Last updated April 11, 2026
This Privacy Notice for PaprFlow Inc. ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. Contact us at legal@paprflow.me.
We collect personal information that you voluntarily provide when you register on the Services, express interest in our products, or otherwise contact us. This may include:
When necessary and as permitted by applicable law, we process the following categories of sensitive information:
We do not collect billing addresses, payment card numbers, or any financial information.
We receive student information indirectly through documents uploaded by authorized school personnel including teachers and district administrators. This includes psychoeducational reports, evaluation summaries, progress monitoring data, and teacher observations. PaprFlow does not collect this information directly from students or their families.
Uploaded documents may incidentally contain information such as race, ethnic origin, or family background. PaprFlow does not extract, store, or process this information as independent data points. It exists solely within uploaded documents and is processed only to generate the requested IEP documentation.
We process your personal information for the following purposes only:
Student data is never used to improve, train, or develop our AI models or services. Only aggregated, non-identifiable platform usage data is used for service improvement.
We share data only with the following vendors who perform services on our behalf. All vendors operate under written contracts prohibiting use of your data for any purpose beyond delivering their specific function. We share only the minimum data necessary for each vendor to perform their specific function.
We do not sell, share, or disclose personal information for advertising, marketing, or any commercial purpose outside of delivering our Services.
Business Transfers: We may share or transfer your information in connection with a merger, sale of company assets, financing, or acquisition of all or a portion of our business.
We use limited cookies and similar technologies solely to maintain the security of our Services, prevent crashes, fix bugs, and save your preferences. We do not use cookies for advertising, targeted marketing, or behavioral tracking. We do not permit third parties to place advertising or tracking technologies on our Services.
We use Plausible Analytics, a privacy-first tool that does not collect personal information, does not track individuals across websites, and does not use cookies for any purpose.
Yes. PaprFlow uses AI to provide the following functions:
AI processing is performed via the Google Gemini API. Text fragments extracted from teacher-uploaded documents are transmitted over encrypted channels to the Gemini API for draft generation. No full documents or raw student personally identifiable information are transmitted. The Gemini API does not retain student data after generating a response and does not use student data for model training.
Student data is never used to improve, train, fine-tune, or otherwise develop any AI model. All AI-generated content is presented as a draft only. No content is finalized without teacher review and approval.
Users may register and authenticate using Google or Microsoft accounts. We collect only the information necessary to create and maintain your account, including your name and work email address. We do not access your contacts, social media profile, friends list, or any data beyond what is required for authentication.
We do not offer Facebook or other social media login. We do not use social login data for any purpose other than account authentication.
Teacher account information is retained for 60 days following account termination.
Student data is retained in accordance with the contracting district's data retention requirements and applicable California law, including California Education Code Section 56504. Upon written request from the district, all student data will be permanently deleted within 60 days. Deletion includes destruction of all associated encryption keys across storage, indexes, and caches.
When we have no ongoing legitimate business need to process your personal information, we will delete or anonymize it. If deletion is not immediately possible (for example, because data is stored in backup archives), we will securely isolate it from further processing until deletion is possible.
We implement the following security controls:
No electronic transmission over the Internet or information storage technology can be guaranteed 100% secure. You should only access our Services within a secure environment.
PaprFlow is designed for use by educational professionals. We do not knowingly collect personal information from individuals under the age of 18. If you are under 18, do not use this platform.
Student data is provided solely by authorized school personnel. PaprFlow does not collect student data directly from students. This data is processed exclusively to deliver IEP documentation services to the contracting district and is never used for advertising, analytics, or AI training purposes.
PaprFlow acts as a data processor on behalf of contracting districts. Student data is processed solely at the direction of the district and for no other purpose. The district retains ownership and control of all student data at all times.
We do not intentionally collect race, ethnic origin, or biometric data. However, uploaded student documents may incidentally contain such information. This data is not extracted, stored separately, or used for any purpose outside of generating the requested IEP documentation.
Student data is never used to improve, train, or develop our AI models or services. Only aggregated, non-identifiable platform usage data is used for service improvement.
You may review, change, or terminate your account at any time.
Users may review and update account information at any time by logging into PaprFlow and editing their account settings.
To request account or tenant deletion, contact us at legal@paprflow.me. Deletion of student data is handled in accordance with applicable district contracts and applicable law including FERPA and SOPIPA. Some data may be retained for the period required by law or district agreement.
If you have questions about your privacy rights, email us at legal@paprflow.me.
If you are a California resident, you have the following rights under CPRA:
To exercise these rights, contact us at legal@paprflow.me or call 909-581-5315.
California Civil Code Section 1798.83 (Shine the Light): California residents may request information about categories of personal information disclosed to third parties for direct marketing purposes once per year, free of charge. Submit your request to legal@paprflow.me.
Most web browsers include a Do-Not-Track (DNT) setting. No uniform technology standard for recognizing DNT signals has been finalized. We do not currently respond to DNT signals. California law requires us to disclose this. If a standard is adopted that we must follow, we will update this Privacy Notice accordingly.
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated date at the top of this notice. If we make material changes, we will notify you by prominently posting a notice or by sending you a direct notification. We encourage you to review this notice frequently.
PaprFlow Inc.
7440 Freeport Cir
Fontana, CA 92336
United States
Email: legal@paprflow.me
Phone: 909-581-5315
Based on applicable laws of your country or state of residence, you may have the right to request access to, correct, or delete the personal information we collect from you. You may also have the right to withdraw consent to our processing of your personal information. To submit a request, email legal@paprflow.me or call 909-581-5315.