Privacy Policy & FERPA Notice

Holistica Foundation Inc. operates MISS. Your child's records are deeply personal; this policy explains what we collect, why, and how we protect it.

1. Information we collect

• Account: name, email, phone (optional), Telegram chat ID if you connect the bot.
• Student information you add: first name, date of birth, grade, district, disability categories, IEP status, binder entries, deadlines.
• Documents and conversations: files, photos, audio recordings, pasted text, chat messages and generated letters.
• Billing: handled by Paddle; we receive subscription status, not your full card details.
• Usage: basic counts (e.g. number of chats or letters) to run and improve the service.

2. How we use it

Only to provide MISS to you: answering questions, organizing and summarizing your records, drafting letters, tracking deadlines and managing your subscription. We do not sell your data and do not use it for advertising.

3. AI processing

To read, transcribe and answer, content is sent to AI providers through a secure gateway. It is processed to produce your response and is not used by us to train AI models.

4. Who can see your child's records

Only you. Family documents are stored privately with per-family access controls. MISS administrators cannot view family documents, children's records or conversations; they see only account-level information (name, email, plan status, number of children).

5. FERPA notice

The Family Educational Rights and Privacy Act (20 U.S.C. § 1232g; 34 C.F.R. Part 99) governs how schools handle education records. MISS is not a school and is not an agent of your school district. Records you upload are held on your behalf as the parent, and we handle them in line with FERPA principles: limited access, no disclosure to third parties without your consent except as required by law, and your right to review and delete them.

6. Children's privacy

MISS accounts are for adults. Information about students is provided by their parent or guardian, and we do not knowingly collect information directly from children.

7. Security and retention

Data is encrypted in transit and stored with access controls. We keep your data while your account is active. Deleting a document removes it and its file; you can request full account deletion at any time.

8. Your rights

You can access, correct, download or delete your information. Depending on your state, you may have additional rights (for example under California law).

9. Contact

Holistica Foundation Inc. — 244 Fifth Ave, Suite H231, New York, NY 10001, United States — miss@holisticafoundation.org