Privacy Policy

Last updated: 25 June 2026

1. What we collect

• Email address — when you ask us to email you a generated draft or submit a policy.
• Submission metadata — your name, email and the document you submit (only with your consent).
• Basic technical data — request logs, IP address and user-agent, used to keep the Service running and secure.

2. How we use it

• To send you the policy draft you requested.
• To review and (if approved) publish submitted policies.
• To send occasional product updates — only if you tick the optional marketing checkbox.
• To detect and prevent abuse of the Service.

3. Lawful basis

We process your email and consent flags on the basis of your explicit consent. You can withdraw consent at any time by emailing us; we will delete your record.

4. Sharing

We do not sell your personal data. We use Lovable Cloud (backend hosting, database and email delivery) and Google AI (policy synthesis) as data processors. Generated draft text is sent to the AI provider for synthesis only and is not used to train their models.

5. Retention

Email-delivery records are kept for up to 24 months for support and audit. Approved submissions are kept indefinitely as part of the public library. Pending and rejected submissions are deleted within 90 days.

6. Your rights

You can request access, correction, export or deletion of your personal data. Email privacy@k12policies.com and we will respond within 30 days.

7. Children

K12Policies is intended for educators, administrators and policy professionals. It is not directed at children, and we do not knowingly collect personal data from children under 13.

8. Security

Data is stored in our managed backend with row-level security and encryption in transit. Privileged operations require authentication and are scoped via access policies.

9. Contact

Privacy questions: privacy@k12policies.com.