Inteliflow Corporation, a Wyoming corporation (“Inteliflow,” “we,” “us,” or “our”) operates the LIFT platform at lift.inteliflowai.com (the “Service”). LIFT is an independent student assessment layer used by independent, boarding, and therapeutic schools for grades 6–11 admissions evaluation.
This Privacy Policy explains how we collect, use, disclose, and protect information about students, families, school administrators, evaluators, interviewers, and committee members who use LIFT.
1. Scope and Roles
LIFT is used in two primary contexts:
- School-administered assessment. A school (“School”) engages Inteliflow to evaluate applicants. The School is the data controller. Inteliflow is a processor / service provider / school official acting under the School’s written instructions.
- Family-facing assessment completion. Parents/guardians and student applicants complete assessment tasks through LIFT at the School’s invitation.
LIFT does not compete with admissions workflow tools (e.g., Ravenna, Blackbaud). It sits alongside them as an independent evaluative layer and does not process parent-reported application data as the source of truth — the student is evaluated directly.
2. Information We Collect
2.1 From Schools
- School and administrator contact information
- Application cohort metadata (names, grade levels, testing windows)
- Evaluator / interviewer / committee member accounts
- Billing contact information
2.2 From Families and Applicants
- Applicant name, date of birth, grade applying to, demographic information the School requests
- Parent/guardian name, relationship, email, and phone
- Assessment responses across reading, math, writing, and reasoning tasks
- Interviewer notes entered by School personnel
- Interview voice recordings (where the School enables audio) — voice features are used on non-reading tasks only; no voice input is captured during reading-comprehension sections
2.3 Generated Through the Service
- Assessment scores, task-level performance, and time-on-task
- Nine behavioral / learning signal detectors (persistence, self-regulation, executive function indicators, etc.) generated from assessment interactions — these are observational signals, not clinical diagnoses
- Family report PDFs, committee reports, class composition outputs, and CORE Bridge data where enabled
- Device, browser, and IP information; session logs
- Sentry error diagnostics (with PII scrubbed)
2.4 Payment Information
Paid features and subscriptions are processed by Stripe. We do not store full payment card numbers; Stripe handles card data under PCI DSS. We may use HighLevel for CRM, pipeline management, and transactional outreach with School personnel.
3. How We Use Information
- To deliver the assessment experience to applicants
- To generate evaluator dashboards, family reports, interviewer notes, committee reports, cohort views, class composition analyses, and — where enabled — CORE Bridge handoffs
- To provide customer support and onboarding
- To bill and collect fees
- To secure, maintain, and improve the Service
- To comply with legal obligations
We do not sell applicant or family data. We do not use applicant data for targeted advertising.
4. Behavioral Signals — What They Are and Aren't
LIFT produces observational signals derived from how an applicant engages with assessment tasks (e.g., pacing, revisions, task abandonment). These signals are not a psychological, medical, or educational diagnosis. They inform school admissions and placement decisions as one input among many. Schools retain sole decision-making authority over admissions outcomes.
5. How We Share Information
- With the School: The School has access to its applicants’ data.
- With families: As the School directs, including family report PDFs.
- With service providers:
- Supabase, Inc. — database, auth, storage
- OpenAI, L.L.C. — LLM inference for scoring assistance and narrative generation (not used to train OpenAI models under our API terms)
- Anthropic, PBC — Claude inference, where enabled
- Stripe, Inc. — payment processing
- HighLevel — CRM and transactional communications
- Vercel Inc. — application hosting
- Resend — transactional email delivery
- Sentry — error monitoring with PII scrubbing
- For legal reasons as described in our standard School DPA
- In connection with a corporate transaction where data protections survive
6. AI Disclosure
LIFT uses large language models for scoring assistance, narrative generation in reports, and signal interpretation. AI outputs are suggestions reviewed by School personnel, not autonomous decisions. Under our API agreements, OpenAI and Anthropic do not use our API inputs/outputs to train their foundation models.
7. Data Security
- TLS in transit; encryption at rest
- Role-based access with Supabase Row Level Security
- Voice recordings encrypted and access-controlled; retained only as long as required for evaluation
- Audit logs of significant admin actions
- Automated test suite wired into the Vercel build pipeline (non-regression for critical paths)
- Incident response and breach notification procedures
8. Retention and Deletion
- Active engagement: Data retained for the School’s current admissions cycle plus one subsequent cycle unless the School directs otherwise.
- After contract termination or School request: Data deleted or returned within 60 days, except where retention is required by law.
- De-identified aggregate data may be retained for service improvement.
- Families may request deletion or correction through the School; we will facilitate such requests under the School’s direction.
9. Your Rights
Depending on jurisdiction, you may have rights to access, correct, delete, port, or restrict processing of personal information. Parents/guardians may exercise these rights on behalf of minor applicants.
- California residents: We do not sell or share personal information as defined under CCPA/CPRA. You may submit rights requests to privacy@inteliflowai.com.
- EU/UK residents: You may contact us or your School to exercise GDPR rights; for LIFT services, the School is typically the controller.
- Applicants under 13: LIFT is designed for grades 6–11, which includes some students under 13. When used with students under 13, we operate under COPPA’s school-authorized consent pathway.
10. Children's Privacy
While LIFT is intended for grades 6–11 applicants, some applicants may be under 13. We do not knowingly collect information from children under 13 except through the School’s COPPA-compliant consent process.
11. International Transfers
We process data in the United States. Where required, we rely on Standard Contractual Clauses or equivalent transfer mechanisms.
12. Changes
Material changes will be communicated to Schools at least 30 days in advance.