Privacy Notice

Who we are

SLP Draft is operated by SLP Draft (the "Seller", "we", "us"). The Seller is the data controller for personal data processed through the Service. You can reach us at hello@slpdraft.com.

What we collect & why

• Account data (email, name from Google sign-in, account creation date) — to create and operate your account. Legal basis: contract performance.
• Case content you enter (student initials, ages, test scores, session notes, language samples, parent intakes, drafts, uploaded documents) — to provide the drafting service you signed up for. Legal basis: contract performance.
• Usage metadata (case count, plan, last login, feature use) — to operate, secure, and improve the Service. Legal basis: legitimate interests.
• Support messages you send us — to respond and keep a record. Legal basis: legitimate interests.
• Payment metadata (subscription status, plan, renewal dates) returned to us by Stripe — to gate access. Card details are handled by Stripe and never stored by us. Legal basis: contract performance.

Per-user isolation

Each user can only see their own data. Row-level security policies in our database enforce this at the storage layer — even our own server code uses your authenticated session when reading your data.

Who we share data with

We share personal data only with the following categories of recipients, and only as needed to operate the Service:

• Hosting & database (Supabase, Cloudflare) — to store your data and serve the app.
• AI providers (Google, OpenAI via the Lovable AI Gateway) — to generate the drafts you request. See "AI processing" below.
• Stripe Payments Inc. ("Stripe"), our payment processor — to process card payments, manage subscriptions, and respond to billing inquiries. Stripe acts as a separate controller for the payment data it collects directly from you at checkout.
• Email delivery (transactional) — to send account, billing, and security emails.
• Professional advisers and authorities — where required by law.

We do not sell personal data and do not share it for third-party advertising.

How AI processing works

When you click "Generate" or "Draft", the relevant case text is sent to a large-language model (Google Gemini or OpenAI GPT, via the Lovable AI Gateway) for processing. The model receives only what is needed for that section — not your full case file or other students' data.

Per our AI provider agreements, prompts and outputs are not used to train models. Inputs may be retained briefly by the provider for abuse monitoring (typically ≤30 days) and then deleted.

Test scores are never AI-generated. Standard scores, percentiles, and confidence intervals come only from what you enter. Our score-fabrication check blocks the AI from inventing numbers in narrative drafts.

Identifiable information

SLP Draft is designed for de-identified workflow use: enter student initials rather than full names where possible. If you choose to enter identifying information, it is stored encrypted at rest and transmitted over TLS, but you remain responsible for compliance with FERPA, IDEA, and your district's data agreements.

Security

We apply appropriate technical and organizational measures to protect your data, including TLS in transit, encryption at rest, row-level access controls, least-privilege service credentials, and audit logging. No system is perfectly secure; you also play a role by protecting your login credentials.

Retention

We retain your data while your account is active. Snapshots are kept for recovery. Deleted cases are removed immediately and are not recoverable after 30 days. When you delete your account, your data is removed from active systems; backups containing your data are overwritten on our normal backup-rotation cycle and are not used for any other purpose in the meantime.

International transfers

Our hosting and AI providers operate in the United States and other jurisdictions. If you access the Service from outside the United States, you understand that your data will be transferred to and processed in the United States, where data-protection laws may differ from those in your country.

Your rights

• Access & export: Download a complete JSON copy of every case, note, test, draft, and template you own — anytime, from Account settings.
• Correction: Edit any field directly in the app. Snapshots preserve prior versions in case you want to revert.
• Delete: Permanently delete your account and all associated data from Account settings. This action is irreversible.
• Object or restrict: Contact us to object to or restrict processing based on legitimate interests.
• Complain: Contact your local data-protection authority if you believe we have not handled your data properly.

Cookies

We use only essential cookies and local storage required to keep you signed in and to remember in-app preferences (for example, whether you have dismissed the onboarding tour). We do not use advertising or third-party tracking cookies.

Contact

Questions about your data? Email hello@slpdraft.com. See also our Terms of Service and Refund Policy.