Privacy Policy

Effective date: October 8, 2026

This policy explains how Intellio Labs, Inc. ("Intellio", "we", "us") handles personal information. It covers:

  • our website at intelliolabs.com; and

  • the Intellio platform: the admissions, enrollment, financial aid, tuition and school-administration software we provide to schools. Each school's portal runs on an intelliolabs.com address, such as a school's own subdomain.

In this policy, a "School" is a school or school organization that uses Intellio. "You" means anyone whose information we handle: School staff, parents and guardians, applicants and visitors to our website.

1. Our role: we work for Schools

Schools use Intellio to run admissions, enrollment, financial aid and tuition. When we handle information on the platform, we do so on the School's behalf and under its instructions. The School decides what information its forms ask for, who on its staff can see it, and how long it is kept. In privacy-law terms, the School is the controller or "owner" of that information and Intellio is its service provider or processor.

The School's own privacy notice also applies to your information. If you have questions about what your School does with your family's information, or want to see, correct or delete it, please contact your School first. We will help the School respond.

For our website, and for our own business relationships with Schools (for example, the contact details of School staff we work with), Intellio decides how information is used, and this policy is our notice to you.

2. Information we collect

School staff

  • Name, work email address, and the School and role you belong to.

  • Your permissions within the platform.

  • Employment and contact details your School records in Intellio, such as position, division, start date, employee ID, Hebrew name, and personal phone number and home address.

  • Records of your activity in the platform, such as sign-ins and changes you make to records, kept for security and audit purposes.

Sign-in information

If you sign in with an email address and password, Amazon Cognito, our sign-in service, handles your password and any verification codes. We do not store passwords in our own databases. If you sign in with Google, see "Sign in with Google" below.

Parents, guardians and applicants

What we collect depends on which features your School uses and what its forms ask for. It can include:

  • Contact and household details: names, email addresses, phone numbers, home address, occupation and employer, relationship to the student, and information about other family members such as siblings. Financial aid forms may also ask for parents' dates of birth, citizenship and education.

  • Student information for admissions and enrollment: the student's name, date of birth, birthplace, gender, home language, grade, current and previous schools (including a contact at the previous school), a photo if the School asks for one, and other information the School's application asks for.

  • Health information, where the School's forms ask for it: for example allergies, medications, special needs, immunization status, and doctor and insurance details.

  • Religious community information, where the School's forms ask for it, such as Hebrew names or the family's synagogue.

  • Documents you upload, such as report cards, recommendations, tax returns or other financial documents.

  • Financial aid information, if your School offers financial aid through Intellio: household income, employment, benefits, expenses, property, savings and bank accounts (including account details and balances), debts, tax information, family circumstances, and similar details the School needs to decide on aid. Some Schools' financial aid forms ask for Social Security number information.

  • Enrollment and tuition records: enrollment contracts and signatures, tuition amounts, payment plans, payments made, balances, receipts, and transportation details if the School arranges it.

  • Signatures and confirmations, such as when you certify that an application is accurate or accept a School's terms.

Information Schools add

School staff add their own records about applicants and families, such as interview and visit notes, admissions and financial aid decisions, and notes about contacts with the family.

Payment card and bank details for payments

When you pay tuition or fees, you enter your card or bank-account details into secure payment forms provided by our payment processors, Stripe and Run Payments. We do not receive or store full card numbers or security codes. We keep only what we need to show your payment history and process future payments the School has set up: payment tokens and customer identifiers from the processor, the card brand or bank name, the last four digits, the card's expiry date, amounts, dates, payment status, and records of your payment authorizations and bank-account verifications.

"Sign in with Google"

If you choose to sign in with Google, we ask Google only for the basic sign-in permissions: openid, email and profile. Google then shares your Google account identifier, name, email address, whether that address is verified, and your profile picture. We use this only to create your account, recognize you when you sign in again, and show your name in the platform.

We do not ask for, and do not receive, your Google password, your Gmail, Google Drive, Calendar or Contacts, or any other Google account data. We do not use information from Google for advertising, and we do not sell it or share it with anyone except as needed to provide the platform. You can remove Intellio's access to your Google account at any time at myaccount.google.com/permissions.

Our use of information received from Google APIs follows the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including its Limited Use requirements.

Usage and device information

When you use the platform or website, our systems record technical information such as your IP address, browser and device type, the pages and features you use, the time of each request, and error reports. We use this to keep the service secure, prevent fraud and abuse, fix problems and understand how the service performs.

Some platform pages load fonts or images from other services, such as Google Fonts and Unsplash. When your browser requests them, those services receive technical information such as your IP address.

Website visitors

If you contact us or fill in a form on intelliolabs.com, we collect what you submit: typically your name, email address, school or organization, and your message. Our website also uses Google Analytics; see section 7.

3. How we use information

We use personal information to:

  • provide the platform to Schools: run applications, enrollment, financial aid, tuition billing and payments as each School has set them up;

  • create and secure accounts and confirm who is signing in;

  • send service emails on the School's behalf, such as invitations, application updates, payment receipts and reminders;

  • give support to Schools and families;

  • protect the platform, its users and Schools from fraud, abuse and security threats;

  • maintain, troubleshoot and improve the platform; and

  • meet our legal obligations.

We do not:

  • sell personal information;

  • use student or family information for targeted advertising;

  • build profiles of students or families for any purpose other than the School's own educational and administrative purposes; or

  • use information from Schools to train AI models.

4. Students and education records

FERPA

Where a School is subject to the Family Educational Rights and Privacy Act (FERPA), we handle student education records as a "school official" with a legitimate educational interest. That means we work under the School's direct control, use education records only for the purposes the School authorizes, and do not disclose them to anyone else except as the School directs or the law requires. Parents and eligible students who want to inspect or correct education records should contact the School.

