Privacy Policy
RosterFlow ("we," "us," the "Extension") is a browser extension, a Cazuz product, that helps school staff build NWEA MAP Growth testing rosters from their school's student information system. This policy explains what data the Extension accesses, what happens to it, and what — if anything — we ever see.
What the Extension accesses
When you use RosterFlow, it reads data from your school's student information system that you are already authorized to access — student names, ID numbers, grade levels, class/section assignments, campus, and nationality codes — for the purpose of building a properly formatted MAP roster file.
Where that data goes
- Processing: Entirely inside your browser, on your device.
- Storage: Saved locally via your browser's extension storage (
chrome.storage.local) so your settings and in-progress roster persist between sessions. This data stays on your device. - Export: The finished roster file is saved directly to your computer's Downloads folder using your browser's native download feature.
- Transmission: At no point is student data uploaded, transmitted, or sent to RosterFlow, Cazuz, or any third-party server. There is no student-data backend — none exists.
What we do receive
To enforce software licensing (so a purchased license works on an authorized number of devices and can be managed by the school), the Extension communicates with our license server (hosted on Supabase) to check:
- Your license key's identifier
- A randomly generated identifier for your device (not tied to your identity or your students)
This exchange contains no student information, no names, and no personally identifiable data about anyone other than confirming a license is valid.
Support requests
If you voluntarily submit a message through the in-app support form, we collect your name, email address, and message content (plus your license key and app version, to help us assist you) so we can respond. This information is stored securely and used only to handle your request — never for marketing, and never shared with third parties.
Third parties
We use Supabase, Inc. as our database and backend infrastructure provider for license verification and support requests only. Supabase does not have access to any student data, because none is ever sent to it.
Children's data
RosterFlow is a tool operated by school staff — teachers and administrators — not by students. We do not collect data directly from children, and the Extension has no interaction with students at all. Your school remains the data controller for its own student records at all times; RosterFlow simply reformats data your school already holds, entirely on the device of the staff member using it.
Data retention
Because student data is never transmitted to or stored by us, we have nothing to retain and nothing to delete on your behalf — it lives only in your browser's local storage until you clear it or uninstall the Extension. License and support-request data is retained only as long as needed to provide the service.
Security
License checks use encrypted (HTTPS) connections. Local data is sandboxed by your browser's extension storage, isolated from other sites and extensions.
Changes to this policy
If this policy changes, we'll update the effective date above. Continued use of the Extension after a change means you accept the update.
Contact
Questions about this policy? Use our support form, or reach out through Cazuz's official contact channels.