This Privacy Policy explains how S.S. Education (“S.S. Education,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the S.S. Education platform and related websites (the “Platform” or “Services”).
S.S. Education is a California sole proprietorship doing business as S.S. Education (DBA).
S.S. Education helps parents and caregivers understand school documents and prepare for conversations with their child’s school. The Platform provides educational information, document summaries, suggested questions, and planning support. It does not replace legal advice, medical advice, clinical diagnosis, or decisions by a student’s IEP or 504 team. S.S. Education is a software service provider—not a school, educational agency, attorney, advocate, clinician, or healthcare provider.
By using the Platform, you agree to this Privacy Policy and our Terms and Conditions.
1. Who This Policy Covers
The Platform is designed for parents, guardians, and caregivers (sometimes called “self-advocates”) who create an account to understand their child’s IEP, 504 plan, evaluations, and related school materials.
The Platform is not directed to children for independent use. Adults may upload information about their child as described below.
2. Information We Collect
We may collect:
- Account information — name, email address, authentication identifiers, and similar account details. If paid features are offered later, we may collect billing-related information through our payment processors.
- Child and school documents you choose to provide — IEPs, 504 plans, evaluations, progress reports, meeting notes, letters, and other records you upload or enter, and information you add about your child (such as name, grade, or school).
- Workspace content — notes, questions, chat messages, meeting prep materials, letter drafts, and other content you create in the Platform.
- Generated outputs — AI-assisted summaries, suggested questions, planning support, and similar outputs created from the materials you provide.
- Technical and usage data — IP address, device and browser type, approximate location derived from IP, timestamps, diagnostic logs, cookies or similar technologies, and product analytics.
We treat IEPs, 504 plans, evaluations, disability-related information, and related school documents as sensitive information.
3. Educational Records, FERPA, and HIPAA
FERPA
S.S. Education is not a school or educational agency and does not act as a “school official” under the Family Educational Rights and Privacy Act (“FERPA”).
Parents often receive copies of their child’s school records and may choose to upload them. Those materials can still contain highly sensitive education information. We use uploaded documents to provide the requested analysis and support, as described in this Policy.
You represent that you have authority to upload the documents and information you provide (for example, as a parent or legal guardian of the child).
HIPAA
S.S. Education is generally not a HIPAA “covered entity” or “business associate” simply because parents upload school records that may include health-related information. We do not claim to be “HIPAA compliant.”
We still protect sensitive documents with practical privacy and security measures described in this Policy.
4. How We Use Information
We use information to:
- provide, operate, secure, and improve the Platform;
- generate AI-assisted educational information, summaries, suggested questions, and planning support based on the documents you provide;
- authenticate users and help prevent fraud or abuse;
- communicate about the Services, security issues, or policy updates;
- respond to support requests;
- comply with law and enforce our agreements; and
- create aggregated and/or de-identified information for analytics, product improvement, research, and other lawful commercial uses described below.
We do not use uploaded student documents for advertising targeting.
5. Artificial Intelligence (AI)
The Platform uses artificial intelligence and related automated systems to analyze materials you provide and generate plain-language explanations, suggested questions, possible next steps, and similar outputs.
- Providing these features may involve sending portions of your content to third-party AI service providers that run model inference on our behalf.
- We select and may change those providers over time. This Policy does not list specific AI vendors, and we do not commit to a fixed public vendor list.
- We intend to limit AI processing to what is needed to operate the Services and to require appropriate confidentiality and security commitments from providers that process content for us.
- AI outputs can be inaccurate, incomplete, or misleading. They are educational information—not legal, medical, clinical, or diagnostic advice—and should be reviewed before you rely on them or share them with a school.
6. How We Share Information
We may share information with:
- Service providers (vendors / subprocessors) that help us operate the Platform—such as hosting, storage, email delivery, analytics, security monitoring, customer support tools, payment processing (if applicable), and AI inference providers—under contracts that require appropriate confidentiality and security.
- People you choose — for example, if you export, download, copy, or share content yourself.
- Authorities when we believe disclosure is required by law, legal process, or governmental request, or to protect the rights, safety, and security of users or the public.
- Business transfers in connection with a merger, acquisition, financing, or sale of assets, with appropriate confidentiality protections.
What we do not sell
We do not sell parent or child identifying information.
We do not sell, rent, or disclose raw IEPs, 504 plans, evaluations, or other uploaded student documents for advertising or for others to market to you.
We do not “sell” or “share” personal information for cross-context behavioral advertising as those terms are defined under California law.
Aggregated and de-identified information
We may create information that is aggregated (combined so it describes groups) and/or de-identified (stripped of details reasonably likely to identify a person, household, or student).
We may use, license, or sell that aggregated and/or de-identified information—for example, for research, product improvement, or other commercial purposes—provided it cannot reasonably be used to identify you or your child.
We will not attempt to re-identify individuals from de-identified datasets we create for these purposes, and we will require recipients of such datasets to agree not to attempt re-identification.
Important: “De-identified” is not the same as “anonymous.” If information can reasonably be linked back to a person, we treat it as personal information under this Policy.
7. Data Retention and Deletion
While your account is active. We retain account information, uploaded documents, and workspace content so you can use the Services.
If you delete your account or ask us to delete your personal information. We aim to delete or de-identify associated personal information from active production systems within 30 days after we verify your request, unless we need to keep something longer to comply with law, resolve a dispute, or protect security.
Backups. Residual copies may remain in encrypted backups for up to 90 days, then are removed on a rolling backup schedule.
Security and operational logs. We may retain technical logs (which may include IP address and similar metadata) for up to 12 months for security, abuse prevention, and troubleshooting, then delete or aggregate them.
Legal holds. If we receive a legal demand or need records for an active dispute, we may retain relevant information longer as required.
Aggregated / de-identified information. We may keep aggregated or de-identified information that no longer identifies you or your child, including after account deletion.
8. Security
We implement commercially reasonable technical and organizational measures designed to protect information, and we limit access to sensitive documents to authorized personnel and service providers who need access to operate the service.
No method of transmission or storage is completely secure. Online services always carry some residual risk.
9. Your Choices and Rights
Depending on where you live, you may have rights to:
- access, correct, or delete certain personal information;
- object to or restrict certain processing;
- withdraw consent where processing is based on consent; and
- lodge a complaint with a supervisory authority.
California residents: If the California Consumer Privacy Act (“CCPA”) / California Privacy Rights Act (“CPRA”) applies, you may have additional rights regarding personal information—including rights to know, delete, and correct, and to limit use of sensitive personal information—subject to legal exceptions.
To exercise rights, email us using the contact information below with “Privacy Request” in the subject line. We may need to verify your request.
10. Cookies and Analytics
We may use cookies, local storage, and similar technologies for authentication, preferences, security, and aggregated product analytics.
You can control many cookies through your browser settings. Disabling some cookies may affect Platform features.
11. International Users
If you access the Platform from outside the United States, you understand that information may be processed in the United States or other places where we or our service providers operate. Those locations may have different data-protection laws.
12. Children’s Privacy
The Platform is for adults. Children should not create accounts or use the Platform independently.
Parents and caregivers may upload information about their child to use the Services. If you believe a child has created an account or submitted information to us without appropriate adult authority, contact us and we will take reasonable steps to delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the revised policy with an updated effective date and, when appropriate, provide additional notice (such as an in-product notice or email).
14. Contact
S.S. Education
California sole proprietorship, DBA S.S. Education
Email: info@ss-education.com
Website: https://www.ss-education.com
For privacy requests, email us with “Privacy Request” in the subject line and enough detail for us to evaluate and respond. A mailing address for formal legal notices is available on request.