Privacy Policy

Will Chase AI Solutions (“we,” “us,” “our”) operates ConductPath, a school-wide behavior tracking and parent communication platform for K-12 educational institutions. This Privacy Policy explains how we collect, use, store, and protect information when you use ConductPath at conductpath.com or uafa.conductpath.com (and any school-specific subdomains).

We are committed to protecting the privacy of students, parents, school staff, and all users of the Platform. Please read this policy carefully.

2.1 Student Information

ConductPath stores the following student information entered by authorized school staff:

• First and last name
• Grade level, homeroom, block, and period
• IEP or Section 504 status (status indicator only — not the contents of any plan)
• Optional demographic information: gender and race/ethnicity (if provided by the school for equity reporting purposes)
• Behavior infraction records including date, type, level, and consequence
• Parent or guardian name, email address, and phone number
• Parent notification and communication logs
• Conference summaries and action plans
• Major incident reports

2.2 Staff Account Information

We collect the following information for authorized school staff accounts:

• First and last name
• School email address
• Role (Teacher, Administrator, Super Admin)
• Login activity and session data

2.3 Automatically Collected Information

When you use ConductPath, we may automatically collect:

• Browser type and version
• Device type and operating system
• IP address
• Pages visited and actions taken within the Platform
• Date and time of access

This information is used for security monitoring, troubleshooting, and improving the Platform. It is not used to build individual user profiles.

2.4 Information We Do Not Collect

ConductPath does not collect:

• The contents of IEP documents, psychological evaluations, or medical records
• Social Security numbers or government identification numbers
• Payment card numbers (payment processing is handled by third-party providers)
• Biometric data
• Photos or videos of students

We use the information collected through ConductPath solely to:

• Provide and operate the ConductPath platform and its features
• Send automated parent notifications regarding student behavioral incidents
• Generate behavior reports and equity analysis for school administrators
• Track IEP and Section 504 compliance thresholds and send required alerts
• Maintain audit logs for accountability and legal compliance
• Provide customer support to authorized school staff
• Improve and maintain the security and performance of the Platform

We do not use student data for advertising, marketing, or any commercial purpose unrelated to providing the ConductPath service.

ConductPath processes student education records as defined under the Family Educational Rights and Privacy Act (FERPA). We operate as a school official with legitimate educational interest when providing services under contract with schools and districts. All student data is handled in accordance with FERPA requirements.

Schools and districts remain the custodians of student education records. Parents and eligible students retain their rights under FERPA to access, review, and request correction of education records. Contact your school administrator to exercise these rights.

5.1 We Do Not Sell Student Data

We will never sell student data to any third party for any purpose.

5.2 Service Providers

We share limited information with trusted third-party service providers who help us operate ConductPath, including:

• SendGrid (Twilio) — for email delivery of parent notifications. SendGrid receives parent email addresses and the content of notification emails.
• Twilio — for SMS alerts to school administrators. Twilio receives administrator phone numbers.
• Clerk — for user authentication and account management. Clerk receives staff email addresses and login information.
• Cloud hosting provider — for storing application data securely.

All service providers are contractually required to use data only as necessary to provide their services and to maintain appropriate security standards.

5.3 Legal Requirements

We may disclose information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of Will Chase AI Solutions, our users, or others.

5.4 Business Transfers

If Will Chase AI Solutions is acquired by or merged with another company, student data will remain subject to this Privacy Policy and will be transferred only with the same or greater privacy protections. We will notify affected Subscribers before any such transfer occurs.

Student behavioral records are retained for the period configured by the school's Super Admin in ConductPath settings (1 year, 2 years, 3 years, or custom). Expired records are flagged for review before deletion — they are never automatically deleted.

Upon termination of a subscription, student data will be available for export for 30 days before being permanently deleted from our systems.

Audit logs are retained permanently as required for legal compliance and accountability purposes.

Staff account information is retained until the account is deleted by the Super Admin or until the subscription is terminated.

We implement the following security measures to protect the information stored in ConductPath:

• All data is encrypted in transit using TLS (HTTPS)
• All data is encrypted at rest in our database
• Role-based access controls limit what each user can see and do
• Audit logs track every action taken on student records
• Secure authentication managed by Clerk with support for strong passwords
• Regular security monitoring and updates

No method of electronic storage or transmission is 100% secure. While we take data security seriously and implement reasonable measures, we cannot guarantee absolute security. In the event of a data breach that affects student data, we will notify affected Subscribers as required by applicable law.

ConductPath is a platform for school administrators and teachers — it is not designed for direct use by students. Students do not create accounts or interact with the Platform directly. Student information is entered into the Platform by authorized school staff.

We comply with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information directly from children under 13. If you believe we have inadvertently collected information from a child under 13 without proper authorization, please contact us at hello@conductpath.com.

9.1 School and District Rights

As the data custodian, your school or district has the right to:

• Access all student data stored in ConductPath at any time
• Export student data in CSV format
• Request deletion of specific student records
• Configure data retention periods
• Manage user access and permissions

9.2 Parent Rights Under FERPA

Parents and eligible students retain their rights under FERPA to access, review, and request amendment of education records maintained by the school. These rights are exercised through the school or district, not directly through Will Chase AI Solutions. Contact your school administrator to exercise FERPA rights.

ConductPath uses essential cookies and session tokens necessary for the Platform to function, including authentication session management. We do not use tracking cookies, advertising cookies, or third-party analytics cookies that track users across websites.

We may update this Privacy Policy from time to time. We will notify Subscribers of material changes by email or by posting a notice within the Platform at least 30 days before the changes take effect. Your continued use of ConductPath after such changes constitutes acceptance of the updated policy.

If you have questions, concerns, or requests related to this Privacy Policy or the handling of student data, please contact us:

We will respond to all privacy inquiries within 5 business days.