Privacy Policy
Last updated November 2026
What we collect
Account information (name, email, title, agency). Student information that you enter or upload to write reports: names, grade, age, date of birth, student ID, school, service details, your notes, assessment results and the reports themselves. If you connect your DOE vendor portal, the students it lists (name, date of birth, student ID and mandate) are also saved as your students for reports, encrypted like all student information. Usage and billing records.
How we use it
Only to provide the service to you: generating, editing, storing and exporting your reports, learning your writing style, billing, security and support. We do not sell data, show ads, or use student data to train AI models.
AI processing
To write, check and edit reports, and to sum up each subject of a report on the student's page, the minimum necessary information (such as the student's first name, grade, areas of need and your notes) is sent to our AI provider (Anthropic) under terms that prohibit training on it. A completed assessment you upload to fill in a score is sent to our AI provider (Anthropic) once to read the score, and is not stored. To improve our sentence library, we may analyze provider-written text after removing student names and identifiers; any additions are reviewed by a person. When you upload past reports to learn your writing style, we also save the general style as an anonymous style card (headings, tone, length, how progress is phrased) that other providers can choose from; it never contains student information, your name, your school or your wording, and you can turn off “Share my writing style (anonymous)” in Settings at any time to keep yours out.
Storage and security
Student information is encrypted before storage and is accessible only to the provider account that created it. Uploaded files are processed in memory and not stored. See our Security page for details.
Your choices
You can export all your data or delete any student, report, or your entire account at any time from Settings. Deleted data is removed from our live database immediately and from backups within 30 days.
Schools and agencies
When you use SpedReports through an agency or school account, the agency's owner and admins can view and export the reports of the providers in their agency, and can see usage and billing information. Nobody outside your agency can. You remain responsible for complying with your organization's and the DOE's data policies (including FERPA and NY Education Law §2-d).
Contact
privacy@spedreports.com