How we treat your family's data.

02Who we are

ArborSlate (“we,” “us,” or “ArborSlate”) is operated by [ENTITY NAME, LLC], an Arizona limited liability company. This Privacy Policy describes how we collect, use, and protect information when you use the ArborSlate service at arborslate.com(the “Service”).

By using the Service, you agree to this Privacy Policy. If you don't agree, please don't use the Service.

03What information we collect

Information you give us

• Account information: name, email address, password (hashed), state, family role, and basic family information you provide during signup.
• Family and student profiles: names, birth dates, grade levels, photos (optional), and similar information you enter for the children and parents in your household.
• Academic records: grades, attendance, reading logs, portfolio uploads, curriculum selections, test scores, and any other records you create in the Service.
• State compliance information: the state you homeschool in, any compliance documents you upload (affidavits, evaluations, IEPs, teaching credentials, etc.).
• ESA / scholarship information: scholarship program enrollment, expense records, receipts you upload, and reimbursement status. We do not store full account numbers or payment card numbers — only the last four digits where you choose to record them.
• Communications: emails, support tickets, and other messages you send us.
• Billing information: we process payments through Stripe and do not store your full payment card details on our servers. We retain billing email, subscription tier, and transaction history.

Information we collect automatically

• Usage data: pages visited, features used, time spent, errors encountered, device type, browser, operating system, and IP address.
• Cookies and similar technologies: see §9.
• Analytics: we use PostHog to understand how the Service is used in aggregate. PostHog data is configured to mask sensitive form inputs and personally identifying information.

Information from third parties

• Stripe sends us billing status (subscription state, payment failures) so we can keep your account in sync.
• Anthropic processes AI tutor conversations on our behalf when you use the AI tutor feature (see §6).
• If you authenticate via a third-party (such as Google), we receive the name and email associated with that account.

04How we use your information

We use the information we collect to:

• Provide the Service: create your account, store your records, generate transcripts and reports, track state compliance, manage ESA expenses, and operate the AI tutor.
• Send you transactional emails (trial reminders, billing notices, password resets, document expiration warnings, ESA quarterly reminders). You cannot opt out of essential transactional emails as long as you have an active account.
• Send you optional product updates and educational content (you can opt out at any time).
• Improve the Service through aggregated, de-identified analysis of how it's used.
• Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms.
• Comply with legal obligations and respond to lawful requests.

We do not use your data, your children's data, or your AI tutor conversations to train any AI model.

05Student data

We treat data about your children with extra care. Specifically:

• We do not sell student data to anyone, ever.
• We do not share student data with advertisers, data brokers, marketing platforms, or analytics partners outside of the minimum necessary to operate the Service.
• We do not use student data to train artificial intelligence models, our own or anyone else's.
• We do not share student data with school districts, government agencies, or other third parties without your express, specific consent, except where required by law (see §8).
• We provide you the ability to export, correct, or delete student records at any time.

If you are a teacher, evaluator, or service provider acting on behalf of a homeschool family, you must obtain that family's consent before entering student data into our system.

Children under 13 (COPPA).ArborSlate is designed for use by a parent or guardian, who is the account holder. We do not knowingly allow children under 13 to create their own accounts or provide information to us directly. Any information about a child in your household is entered by you, the parent, who consents to its collection by creating and controlling the account on the child's behalf. You can review, export, correct, or delete your child's information at any time from Settings, and you may withdraw consent by deleting your account. If you believe a child provided us information directly without a parent's involvement, contact hello@arborslate.com and we will delete it.

Service providers (sub-processors). We rely on a small set of vendors to operate the Service. Each processes only the data needed for its function, under contractual confidentiality and data-protection terms:

• Supabase — database, authentication, and file storage (your records and uploads).
• Vercel — application hosting and content delivery.
• Anthropic — AI processing for the tutor, course descriptions, and letter drafts (not retained for training).
• Stripe — payment processing and subscription billing.
• Resend — transactional email (receipts, password resets, notifications).
• PostHog — privacy-masked product analytics.
• Sentry — error monitoring (configured to scrub personal data).

06AI tutor data

The AI tutor feature (when you enable it) processes conversations between your child and an AI model operated by Anthropic on our behalf. Here is what happens with that data:

• Storage: conversations are stored on our servers, scoped to your family, encrypted at rest, and visible only to the parents on the account.
• Processing: conversation messages are sent to Anthropic's API, processed under Anthropic's commercial terms, and not retained by Anthropic for training.
• Worldview settings: your family's worldview preset and any custom notes are passed to the model as system context for every conversation.
• Curriculum context: the child's enrollments (curriculum, subject, grade level) are passed as context so the tutor speaks in language consistent with what your child is learning.
• Parent visibility: all conversations are readable, searchable, and exportable by the parents on the account. A weekly digest is sent by email summarizing recent conversations.
• Your control: you can pause the tutor, scope it to specific subjects, restrict topics, or disable it entirely.

