Privacy Policy

We reduce exposure by masking detected identifiers in uploaded IEPs and limiting access to account content. Masking can miss information. Masked records remain associated with a parent's account and are treated as personal information, which may include sensitive health information.

We collect your account email and login identifiers; the IEP and supporting material you submit; questions, answers, and observations; whether the child is 16 or older or will turn 16 during the IEP; purchase and referral records; and technical information including the IP address and browser type recorded when a chat answer is delivered. We do not request a separate child name field. Names and other identifiers may nevertheless appear in uploads or typed material. Stripe collects card details directly; IEPIQ receives payment references and purchase information, not your full card number. We use these categories to provide and support the requested service, secure accounts, process purchases, and meet applicable recordkeeping duties.

Amazon Textract extracts text from the uploaded file. Amazon Comprehend and our detection rules then replace detected identifiers with placeholders. Automated masking can miss names or other identifying details. After successful processing we delete the original file from active file storage. A failed upload can remain for about one to two days; Textract extraction results remain for seven days. Masked IEP text, generated results, and typed questions and observations are stored with your account. Typed material is not currently masked. Do not include unnecessary identifiers in questions or observations. Backups and snapshots can retain copies as described below.

We use Amazon Web Services for file storage, text extraction, identifier detection, model hosting through Amazon Bedrock, databases, authentication, email, and hosting. AWS receives raw files and text before masking; Bedrock receives masked IEP text and unmasked typed questions and observations. AWS processes this information to provide those services under the applicable service terms. IEPIQ has enabled the organization-level setting that opts out of supported AWS AI service content use for service improvement. Anthropic supplies the Claude models through Bedrock; with our configuration, prompts and outputs are not made available to Anthropic. Core hosting is in Northern Virginia, but chat and glossary processing may occur in other AWS commercial regions, including outside the United States. Stripe receives email, an internal account identifier, and purchase details for payments. Referral partners receive no child or IEP content. We do not use advertising pixels or sell personal information or consumer health data. We may disclose information when legally required and retain records reasonably necessary for accounting, security, or legal obligations.

Your IEP content, results, typed material, and account information currently remain in active systems until you delete the IEP or account; there is no automatic inactivity deletion or review expiry today. Account deletion removes active account content and the login, subject to failed deletion cleanup. Purchase and referral records remain with the account link removed, but Stripe references can still permit matching. Stripe retains its own customer and checkout records under its policy. Rolling database backups remain for 14 days. Manual snapshots currently have no automatic expiry, and a hashed account deletion record is retained without a fixed end date. Some job and delivery records survive deletion of an individual IEP. Deletion is therefore not instantaneous removal from every system. Contact admin@mindforgeiq.com if deletion fails or to request deletion of remaining personal information, subject to applicable legal exceptions.

You can view information in your account and use Settings to request account deletion. There is no automatic data export tool today. For access, a copy, correction, deletion, withdrawal of consent, or an appeal of our response, email admin@mindforgeiq.com. We will verify identity and authority proportionately and respond within applicable legal time limits. Availability of a legal right depends on applicable law; we also accept these requests through this mailbox. For a child's information, the request must come from a person authorized to act for the child or from the individual holding the rights. Consumer health data notice: IEPs and typed material may reveal disabilities, diagnoses, services, or other health information. We obtain that information from you and generate review results from it for the requested service. The categories, purposes, processing providers, retention limits, and rights described above apply to that health data. We do not sell it or provide it to referral partners.

Privacy questions and rights requests: admin@mindforgeiq.com. This service is intended for adults acting with authority over the submitted records. We do not invite children to create accounts. We will notify affected people and authorities of a security incident when applicable law requires. We will publish an effective date and provide notice of material policy changes before they apply; any new purpose requiring consent will require that consent first. We do not use account content for advertising across other services. Our service does not use browsing information to track you across other websites; a Do Not Track signal does not change the processing needed to provide the service. Stripe's payment page is governed by its own notices and settings.