Privacy Policy

Effective: July 12, 2026 · ABCDE Group LLC · myABCIEP

Plain language first: We know you're here to prepare for an IEP meeting, not to read legalese. This policy is written so you can actually understand it. You're sharing sensitive information about your child — you deserve to know exactly how we handle it.

What we collect and why

We collect only what's needed to provide the service — nothing more. Here's what that looks like in practice:

Information you type into the tool

Child's name (optional — you can use a nickname or initials), grade level, disability category, strengths, challenges, and areas of concern. This is used to generate personalized IEP prep content for you.

Email address (for paid services and reminders)

If you purchase a service or enable IEP meeting reminders, we store your email address to send you what you paid for. We do not add you to marketing lists without your explicit opt-in.

IEP planning sessions you save

If you save a session, we store the plan data (child profile, generated goals, accommodations) in our database so you can return to it later. Sessions are tied to a session token stored in your browser.

IEP due date tracker entries

If you use the due date tracker, we store the dates and child info you enter to calculate and display your upcoming deadlines.

Lead magnet form submissions

If you download the California IEP Prep Checklist, we collect your name and email. We may follow up with helpful IEP prep content. You can unsubscribe at any time.

Payment information

Payments are processed by Stripe. We do not store your card number, CVC, or full payment details. We receive only confirmation of payment and your email address.

What we do not do with your data

We want to be explicit about this, because you're sharing sensitive information about your child:

We do not sell your data to any third party, ever.
We do not share your child's IEP session content, disability information, saved plans, or private family data with advertisers, data brokers, or analytics platforms.
We do not use optional website analytics (Google Analytics) on your private IEP prep sessions, saved plans, document uploads, or any page that may contain your family's information. Analytics are limited to general public pages and require your explicit consent.
We do not use your child's disability information, IEP details, or session content to train AI models.
We do not claim HIPAA compliance — myABCIEP is an educational tool, not a healthcare provider, and HIPAA does not apply to our service.
We do not share your information with your school district, SELPA, or any government agency unless required by law.

How your data is stored and protected

Your data is stored in a secured PostgreSQL database hosted on Replit. All traffic between your browser and our servers is encrypted in transit via HTTPS/TLS.

Saved sessions are protected by a session token issued to your browser. Only someone with that token can access or delete the session. We recommend not sharing session links with people you don't trust.

If you upload documents for a Document Review service, those documents are stored temporarily for the review period and then securely deleted. We do not keep copies of your child's educational records.

No security system is perfect. If you suspect a security concern related to your data, please contact us immediately at info@myabciep.com.

Email and communications

We may send you email in the following circumstances:

Transactional: order confirmations, service delivery, payment receipts
Reminders you requested: IEP meeting due date reminders, progress report alerts
Follow-up content: helpful IEP prep tips if you opted in through the lead magnet or a form

Every marketing or follow-up email includes an unsubscribe link. Transactional emails (payment confirmation, service delivery) cannot be unsubscribed from, as they are part of fulfilling your order.

Your rights: access, correction, and deletion

You have the right to:

Request a copy of the personal data we hold about you
Ask us to correct inaccurate information
Request deletion of your data — we will honor this request within a reasonable timeframe unless we are required by law to retain certain records
Opt out of marketing emails at any time

To exercise any of these rights, email us at info@myabciep.com. We will respond within 10 business days.

California residents

California residents may have additional rights under the California Consumer Privacy Act (CCPA). We do not sell personal information as defined by CCPA. For CCPA-related requests, email us at the address above.

Data retention

We retain your data for as long as it is needed to provide the service. In practice:

Saved IEP sessions: retained indefinitely until you delete them or request deletion
Due date tracker entries: retained until you delete them
Email addresses for paid services: retained for record-keeping and service delivery; request deletion at any time
Uploaded documents: deleted after the review period (typically 30 days after delivery)
Stripe payment records: managed by Stripe per their retention policy

Analytics and cookies

myABCIEP uses optional Google Analytics 4 to understand how parents find and use public informational pages — such as the homepage, blog posts, resource guides, and the pricing page. This helps us improve the site for California families.

Analytics is opt-in and consent-first

When you first visit myABCIEP, we ask for your cookie preference. Analytics does not load until you select "Accept analytics." You may choose "Continue without analytics" and the website works completely normally. You can change or withdraw your choice at any time using the link in the sidebar footer.

What Google Analytics does and does not receive

✓Pages visited on public informational routes (homepage, blog, resources, pricing, about, rights guide, glossary)
✓Approximate scroll depth and outbound link clicks on public pages
✓General browser and device type (no fingerprinting)
✗Your child's name, grade, disability category, or any IEP session content
✗Your saved IEP plans, goals, accommodations, or meeting notes
✗Your parent quiz answers or result categories
✗Uploaded document names or contents
✗Email addresses, payment identifiers, or session tokens
✗Activity on protected routes: IEP prep tool, saved sessions, document review, intake forms, checkout pages, or admin pages

Advertising disabled: Advertising personalization, remarketing, and Google Signals are all disabled. Google Analytics on myABCIEP is measurement-only.

Data redaction: The Google Analytics tag is configured to automatically redact email-like patterns from URLs and to exclude sensitive query parameters before any data is sent.

No duplicate tags: A single Google Analytics tag is installed once. Google Tag Manager is not used.

Third-party services we use

Stripe

Payment processing. Stripe has its own privacy policy and PCI-DSS compliance. We do not store card details.

OpenAI

AI-powered goal generation and document drafting. Session content sent to OpenAI is subject to their usage policies. We do not opt in to OpenAI training data usage.

Resend

Transactional and reminder email delivery. Email addresses are shared only as needed to send you messages.

Koalendar

Appointment booking for Strategy Sessions. When you schedule, Koalendar's terms and privacy policy apply to your booking data.

Google Analytics 4

Optional, consent-gated website analytics. Loaded only on public informational pages after you accept analytics cookies. Advertising features, remarketing, and Google Signals are disabled. Private family data is never sent.

Questions or updates

If you have any questions about how we handle your data, want to make a data request, or want to report a concern, email us at info@myabciep.com. We take these requests seriously and will respond within 10 business days.

We may update this policy from time to time. Material changes will be noted with a revised effective date at the top of this page. Continued use of myABCIEP after changes constitutes acceptance of the revised policy.