credentials and signing out of shared devices.

Third-Party Websites and Services

Big Nest websites may contain links to websites or services operated by third parties.

This Privacy Policy applies to Big Nest's handling of information. Third-party services have their own privacy practices, and we encourage you to review those policies when using those services.

Changes to This Privacy Policy

Big Nest may update this Privacy Policy as the service changes.

When we make changes, we will update the Last revised date at the top of this page. If a change is material, we may provide additional notice when appropriate.

Contact Us

If you have questions about this Privacy Policy, your information, or account deletion, contact:

Big Nest
A trade name of Building Block Labs, LLC
privacy@big-nest.com