Privacy Policy
Last Updated: 01/02/2025
1. Introduction
This Privacy Policy ("Policy") outlines how SpedTree, operated by Slpbox, Inc., a Delaware corporation ("we," "our," "us," or "the Company"), collects, uses, discloses, and protects your personal information when you access or use SpedTree's website, applications, and services (collectively, "Services"). By using our Services, you consent to the practices described in this Policy. We are dedicated to upholding the highest industry standards to safeguard the privacy and security of our users, including students and special education professionals.
Please note that our Services are intended for use by special education professionals and educational institutions, and we comply with relevant federal privacy laws, including the Family Educational Rights and Privacy Act (FERPA) and the Children’s Online Privacy Protection Act (COPPA).
2. Information We Collect and How We Store It
We collect various types of information to provide and improve our Service. The information we collect includes:
- Account Information: When you create an account with us, we collect your name, email address, password, school name, district, occupation, and role.
- Student Data: We collect student information provided by special education professionals, which may include student names, grades, gender, age, school, date of birth, and other student performance data. We collect only the minimum amount of information necessary to provide our Service. Special education professionals use this data to track student progress, update goals, and support educational development.
- Data Added by Users: We collect any data or content that you, as a user, submit or upload while using our Service.
- Technical Data: We collect technical data, including your IP address, browser type, device information, and operating system, to improve our Service and ensure compatibility with various devices.
- Analytics Information (Website): We may collect analytics data or use third-party analytics tools such as Google Analytics to help us measure traffic and usage trends for the Service and understand more about the demographics of our users.
- Data Storage: We store all collected data on servers located in the United States. We take appropriate measures to ensure the security and confidentiality of your information while it is stored and processed. Our data storage practices comply with relevant privacy and security regulations to protect your data from unauthorized access, loss, or misuse.
3. How We Use Your Information
We use the information we collect for the following purposes:
- To provide and enhance our Service: We use your information to deliver and improve our platform, including customizing the user experience to better suit your needs.
- To manage user accounts and authentication: We process your information to support user account creation, authentication, and manage role-based access controls, ensuring that the appropriate users have access to the right features and information.
- To analyze usage and improve user experience: We analyze how you interact with our Service to identify usage patterns, optimize features, and continuously improve the overall user experience.
- To communicate with you: We use your information to communicate with you regarding your account, provide customer support, and inform you about updates or changes to our Service.
- To maintain security and prevent fraud: We process your information to ensure the security of our Service, detect potential security threats, and prevent fraud or unauthorized access to your account.
- To comply with legal obligations: We may use your information to comply with applicable laws, respond to lawful requests from authorities, and fulfill our legal obligations.
4. Information Sharing and Disclosure
We do not sell or rent your personal information to third parties. However, we may share your information in the following circumstances:
- Legal Compliance: We may disclose your information if required by law, such as in response to a subpoena, court order, or government request.
- Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
You may request the deletion of your account and personal information by emailing us at privacy@spedtree.com. For students, parents or guardians may request the deletion of their child's personal information by contacting the student's educational institution or us directly.
5. Security
We employ industry-standard security measures to protect your personal information, including encryption, hashing, and salting. We regularly review and update our security practices to address evolving threats and vulnerabilities.
6. Access and Control
Parents or guardians have the right to review their child's personal information collected by our Service, correct any inaccuracies, and request the deletion of information that violates privacy laws. To exercise these rights, please contact us at privacy@spedtree.com or the student's educational institution.
7. Third-Party Vendors
We do not sell, trade, or otherwise share your personal information with third parties, except as described below:
We partner with select third-party vendors, including Render, Stripe, Auth0, and OpenAI, to enhance our service offerings and infrastructure. These vendors may receive limited personal information necessary to provide essential services, such as cloud hosting, database management, user authentication, user management, and AI-driven features. We carefully evaluate these vendors to ensure they meet our stringent data protection and privacy standards, minimizing any risks associated with data handling.
Your personal information is shared strictly for operational purposes and in compliance with safeguarding user privacy. Additionally, we ensure that OpenAI does not use any personally identifiable information, conversations, completions, inferences, or any other data in their model training.
8. Changes to This Privacy Policy
We may update our Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. We will notify you of any material changes by posting the updated policy on our website, and we encourage you to review it periodically.
9. Compliance with Student Privacy Laws
We adhere to applicable federal student privacy laws, including the Family Educational Rights and Privacy Act (FERPA) and the Children’s Online Privacy Protection Act (COPPA). We have implemented measures to ensure compliance with these laws, as outlined in our engineering specifications. If you believe we have not complied with these laws, please contact us at privacy@spedtree.com.
10. California Privacy Rights
If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA), including the right to access, delete, and opt-out of the sale of your personal information. Since we do not sell your personal information, the right to opt-out of the sale does not apply. To exercise your right to access or delete your personal information.
11. Age Restrictions
Our Service is intended for use by educational institutions and special education professionals. If we become aware that we have collected personal information from a child under the age of 13 without verifiable parental consent, we will take steps to delete that information promptly.
12. Third-Party Links
Our Service may contain links to third-party websites, products, or services. We are not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies before providing them with your personal information.
13. Control Over Your Information & Data Added by Users
- Profile Updates: If you need to update or correct your personal information, please update it directly through your account settings.
- Communication Preferences: You may opt out of receiving promotional emails from us by clicking the “unsubscribe” link included in such communications. We make every effort to process all unsubscribe requests promptly. However, please note that you cannot opt out of service-related communications (e.g., user invitations, account verification, transactional communications, changes to Service features, or technical/security notices).
- Deleting Your Data: If you wish to delete your data, you have full control over your student records. You can delete all your student-related information from the platform directly. If you need assistance with data deletion, please contact us at support@spedtree.com.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, your personal data, or our data practices, you can contact us using the information below:
Copyright © Slpbox, Inc. 2025
