Your privacy matters to us.

1. Who we are

SmartIEP ("we," "us," or "our") is an AI-assisted IEP drafting tool operated at smartiep.co. We are not a school, district, or educational agency. We provide a software tool to help special education professionals draft IEP documents.

2. What information we collect

Account information: When you create an account, we collect your name and email address. This is used solely to authenticate you and associate your data with your account.

Student data you enter: When you use SmartIEP, you may enter information about students including names, dates of birth, disability categories, assessment data, and parent/guardian contact information. This data is stored securely and is only accessible to you.

Usage data: We collect basic usage information such as the number of IEPs generated, to help us improve the service and manage rate limits. We do not track your behavior across other websites.

3. How we use your information

• To authenticate you and provide access to your account
• To generate IEP drafts using the student information you provide
• To store your student records so you can access them across sessions
• To enforce usage limits and prevent abuse of the service
• To communicate with you about your account (e.g., password resets)

We do not use your data or student data to train AI models. The student information you enter is sent to Anthropic's Claude API solely to generate the IEP draft you requested, and is not retained by Anthropic for training purposes under their API terms.

4. How we store and protect your data

Your data is stored in Supabase, a secure cloud database platform with enterprise-grade encryption at rest and in transit. Each user's data is isolated — row-level security policies ensure that no user can access another user's student records.

We use Supabase Auth for authentication, which means your password is never stored in plain text and is managed by Supabase's secure authentication system.

5. Who we share data with

We do not sell, rent, or share your personal data or student data with third parties for marketing purposes. We share data only with the following service providers who help us operate SmartIEP:

• Supabase — database and authentication hosting
• Anthropic — AI model provider (receives student data only to generate the requested IEP draft)
• Vercel — application hosting and content delivery

Each of these providers is bound by their own privacy policies and data processing agreements.

6. FERPA and student education records

The Family Educational Rights and Privacy Act (FERPA) protects the privacy of student education records. SmartIEP is a tool used by educators and is not itself an educational agency subject to FERPA. However, we take the privacy of student information seriously.

If you are entering student information into SmartIEP, you are responsible for ensuring that your use of this tool complies with your school or district's FERPA obligations and data privacy policies. We recommend using initials or pseudonyms for students wherever possible. See our FERPA Notice for more information.

7. Your rights and choices

You have the right to:

• Access the data associated with your account at any time
• Delete individual student records from within the app
• Request deletion of your entire account and all associated data by emailing us
• Export your data (IEP documents can be exported from within the app)

To request account deletion or a copy of your data, email us at privacy@smartiep.co. We will respond within 30 days.

8. Cookies

We use only essential cookies required for authentication and session management. We do not use advertising or tracking cookies. See our Cookie Policy for details.

9. Children's privacy

SmartIEP is designed for use by adults (educators and administrators). We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the site. Your continued use of SmartIEP after changes are posted constitutes your acceptance of the updated policy.