Privacy Policy

Last Updated: May 21, 2026

At The Advocate Ally ("we," "our," or "us"), protecting your privacy and the sensitive educational data of your child is our highest priority. This Privacy Policy outlines how we collect, use, secure, and disclose information when you access our website, applications, and forensic auditing services (collectively, the "Services").

1. Information We Collect

We collect information to provide our forensic auditing services and improve user experience. This includes:

  • Personal Information: Name, email address, and account credentials provided during registration.
  • Educator and Institution Information: Role, school or district affiliation, pilot-request details, and communications submitted by teachers, administrators, or institutional contacts.
  • Student Data: Information contained within Individualized Education Programs (IEPs) or 504 Plans uploaded to our system. This may include student names, birth dates, disability classifications, and educational history. We strongly recommend redacting personally identifiable information (PII) before upload.
  • Usage Data: Information about how you interact with our Services, including device information, IP addresses, and browser type, collected via cookies and analytics tools.

2. How We Use Your Information

We use your information strictly for the following purposes:

  • Service Provision: To process uploaded documents, generate forensic audit reports, and provide advocacy insights.
  • Communication: To send audit results, service updates, security alerts, and support messages.
  • Improvement: To analyze usage patterns and improve our review tools using de-identified or aggregated data where permitted.
  • Compliance: To enforce our Terms of Service and comply with legal obligations.

3. Data Protection & Security

We implement industry-standard security measures to protect your data, including encryption at rest and in transit (TLS/SSL). Our infrastructure is built on Google Firebase, which adheres to strict security standards including ISO 27001 and SOC 2.

While we strive to use commercially acceptable means to protect your Personal Information, no method of transmission over the Internet is 100% secure.

4. Data Sharing & Disclosure

We do not sell your personal data or your child's data. We may share information only in the following limited circumstances:

  • Service Providers: With trusted third-party vendors (e.g., cloud hosting, AI processing, payment processors) who assist in operating our Services and are bound by confidentiality agreements.
  • Legal Requirements: If required by law, subpoena, or legal process.
  • Business Transfers: In connection with a merger, sale of assets, or bankruptcy, provided the receiving party agrees to privacy terms substantially similar to these.

5. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or restrict the processing of your personal data. To exercise these rights, please contact us at privacy@theadvocateally.com.

6. Children's Privacy

Our Services are intended for use by parents, guardians, and advocates, not by children under 13. We do not knowingly collect personal information directly from children under 13. If you believe we have inadvertently collected such information, please contact us immediately for deletion.

7. School and Educator Use

Teachers, school staff, and institutional users may access the Services only for authorized professional purposes and only with records they are permitted to use. If an educational agency or institution provides student records to us, the applicable written agreement, district policy, and legal requirements govern that use in addition to this Privacy Policy.

We do not sell student data, use identifiable student data submitted for school or educator use for targeted advertising, or use that data for unrelated commercial profiling. Institutional users should not direct students to create accounts, submit records, or use a student-facing workflow unless The Advocate Ally has expressly approved that deployment and the required notices, permissions, and agreements are in place.

Schools or authorized users may contact privacy@theadvocateally.com to request access, correction, deletion, or agreement-specific information about student data processed through an institutional use case.

8. SMS Communications

By providing your phone number during the audit upload process and opting in to text notifications, you consent to receive SMS messages from The Advocate Ally at the number provided. These messages include:

  • Audit completion notifications
  • Service updates and reminders
  • Strategy session booking confirmations

Message Frequency: Message frequency varies. You may receive 1 to 5 messages per month depending on your activity.

Message and Data Rates: Message and data rates may apply. Your carrier may charge for each text message received.

Opt-Out: You can opt out of SMS communications at any time by replying STOP to any message. You will receive a confirmation message and will no longer receive texts from us.

Help: For help, reply HELP to any message or contact us at support@theadvocateally.com.

No Sharing: We do not sell, rent, or share your phone number with third parties for marketing purposes. Phone numbers are used solely for delivering service-related notifications through our SMS provider (Twilio).

For more details on our SMS terms, see our Terms of Service.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.