Privacy Policy

Last Updated: January 23, 2026

1. Introduction

This Privacy Policy describes how Bridge IEP Planner ("Bridge," "we," "us," or "our") collects, uses, protects, and discloses information when you use our educational technology platform. We take student privacy extremely seriously and are committed to transparency in our data practices.

2. Information We Collect

2.1 User Account Information

  • Name, email address, and professional role
  • School or district affiliation
  • Account credentials (encrypted)
  • Subscription and payment information

2.2 Student Information (Educational Records)

  • Student names, grade levels, and identification numbers
  • Disability categories and IEP information
  • Academic performance data and assessment results
  • Goals, accommodations, and services information
  • Progress monitoring and evaluation data

Important: Much of this information is stored locally on your device and never transmitted to our servers unless you explicitly choose to use cloud-based features.

2.3 Usage Information

  • Features used and pages visited
  • Time spent on the platform
  • Device information and browser type
  • IP address and general location (city/state level only)

3. FERPA Compliance

3.1 School Official Exception: Bridge operates under the "school official" exception of FERPA, as we provide services that schools would otherwise perform themselves.

3.2 Legitimate Educational Interest: We use student data solely for the purpose of providing educational services - creating, managing, and improving IEPs.

3.3 No Re-disclosure: We do not share, sell, or disclose student information to third parties except as required by law or with explicit school/parent consent.

3.4 Data Security: We maintain reasonable security measures to protect student educational records from unauthorized access.

3.5 Parent Rights: Parents maintain all FERPA rights, including the right to inspect, review, and request amendment of their child's educational records.

4. How We Use Information

4.1 To Provide Services:

  • Create and manage IEP documents
  • Track student progress and goals
  • Generate reports and compliance documents
  • Provide intelligent suggestions and recommendations

4.2 To Improve Our Service:

  • Analyze usage patterns (aggregated, de-identified data only)
  • Develop new features and improve existing ones
  • Fix bugs and enhance performance

4.3 To Communicate:

  • Send service updates and important notices
  • Provide customer support
  • Send compliance deadlines and reminders (if opted in)

5. Data Sharing and Disclosure

5.1 We DO NOT:

  • Sell student information to anyone
  • Use student data for advertising or marketing
  • Share student data with third parties for their own purposes
  • Create student profiles for non-educational purposes

5.2 Limited Sharing: We only share information when:

  • You explicitly authorize sharing (e.g., parent portal links)
  • Required by law (e.g., valid court order, subpoena)
  • Necessary to protect rights and safety
  • With service providers who assist in operations (under strict contracts)

6. Data Storage and Security

6.1 Local Storage: Sensitive student data is primarily stored locally on your device using encrypted browser storage.

6.2 Cloud Storage: When using cloud features, data is encrypted in transit (TLS/SSL) and at rest.

6.3 Security Measures:

  • Industry-standard encryption protocols
  • Regular security audits and updates
  • Access controls and authentication
  • Secure data centers with backup systems
  • Employee training on data privacy

6.4 Data Isolation: Each user's data is completely isolated. Educators can only access their own students' information unless granted specific permissions by administrators.

7. Data Retention and Deletion

7.1 Retention Period: We retain data for as long as your account is active or as needed to provide services.

7.2 Deletion Rights: You may request deletion of student data at any time through your account settings or by contacting us.

7.3 School/District Requests: Schools and districts may request bulk deletion of data when a student leaves or at the end of the school year.

7.4 Post-Deletion: After deletion, data may be retained in backup systems for up to 90 days for recovery purposes, then permanently deleted.

8. Children's Privacy

Bridge is designed for use by educators and schools, not directly by children under 13. We do not knowingly collect personal information directly from children. Student data is entered by authorized educational professionals with appropriate consent and authority under FERPA.

9. Your Rights and Choices

9.1 Access: View all student data stored in your account at any time.

9.2 Correction: Update or correct any inaccurate information.

9.3 Export: Download your data in a portable format.

9.4 Deletion: Request deletion of specific student records or your entire account.

9.5 Opt-Out: Unsubscribe from non-essential communications.

9.6 Complaint: File a complaint with the Department of Education if you believe your FERPA rights have been violated.

10. State-Specific Privacy Laws

In addition to FERPA, we comply with state student privacy laws including but not limited to California's Student Online Personal Information Protection Act (SOPIPA), New York Education Law 2-d, and similar laws in other states. If your state has specific requirements, we adhere to them.

11. International Users

Bridge is based in the United States. If you access our service from outside the U.S., your information may be transferred to, stored, and processed in the U.S. where our servers are located.

12. Changes to Privacy Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email to account holders at least 30 days before taking effect. Continued use after changes constitutes acceptance.

13. Contact Us

For privacy questions, data requests, or to report concerns:

  • Email: privacy@bridgeiep.com
  • Privacy Officer: Available Monday-Friday, 9am-5pm PST
  • Data Deletion: deletemydata@bridgeiep.com

Our Commitment to Educators

We understand that you trust us with sensitive student information. We take that responsibility seriously and are committed to earning and maintaining your trust through transparent practices, robust security, and unwavering respect for student privacy. If you ever have concerns, please don't hesitate to reach out.