We do not use AI tutor conversations to train any AI model. If you delete a conversation, it is removed from our active systems within 30 days and from backups within 90 days.

07ESA and scholarship data

If you use ArborSlate to track ESA, voucher, or scholarship expenses:

• We store the expense records and receipt images you upload.
• We do not transmit any data to your state's ESA program, ClassWallet, or any other scholarship platform. ArborSlate is not connected to those systems — we keep a parallel record for your reference.
• We do not share your ESA records with state agencies, school districts, or third parties without your consent, except where required by law.
• If you request an audit-defense export, it is generated on demand for your use only.

ArborSlate does not provide tax, legal, or financial advice regarding ESA programs. You are responsible for following your state's ESA program rules and submitting any required documentation to the appropriate state authorities directly.

08Sharing your information

We share data only in these limited circumstances:

• Service providers who help us operate the Service: Supabase (database and authentication), Vercel (hosting), Stripe (payments), Resend (transactional email), Anthropic (AI tutor processing), PostHog (analytics). Each is bound by data processing agreements and uses your data only to provide their services to us.
• Legal requests: if required by valid legal process (subpoena, court order, warrant). We will challenge overbroad requests and notify you where legally permitted.
• Safety: to prevent imminent harm to a person, including but not limited to credible threats of violence or child safety concerns.
• Business transfers: if ArborSlate is acquired or merges with another company, your data may transfer to the new entity, subject to this Privacy Policy.

We do not sell, rent, or trade your data to anyone. We do not share data with advertisers or marketing platforms.

09Cookies and similar technologies

We use cookies for essential functions (authentication, session management, security) and limited analytics (PostHog). We do not use third-party advertising or tracking cookies.

Essential cookies cannot be disabled without breaking the Service. Analytics cookies can be declined via the cookie banner on first visit or via the settings menu.

10Security

We use industry-standard practices to protect your data:

• Encryption in transit (TLS 1.2 or higher) for all connections.
• Encryption at rest for database storage and file uploads.
• Row-Level Security at the database layer to enforce family-level data isolation.
• Hashed and salted passwords using current best practices.
• Access controls limiting which team members can access production data, and only when necessary.
• Regular security review of dependencies and infrastructure.

No system is perfectly secure. If we discover a breach affecting your data, we will notify affected accounts within 72 hours of confirmation, in accordance with applicable law.

11Children's privacy

ArborSlate is designed to be operated by parents on behalf of their families, including children of all ages. Children under 13 may not create their own accounts.

We rely on parents to enter information about their children and to supervise any use of the AI tutor feature by children. Parents control all data associated with children on their account: viewing, editing, exporting, and deleting.

We comply with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information directly from children under 13. If you believe a child has provided information to us directly, please contact us and we will delete it.

12Your rights

You have the following rights with respect to your data:

• Access: view all information we hold about you and your family through the settings page.
• Export: download a complete copy of your data as JSON or PDF at any time, before or after canceling.
• Correction: edit any record at any time through the Service.
• Deletion: delete individual records, archive students or family members, or close your entire account.
• Opt out of optional emails: via the link in each marketing email or in settings.
• Object or restrict processing: by canceling the relevant feature (such as the AI tutor) or by closing your account.

Residents of certain states (California, Virginia, Colorado, and others with state-level privacy laws) have additional rights, including the right to know what categories of data we process and to whom we disclose it. Email hello@arborslate.com to exercise any of these rights.

13Data retention

We retain your data for as long as your account is active. If you cancel:

• You retain read-only access plus export for 90 days after cancellation.
• After 90 days, your account closes and we delete your records from active systems within 30 days.
• Backup copies are deleted within 90 days of account closure.
• Limited records may be retained where required by law (such as financial transaction records for tax purposes) or to defend against legal claims.

14International users

ArborSlate is operated from the United States. If you are accessing the Service from outside the U.S., you understand that your data will be processed and stored in the U.S., which may have different data protection laws than your country. By using the Service, you consent to this transfer.

15Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and post the updated policy on this page with a new “last updated” date. Continued use of the Service after a change constitutes acceptance.

We will not retroactively reduce your privacy protections without your explicit consent.

16Contact us

For privacy questions, data requests, or concerns:

• Email: hello@arborslate.com
• Mail: [ENTITY NAME, LLC], [STREET ADDRESS], [CITY], AZ [ZIP]

We respond to privacy requests within 30 days. We're a small team; thanks for your patience.

See also: Terms of Service.