Access Navigator

Our Commitment

Access Navigator serves families navigating some of life's most demanding challenges. The information you share, about your child's disability, medical needs, educational status, and family circumstances, is deeply personal. We handle it accordingly.

This Privacy Policy is written to describe our practices under applicable U.S. and California privacy principles and California's 2026 AI transparency requirements; we are not a "business" subject to the CCPA/CPRA thresholds at this time, and where our practices exceed legal minimums, we say so.

Sensitive Personal Information (SPI), Default Classification

Sensitive Personal Information Protections

Sensitive Personal Information (SPI) receives heightened protections under certain laws; regardless of statutory coverage, we treat ALL data you share with Access Navigator as Sensitive Personal Information, including: topic classification about your session (for example, IHSS denial, IEP services cut, or Regional Center intake).

• Any information about a minor's disability, developmental status, medical condition, or special education services
• Information about a child's behavioral, cognitive, or physical needs
• Contents of educational documents such as IEPs and IPPs
• Contents of government benefit documents such as Notices of Action and service plans
• Information about family income, household composition, or benefit enrollment

We apply SPI-level protections to all user data regardless of whether it technically qualifies under the statutory definition. This means we apply the most restrictive handling rules to everything.

Information We Collect

1. Information You Provide

When you use the Service, you may share:

• Your child's age range, disability or diagnosis type (general category, not full clinical records)
• County of residence
• Services currently received or previously denied
• Your primary concerns or goals
• Email address, if you opt into follow-up communications, and your separate, optional Helper Consent choice indicating willingness to be a future peer resource without current matching, and the service topic classification for your session (topic_bucket) stored with your opt-in record
• Contents of documents you upload for AI-assisted interpretation

Documents You Upload

Access Navigator allows you to upload educational and government-benefit records, including IEPs, IPPs, Notices of Action, and agency correspondence. When you upload a document:

• The document is processed by our AI system during your active session to provide guidance; we log only the document type and do not store document contents after the session ends on the free tier
• Document contents are not stored on our servers after your session ends (free tier); for paid features, any retention will be disclosed before use and limited to what is necessary to provide the feature
• We do not claim ownership of uploaded documents
• We do not use uploaded document contents to train foundational AI models
• The session summary we generate will note the document type but will not reproduce identifying content

Automatically Collected Information

• Device type, operating system, browser type
• IP address (used for approximate geolocation and security only)
• Session behavior: pages visited, time on site, features used
• Referring website or source

Marketing Attribution and Advertising Measurement

We advertise Access Navigator so that more families can find it. To understand which ads and channels actually reach families, we collect limited marketing information when you arrive.

What we collect for this purpose

• Marketing parameters in the web address you arrive on, such as UTM tags (for example, a campaign or source name) and Google click identifiers (gclid, gbraid, or wbraid).
• The page you first landed on.
• Whether your visit led to a free session or a paid Compass subscription.

We store these values in your browser's session storage for the length of your visit, and they are cleared when you close the tab or browser. On the free tier, they are not linked to your name or joined to the content of your session. If you start a Compass subscription, they are attached to your subscription record only to measure which ads lead to subscriptions, never to the content of your sessions.

Our analytics and advertising-measurement tools, such as Google Analytics and Google Ads, also use cookies and similar identifiers to measure ad performance.

What we never include

No information about your child, your family's situation, your documents, or your survey answers is ever included in this marketing information. It records only where a visit came from and whether it led to a subscription, never what you discussed or uploaded.

Who receives it and why

We use Google Analytics and Google Ads to measure how our own advertising performs, including which ads lead to subscriptions. For that measurement we share the marketing parameters above and the fact that a conversion occurred. We use this only to evaluate and improve our own ads, not to track you across other websites or to build a profile of you for advertising. Consistent with the commitments elsewhere in this Policy, we do not sell your information and we do not share family-level information for advertising.

Your choices

You can clear session storage by closing the tab, clear or block cookies in your browser settings, limit ad personalization through your Google Account ad settings, and use your browser's privacy controls to restrict tracking. These choices do not affect your ability to use the Service.

