Privacy Policy

Effective Date: January 1, 2026

Website: alderbranch.org

Alder Branch LLC (“Alder Branch,” “we,” “our,” or “us”) is committed to protecting privacy and handling information responsibly. This Privacy Policy describes how we collect, use, store, process, disclose, retain, and protect information when individuals or organizations access our websites, applications, AI-supported tools, and related services (collectively, the “Platform”).

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and agree to the practices described herein. If you do not agree, you must discontinue use of the Platform.

1. Applicability and Relationship to Other Agreements

This Privacy Policy applies to:

• Individual users accessing Alder Branch services
• Visitors to alderbranch.org
• Educators, students, families, and professionals using the Platform
• Organizations and districts, unless governed by a separate written agreement

Where Alder Branch enters into a separate written agreement with a school district, educational institution, or organization, that agreement may supplement or supersede this Privacy Policy with respect to data governance, ownership, and compliance obligations.

2. Categories of Information We Collect

Alder Branch is designed to minimize the collection of personal information. We collect information only to the extent reasonably necessary to operate, secure, and improve the Platform.

a. Information You Provide Directly

We may collect information you knowingly and voluntarily provide, including:

• Name, email address, organization affiliation, and account credentials
• Communications submitted through forms, email, or support requests
• Feedback, survey responses, or participation in pilots or beta programs
• Content voluntarily entered into AI-supported tools or workflows

You are responsible for ensuring that information you submit does not violate applicable laws or third-party privacy rights.

b. Automatically Collected Technical and Usage Information

When you access the Platform, we may automatically collect:

• IP address and approximate geographic location
• Browser type, device type, operating system, and session identifiers
• Dates, times, pages accessed, features used, and interaction patterns
• Diagnostic and performance logs related to system stability and security

This data is generally processed in aggregated or de-identified form.

c. Sensitive and Regulated Information

Alder Branch does not intentionally collect sensitive personal data, including:

• Medical records
• Financial account information
• Government-issued identification numbers
• Student education records

except where:

• Explicitly required for a specific deployment
• Enabled through a contractual agreement
• Supported by appropriate safeguards and legal authorization

3. Purpose Limitation and Lawful Use of Information

We process information only for legitimate and limited purposes, including:

• Operating, maintaining, and securing the Platform
• Authenticating users and managing access
• Responding to inquiries, requests, and support needs
• Improving performance, usability, and accessibility
• Developing and refining AI-supported features using aggregated insights
• Meeting legal, regulatory, or contractual obligations
• Enforcing our Terms of Service and acceptable use policies

We do not sell personal information and do not permit third parties to use personal data for independent marketing purposes.

4. AI-Supported Features and Data Handling

Alder Branch uses artificial intelligence to support educational planning, reflection, and analysis.

• AI interactions may be logged for quality assurance, system improvement, safety monitoring, and debugging
• Logged data may include prompts, responses, timestamps, and technical metadata
• AI systems do not possess independent memory beyond system-level processing controls

Users should not input sensitive personal data, student-identifiable information, or protected health information into AI tools unless explicitly authorized under a separate agreement.

AI outputs are informational and educational only and do not constitute professional advice.

5. Cookies, Tracking, and Analytics

We use cookies and similar technologies to:

• Maintain sessions and user preferences
• Support authentication and security
• Understand aggregated usage patterns and performance metrics

Analytics tools used by Alder Branch are selected to align with privacy-conscious practices. Data collected through analytics is used to improve functionality and is not used for targeted advertising.

You may disable cookies through your browser settings, though some Platform features may be unavailable or degraded.

6. Disclosure of Information

We may disclose information only in the following limited circumstances:

• To service providers that support hosting, security, analytics, authentication, or functionality, subject to confidentiality obligations
• To comply with applicable laws, regulations, subpoenas, or lawful requests
• To protect the rights, safety, or security of Alder Branch, users, or others
• With your explicit consent for specific programs or collaborations

We do not knowingly disclose personal data to third parties for resale or commercial exploitation.

7. Infrastructure, Security Controls, and Safeguards

Alder Branch employs reasonable administrative, technical, and organizational measures designed to protect information, including:

• Application hosting through Railway
• Development architecture using Next.js
• Data management and authentication via Supabase
• Encryption of sensitive data at rest using Supabase Vault
• Role-based access controls and authentication mechanisms
• Secure APIs and repository controls

Despite these measures, no system can guarantee absolute security. Users acknowledge and accept this inherent risk.

8. HIPAA, FERPA, and Other Regulatory Frameworks

Alder Branch may support regulated data environments, including:

• HIPAA-capable infrastructure for applicable deployments
• Execution of Business Associate Agreements where required
• Enterprise authentication such as SAML Single Sign-On

HIPAA, FERPA, or similar regulatory compliance applies only where explicitly enabled through contractual agreement. Individual user accounts are not assumed to involve regulated data unless expressly stated.

9. Data Retention and Lifecycle Management

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law.

Data may persist temporarily in:

• System backups
• Security logs
• Audit records

until such data is securely deleted in accordance with retention schedules.

10. Data Deletion and Access Requests

You may request access to or deletion of your personal data by contacting support@alderbranch.org.

Deletion requests are typically processed within one to two weeks. Certain information may be retained where required for legal compliance, dispute resolution, security monitoring, or operational continuity.

Once deletion is completed, data is removed from active systems subject to lawful retention requirements.

11. International Users and Cross-Border Processing

Alder Branch operates from the United States. If you access the Platform from outside the United States, you consent to:

• Cross-border transfer of information
• Storage and processing on U.S.-based servers

We apply consistent safeguards regardless of geographic location.

12. Children and Student Use

The Platform is intended for educational use. Schools, districts, parents, and guardians are responsible for obtaining required consents for student access.

Alder Branch does not knowingly collect personal data from children except as authorized by an educational institution or guardian and in accordance with applicable laws.

13. Third-Party Services and External Links

The Platform may link to third-party services or content. Alder Branch is not responsible for the privacy practices or content of third parties. Accessing third-party services is at your own risk.

14. Your Privacy Rights

Depending on your jurisdiction, you may have rights to:

• Access personal data we hold about you
• Request correction or deletion
• Restrict or object to certain processing
• Withdraw consent where applicable

Requests may be submitted to support@alderbranch.org.

15. Changes to This Privacy Policy

We may revise this Privacy Policy periodically. Updates will be posted with a revised effective date. Continued use of the Platform constitutes acceptance of the updated policy.

16. Contact Information

Alder Branch LLC

Email: support@alderbranch.org

Website: alderbranch.org

Location: United States