Children's privacy and COPPA

Intellio is built for Schools, School staff, and parents and guardians. It is not designed for children to use directly: accounts are intended for authorized School staff and for parents and guardians. Information about students, including children under 13, is provided by their parents or guardians or by the School.

If a School chooses to let students under 13 use any part of Intellio directly, the School is responsible for giving parents notice and obtaining consent where the Children's Online Privacy Protection Act (COPPA) requires it, as COPPA allows for school-authorized educational services. We use any such information only to provide the service to that School, never for commercial purposes. If we learn that we have collected personal information directly from a child under 13 without the required consent, we will delete it.

State student-privacy laws

Many U.S. states have laws that protect student information. We handle student information consistently with those laws: we do not sell it, use it for targeted advertising, or build student profiles for non-school purposes, and we keep it secure and delete or return it as agreed with the School.

5. How we share information

We share personal information only as follows.

  • With your School. Information you submit through a School's portal is available to that School's authorized staff.

  • With our service providers, who process it for us under contracts that require them to protect it and use it only to provide their service to us:

    • Amazon Web Services (AWS): hosting, databases, file storage, sign-in and accounts (Amazon Cognito), email delivery (Amazon SES), and logging. Our production systems run in AWS's United States regions.

    • Stripe: payment processing, for Schools that use Stripe.

    • Run Payments: payment processing, for Schools that use Run Payments.

    • Google: "Sign in with Google", if you choose it; web fonts used by the platform; spreadsheet exports that School staff request; analytics for our marketing website; and our business email and documents.

    • Slack: messaging between our team and the School staff we work with.

    • Framer: hosting for our marketing website and its contact forms.

    • AI-assisted features are switched off for Schools unless the School turns them on. When one is on, the information it processes stays within AWS and is processed by AI models through Amazon Bedrock. Under AWS's terms for Amazon Bedrock, the companies that make the models do not receive that information, and it is not used to train models.

  • At the School's direction, for example when a School asks us to send information to another provider it works with.

  • For legal reasons: when the law, a court order or a valid legal process requires it, or when needed to protect the rights, safety or property of a School, its families, Intellio or others.

  • In a business transfer: if Intellio is involved in a merger, acquisition or sale of assets, personal information may transfer to the new owner, who must keep protecting it as this policy describes. We will tell Schools before that happens.

  • In de-identified or aggregate form that cannot reasonably be used to identify a person, School or family.

6. How long we keep information

We keep School information for as long as the School uses Intellio, and we follow the School's instructions on how long records are kept.

Intellio is designed to protect a School's records against accidental loss. For example, when a document is removed in the platform, it is no longer shown or available for download there, but we keep the stored file as part of the School's record. Permanent deletion happens as agreed with the School: when a School asks us to delete records, or stops using Intellio, we delete or return its information, except where the law requires us to keep certain records longer, such as payment and tax records.

Some temporary records have shorter lifetimes: unsubmitted application drafts expire after 30 days, and temporary spreadsheet exports are deleted after about a day.

Our database backups are encrypted and kept for up to 35 days, after which they are deleted automatically. We keep system logs for a limited period, for security and troubleshooting.

We keep website inquiries for as long as we need them to respond and to manage our relationship with you.

7. Cookies and similar technologies

On the platform, we use only cookies and browser storage that the service needs to work: keeping you signed in (sign-in tokens), carrying sign-up details and tuition or payment progress between pages, protecting against misuse, and remembering settings such as display preferences. Some of it stays in your browser between visits; the rest is cleared when you close the browser tab. The payment forms provided by Stripe and Run Payments may set their own cookies for security and fraud prevention. We do not use advertising cookies on the platform.

On our website, we use Google Analytics to understand how visitors use the site. Google Analytics uses cookies to do this. You can block or delete cookies in your browser settings, or install Google's opt-out add-on at tools.google.com/dlpage/gaoptout.

8. How we protect information

We protect personal information with technical and organizational measures appropriate to its sensitivity, including:

  • encryption in transit (HTTPS/TLS) and at rest;

  • a separate database and file storage for each School's records, with sign-in accounts and School membership records kept in shared, access-controlled systems;

  • role-based access, so School staff see only what their role allows, and access by Intellio personnel limited to what their work requires;

  • payment card details handled by our payment processors rather than our own systems; and

  • automated backups, logging and monitoring.

No system is perfectly secure. If we learn of a security incident that affects personal information, we will notify the affected Schools promptly, and notify individuals and authorities where the law requires.

9. Your choices and rights

  • School records: to access, correct or delete information you submitted to a School, contact the School. If you contact us instead, we will pass your request to the School and help it respond.

  • Your account: to correct your account information, contact your School or us.

  • Google sign-in: you can disconnect Intellio from your Google account at myaccount.google.com/permissions. You may then need another way to sign in, which your School can help with.

  • Emails: service emails about your application, account or payments are part of the service. We do not send marketing email to parents or applicants.

  • Website: you can ask us to access, correct or delete information you gave us through our website.

Depending on where you live, you may have additional rights under local law, such as the right to know what information we hold about you, to receive a copy of it, or to object to certain uses. We will not treat you differently for exercising your rights. To make a request, contact us using the details below. We may need to verify your identity and, for School records, confirm the request with your School.

10. Where information is stored

Intellio is based in the United States, and we store and process information in the United States. If you use Intellio from another country, your information will be transferred to and processed in the United States.

11. Changes to this policy

We may update this policy as our services change. We will post the updated version on this page with a new effective date. If we make a material change to how we handle personal information, we will tell Schools, and where appropriate users, before the change takes effect.

12. Contact us

Intellio Labs, Inc.

Email: privacy@intelliolabs.com

If your question is about your child's records at a School, please contact the School as well.