ArcAngel CRM
This notice is for parents and guardians, and for the organizations that serve them. It is a plain-language companion to our Privacy Policy, which applies in full.
Families come into non-profit programs together. A child’s record in ArcAngel CRM exists because their family is receiving help — shelter, housing, food, case management — and because the organization providing that help has to keep track of who it is serving. We have written this notice to say exactly what is held about a child and who can see it.
ArcAngel CRM is not directed to children and is not a service a child can join. There is no public sign-up, no messaging between users, no social features, and nothing for a child to browse. A child’s information appears in the Service only because an Organization — the non-profit serving the family — entered it as part of the family’s record, under its own authority and with whatever consent its programs and the law require.
An Organization may give an older minor portal access to their own information. That is the Organization’s decision, made for that young person, not something a minor can request from us.
Only what the Organization records in order to serve the family. In practice that is usually:
We never require or use a child’s Social Security number. An Organization records one only when its own circumstances call for it, such as a funder, a benefits program, or a law that applies to it. That is the Organization’s decision, and it can explain why. If a number is recorded, it is encrypted, appears on every screen only as its last four digits, and is never searched or exported. Only a staff member the Organization has specifically permitted can see the full number, and they must give a reason each time; every such view is recorded. ArcAngel personnel and anyone outside the Organization never see it. We collect nothing from a child directly, nothing about a child’s online activity, and no location data.
A child’s information is never sold, rented, shared with advertisers, used to build a profile, used to train artificial intelligence models, or used for any purpose other than the Organization’s program. It is never shared with another organization using ArcAngel CRM. It is never used to contact a child for marketing of any kind.
A child’s date of birth, telephone number, and address are encrypted field-by-field before they reach our database, and every uploaded document is encrypted, so they are unreadable to anyone who obtained raw database access or a stolen backup. Names, case notes, and all other sensitive child records are encrypted at rest field-by-field before reaching our database, ensuring they remain unreadable in the event of unauthorized database access or backup theft. Records are separated by organization so that one cannot reach another’s, sensitive actions are logged, and all traffic is encrypted in transit.
A parent or guardian may see what is held about their child, ask for it to be corrected, ask for a copy, or ask for it to be deleted. The right place to ask is the Organization serving the family: it holds the record and is the party that can change it, and it can also explain whether a funder requires a record to be kept for a period of time. A parent or guardian may also decline to have particular information recorded — the Organization can explain what that means for the services it can provide.
If you cannot reach the Organization — for example, because it has closed — contact us at info@arcangelts.com. We will do what we can within our role as a processor acting on the Organization’s instructions.
The Children’s Online Privacy Protection Act (COPPA) governs online services directed to children under 13 and services that knowingly collect information from them online. ArcAngel CRM is neither: information about children is provided by the Organization, not collected from the child. We nonetheless apply COPPA’s substance — no advertising, no profiling, no secondary use, parental access and deletion on request — because it is the right standard for records about children, whatever the statute technically requires.
Organizations remain responsible for the consents, notices, and record-retention obligations that apply to their own programs and funders.
Questions about a child’s information: info@arcangelts.com, or the organization serving your family.
Questions about this document? Contact
info@arcangelts.com.
ArcAngel Technical Services, LLC