Privacy Policy

NextArc Learning LLC (“NextArc,” “we,” “us,” or “our”) operates the NextArc STEM Learning website at nextarclearning.com and the NextArc AI study tool. This policy explains what information we collect, how we use it, who we share it with, and the rights you have over your information.

What we collect

When you enroll a student, join a waitlist, or send us a message through the website, we collect the information you provide on the form: parent or guardian name, parent email address, optional parent phone number, student first and last name, student grade level, and any message text or referral information you choose to include. We do not collect payment information through this site; payment is handled separately by a third-party processor (Stripe) once your enrollment is confirmed.

When you use NextArc AI, the study tool stores your quiz progress (XP, mastery levels, attempted questions, badges, and theme preference) entirely in your browser’s local storage. None of this progress data is transmitted to NextArc’s servers.

How we use it

We use the information you submit to confirm enrollment, communicate program details, send daily parent updates during the program, respond to your questions, and improve the NextArc experience. We do not sell your data, and we do not share it with third parties for advertising or marketing purposes.

Cookies and local storage

NextArc does not set tracking cookies and does not use third-party analytics or advertising trackers. We use your browser’s local storage for two limited purposes: (1) to remember your light/dark theme preference, and (2) to store your NextArc AI quiz progress on the device you use. You can clear this data at any time through your browser’s site-data controls; doing so will reset your theme preference and quiz progress.

Service providers we use

We rely on a small set of service providers to operate the site. Each receives only the information necessary to perform its function.

• Netlify: hosts the website and processes form submissions on our behalf. Form submissions are transmitted to Netlify over HTTPS and forwarded to our team email.
• Stripe: processes payments when enrollment is confirmed. Stripe collects payment-card information directly; NextArc never stores card numbers.
• Google reCAPTCHA: protects our forms from automated abuse. reCAPTCHA receives your IP address and limited browser metadata to score whether a submission is automated.
• Google Fonts, jsDelivr, unpkg: serve fonts and front-end libraries used by the site. These providers see your IP address when their content is requested.

Children’s privacy and parental consent

NextArc programs are directed at students in grades 6 through 11, which corresponds to ages 11 through 17. We design our enrollment process so that personal information is collected only from a parent or legal guardian, not directly from a student. When you submit any enrollment, waitlist, or contact form, you confirm by checking the parental-attestation box that you are a parent or legal guardian and that you are at least 18 years old.

NextArc AI, our practice and study tool, is gated behind a separate parental-consent screen for any visitor who indicates they are under 13. If a visitor is under 13, NextArc AI will not store progress data on the device until a parent has provided consent. Local progress data stored under parental consent stays on the student’s device and is never transmitted to NextArc.

We comply with the U.S. Children’s Online Privacy Protection Act (COPPA). If you believe we have inadvertently collected personal information from a child under 13 without verifiable parental consent, please contact us at contact@nextarclearning.com and we will delete that information promptly.

Educational records (FERPA)

When NextArc partners with a school or school district, any student information we receive from the school is handled as a “school official” under the federal Family Educational Rights and Privacy Act (FERPA), used only for the educational purpose for which it was shared, and not redisclosed without the school’s authorization or as required by law. NextArc does not maintain education records on its own behalf; records belong to the school or to the family.

Data security

Form submissions are transmitted over HTTPS. We rely on Netlify’s production security controls for the website and form-handling layer, and we limit internal access to enrollment data to team members who need it to operate the program. No system is perfectly secure; in the unlikely event of a security incident that affects your personal information, we will notify affected individuals as required by applicable state law.

Retention and deletion

We retain enrollment records for up to two years after program completion, and we retain waitlist and contact-form submissions for up to one year. You can request access to, correction of, or deletion of your information at any time by emailing contact@nextarclearning.com. We will respond within 30 days, or within the shorter period required by your state of residence.

Your rights under state law

Depending on where you live, you may have one or more of the following rights with respect to the personal information NextArc holds about you and your student:

• The right to know what categories of personal information we collect and how we use them.
• The right to access a copy of the personal information we hold about you.
• The right to correct inaccurate personal information.
• The right to delete your personal information, subject to limited exceptions (e.g., to complete a transaction or comply with law).
• The right to opt out of the sale or sharing of personal information for cross-context behavioral advertising. NextArc does not sell or share personal information for these purposes, so this opt-out applies by default.
• The right to limit our use of sensitive personal information. We do not use sensitive personal information for any purpose other than performing the services you requested.
• The right not to be discriminated against for exercising any of these rights.

These rights are recognized in some form by the privacy laws of California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Florida (FDBR), Montana (MTCDPA), Delaware (DPDPA), Iowa (ICDPA), Indiana (INCDPA), Tennessee (TIPA), New Jersey (NJDPA), New Hampshire (NHPA), Kentucky (KCDPA), Minnesota (MCDPA), Maryland (MODPA), Nebraska (NDPA), and Rhode Island (RIDTPPA). The specific scope of each right depends on your state and your relationship to NextArc. To exercise any of these rights, email contact@nextarclearning.com. We may need to verify your identity before responding. You may designate an authorized agent to submit a request on your behalf; we will require written authorization signed by you.

North Carolina residents

NextArc is based in North Carolina, and our privacy practices comply with North Carolina law, including the Identity Theft Protection Act (N.C.G.S. § 75-60 et seq.). In the event of a security breach involving your unencrypted personal information, we will notify affected individuals in accordance with N.C.G.S. § 75-65 and will notify the North Carolina Attorney General’s Consumer Protection Division when required by law. North Carolina residents may contact us at contact@nextarclearning.com to access, correct, or request deletion of their information.

Do Not Sell or Share My Personal Information

NextArc does not sell personal information and does not share personal information for cross-context behavioral advertising. There is therefore no opt-out mechanism to enable; the opt-out applies by default. We do not respond to Global Privacy Control signals at this time because the underlying practice (no sale, no sharing) is already aligned with the signal’s purpose.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, when appropriate, notify enrolled families by email. Earlier versions of this policy are available on request.

• May 26, 2026: added cookie/local-storage disclosure, enumerated service providers, expanded children’s-privacy section with explicit parental-consent flow for NextArc AI, added multi-state rights section, added FERPA disclosure, moved policy to a canonical URL.
• May 1, 2026: initial publication.

Contact

Questions about this policy, or want to exercise any of the rights described above? Email contact@nextarclearning.com. We aim to respond within two business days.

NextArc Learning LLC · Charlotte, NC