Privacy Policy

What Little Archive Does

Little Archive is a web application that helps parents migrate their children's Seesaw school app photo exports into Google Photos. You upload a zip file exported from Seesaw, and Little Archive parses the photos, preserves the teacher's caption text as metadata, and uploads them to your Google Photos account.

What Data We Collect

Data You Provide

• Seesaw export files: You upload a zip archive containing photos, videos, and HTML files exported from the Seesaw app. These files may contain your child's name, teacher captions, and images of your child's schoolwork.
• Email address: We collect your email address when you sign up for early access or when you enter it during the migration flow. This is used to send your completion confirmation and occasional product updates (such as new features or supported platforms). You can unsubscribe from product updates at any time using the unsubscribe link in any email.
• Payment information: When you make a purchase, payment is processed by Stripe. We do not store your credit card number, bank account details, or other payment credentials. Stripe's handling of your payment data is governed by Stripe's Privacy Policy.

Data We Access Through Google

When you authorize Little Archive to connect to your Google Photos account, we request the following OAuth scopes:

• photoslibrary.appendonly — This allows Little Archive to upload new photos and create new albums in your Google Photos library. This scope does not allow us to modify or delete any existing photos or albums in your Google Photos account.

We also receive your Google account email address and basic profile information (name) as part of the OAuth authentication flow. This is used solely to authenticate your session.

Data We Collect Automatically

• Basic analytics: We use Plausible, a privacy-focused analytics tool, to understand how visitors use the site — for example, how many users reach each step of the upload process. Plausible does not use cookies and does not collect personally identifiable information. We do not use Google Analytics. We do not build advertising profiles or sell analytics data.

How We Use Your Data

We use your data for the following purposes only:

• To provide the service: Parsing your Seesaw export, processing photos with caption metadata, and uploading them to your Google Photos account.
• To process payment: Passing necessary transaction details to Stripe.
• To send transaction emails: Sending you a confirmation email after your upload is complete.
• To send product updates (opt-in only): If you choose to receive updates, we may email you about new features, supported platforms, or other product news. You can unsubscribe at any time.
• To improve the service: Aggregated, non-personal analytics help us understand where users encounter issues in the upload process.

We do not use your Google user data for any purpose other than providing the Little Archive service. Specifically, we do not:

• Sell, rent, or share your Google user data with third parties
• Use your Google user data for advertising, marketing profiles, or audience targeting
• Use your Google user data to train machine learning models
• Allow any third party to access your Google user data
• Use your data for any purpose not explicitly described in this policy

How We Store and Retain Your Data

• Seesaw export files and processed photos are stored on our servers only for the duration of processing. Once your photos have been successfully uploaded to Google Photos, all uploaded files and processed data are deleted immediately from our servers.
• If an upload fails or is abandoned, any temporarily stored files are deleted within 48 hours by an automated cleanup process, with a maximum retention of 7 days enforced by a storage lifecycle policy.
• We do not retain copies of your photos, your child's images, or any content from your Seesaw export after the upload is complete.
• Email address: Your email address is stored in our database (Google Cloud Firestore) and with our email delivery provider, Resend. We retain it to send your completion confirmation and occasional product updates. When payments are enabled, your email will also be associated with your transaction record in Stripe. To have your email removed, contact us at privacy@littlearchive.app — we will delete it from our database and request removal from Resend on your behalf.
• Google OAuth tokens are encrypted at rest using Google Cloud KMS symmetric encryption and stored in our database (Google Cloud Firestore) for the duration of your migration job. Tokens are deleted immediately upon job completion, failure, or expiration. We do not retain tokens after processing is finished.
• Payment records: Stripe retains transaction records in accordance with their data retention policies. We store only a transaction reference ID and the associated email address for customer support purposes.
• Analytics data does not include personally identifiable information and is retained in aggregate form.

Data Sharing

We share data only with the following third-party services, and only as necessary to provide the service:

We do not sell your data. We do not share your data with advertisers. We do not provide data to data brokers.

Data Security

We protect your data using the following measures:

• All data in transit is encrypted using HTTPS/TLS
• Uploaded files are stored in isolated, temporary Google Cloud Storage buckets that are purged after processing, with a 7-day lifecycle backstop
• Google OAuth tokens are encrypted at rest using Google Cloud KMS symmetric envelope encryption
• Google OAuth authentication uses industry-standard OAuth 2.0 protocols
• Access to server infrastructure is restricted to authorized personnel only

Your Rights and Choices

• Revoke access: You can revoke Little Archive's access to your Google account at any time by visiting your Google Account permissions page. Once revoked, Little Archive can no longer upload photos to your account.
• Unsubscribe from emails: Every product update email includes an unsubscribe link. Click it to stop receiving updates. You will still receive transaction-related emails for any future purchases.
• Delete your email: To have your email address removed from our records entirely, contact us at the address below and we will delete it from Resend.
• Delete your data: Since we do not retain your photos or export files after processing, there is no stored photo data to delete. If you have questions about any residual data, contact us and we will confirm deletion.
• Opt out of analytics: You can use a browser extension such as an ad blocker to prevent analytics scripts from loading.

Children's Privacy

Little Archive processes photos of children's schoolwork as uploaded by their parents or legal guardians. We do not knowingly collect personal information directly from children. The service is intended for use by adults (parents and guardians) only.

We do not use Google Sign-In or any Google API Service to collect data associated with children's Google accounts. All authentication is performed by the parent or guardian.

Google API Services User Data Policy

Little Archive's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Changes to This Policy

If we make material changes to this privacy policy, we will update the “Last Updated” date at the top of this page and notify affected users before applying any new data practices.

Contact

If you have questions about this privacy policy or how your data is handled:

Email: privacy@littlearchive.app
Website: https://littlearchive.app