Legal

Privacy Policy

Effective date: April 8, 2026

Slingshot Labs Benefit LLC ("Slingshot," "we," "us") built this tool to help parents prepare for their child's IEP meetings. We take seriously the trust you place in us when you share information about your child. This policy explains what we collect, how we use it, and your rights.

1. Who this policy covers

This policy applies to parents and guardians who use the Slingshot IEP web application at app.slingshotiep.com. It covers information you provide about yourself and about your child. We do not knowingly collect information directly from children.

2. What we collect

Account information

Your email address, used only to send sign-in links. We do not store passwords.

Child profile information

A name or nickname you provide for your child, along with strengths, concerns, and goals you enter during the preparation process.

IEP documents

PDF files you upload voluntarily. These documents may contain your child's name, disability classification, assessment results, service details, and other information protected under the Family Educational Rights and Privacy Act (FERPA). You choose what to upload. We process these documents to help you prepare for your meeting.

Usage data

Basic technical information (browser type, device type, pages visited) collected automatically through standard web infrastructure logs. We do not use advertising trackers or third-party analytics cookies.

3. How we use your information

  • To provide the IEP meeting preparation service you signed up for
  • To send you sign-in links to access your account
  • To process uploaded IEP documents and generate preparation materials using AI
  • To save your progress so you can return to your session
  • To improve the product based on how it is used

We do not use your information for advertising, marketing profiling, or any purpose unrelated to providing this service.

4. AI processing and Anthropic

Slingshot uses the Claude API, provided by Anthropic, PBC, to analyze IEP documents and generate preparation content. We have enabled Zero Data Retention (ZDR) on our Anthropic account, which means Anthropic does not store the content of your API requests or responses on their servers beyond the scope of each individual call.

AI-generated content is provided to help you prepare questions and talking points. It is not legal advice, educational assessment, or a substitute for professional judgment.

5. Who we share data with

We do not sell your data. We do not share it with advertisers. We work with a limited set of infrastructure providers who process data only as instructed:

RailwayApplication hosting and database storage
VercelWeb application delivery
AnthropicAI document processing (Zero Data Retention enabled)
ResendTransactional email delivery (sign-in links only)

6. Data retention and deletion

Your data is retained as long as your account is active. You can delete a child profile at any time from within the application; this removes all associated documents, goals, concerns, and preparation data. To delete your account entirely, contact us at hello@slingshotiep.com.

7. FERPA and educational records

FERPA grants parents the right to control their child's educational records. When you upload your child's IEP to Slingshot, you are choosing to share records you have a legal right to access and control. Slingshot is not an educational agency or institution and does not have independent obligations under FERPA, but we treat IEP documents with the same care those laws are designed to require.

8. Maryland Online Data Privacy Act (MODPA)

If you are a Maryland resident, MODPA gives you rights over your personal data, including the right to access, correct, delete, and obtain a copy of the data we hold about you. IEP-related information qualifies as sensitive data under MODPA. We collect and process this data only as described in this policy, with your consent, and for the purpose of providing the service you requested. To exercise your rights, contact us at hello@slingshotiep.com.

9. Security

We use HTTPS for all data transmission, session-based authentication via signed tokens, and restrict access to production data to authorized personnel only. No system is perfectly secure. If you believe your account has been compromised, contact us immediately.

10. Changes to this policy

We may update this policy as the product evolves. If we make material changes, we will notify you by email before they take effect. Continued use of the service after changes constitutes acceptance.

Contact us

Questions about this policy, data requests, or concerns can be sent to:

hello@slingshotiep.com

Slingshot Labs Benefit LLC