What We Do Not Collect

• Social Security Numbers or government ID numbers
• Full clinical medical records
• Payment or financial account data
• Biometric data
• Precise geolocation

How We Use Your Information

2. Service Delivery

• Generating AI-assisted guidance relevant to your situation and location using session metadata stored under a randomly generated Session_ID
• Processing uploaded documents to provide plain-language interpretation
• Sending exactly two follow-up emails via Resend if you opt in, one about 72 hours after your session to prompt first steps and one about 30 days later to request an outcome survey, with no additional marketing sequences or third-party sharing
• Responding to support requests

Service Improvement

• Analyzing aggregated, de-identified usage patterns to improve accuracy without linking session metadata to records
• Identifying where families commonly encounter confusion or unmet needs
• Building the evidence base for public advocacy and policy engagement

What We Do Not Do

• We do not sell your personal information, and we do not share it for cross-context behavioral advertising; although we are not subject to the CCPA/CPRA, we follow these commitments as a matter of policy.
• We do not share your information with advertisers for their own marketing or targeting; the limited advertising measurement we perform on our own ads is described in "Marketing Attribution and Advertising Measurement."
• We do not use your data to train foundational AI models
• We do not use AI-generated profiles of you for purposes unrelated to providing the Service

Aggregated Outcome Data and Advocacy

3. De-Identified Data Retention

We retain de-identified, aggregated outcome data beyond individual session periods, which is produced without maintaining or using any key that could reasonably re-link data on tables with anonymous session metadata and data tied to the email opt-in. This data is stripped of all information that could identify you or your child and is used exclusively for:

• Reporting on program effectiveness to funders and oversight bodies
• Public policy advocacy, including state-level reporting on systemic barriers to services
• Academic or research partnerships focused on improving the special education and disability services landscape

Examples of aggregated reporting: "73% of users who reported an IHSS denial successfully identified an appeal pathway" or "X% of users in [County] reported securing additional service hours within 90 days." This data does not include your name, email, or any identifying information.

Individual Account Deletion

When you request deletion of your account or personal data, we will delete your identifiable information. De-identified, aggregated data derived from your sessions may be retained in anonymized form, as it cannot reasonably be used to identify you. If you have questions about what is retained, contact us at michael@novaparentcollective.com.

AI Processing and Third-Party Services

4. Anthropic (AI Infrastructure)

Access Navigator uses Claude, an AI developed by Anthropic, to generate guidance as a service provider processing data on our behalf. Conversation data and uploaded document content may be processed by Anthropic's infrastructure in accordance with Anthropic's Privacy Policy and Data Use Agreement. We have entered into a data processing agreement with Anthropic that prohibits them from using your data to train foundational models. We encourage you to review Anthropic's privacy practices at anthropic.com; we have contract terms in place that prohibit Anthropic from using your data to train foundational models or for independent purposes.

Other Service Providers

We may share information with trusted service providers (hosting; analytics and advertising measurement such as Google Analytics and Google Ads; email delivery such as Resend; payment processing such as Stripe; and database services such as Airtable) who are contractually or by policy restricted from using your data for any purpose other than providing services to us, and from selling it or sharing it for cross-context behavioral advertising.

Data Retention

Session conversation data is not retained after your session ends (free tier), and we do not join session metadata with email or survey data. To make a privacy request (access, correction, or deletion), email michael@novaparentcollective.com; for your security, we may require verification using only information from the specific table where your opt-in or request resides.

Security

We use encryption in transit and at rest, access controls, and regular security reviews; email addresses stored in Airtable are encrypted at rest using Airtable's field-level AES-256 encryption (not our own infrastructure). Sensitive Personal Information receives the highest level of protection we can provide. No system is completely secure. We encourage you to share only what is necessary and to use strong, unique credentials if you create an account.

Children's Privacy

Access Navigator, a product of Nova Parent Collective LLC, is intended for use by adults on behalf of children. We do not knowingly collect personal information directly from children under 13. If you believe a child has directly provided personal information, contact us and we will delete it promptly.

Regulatory Transition Notice, June 2026 Grievance Process

Changes to This Policy

We update this Policy when our practices change or when law requires, and we may notify you by email if you have opted in to communications. We will update the version number and effective date. For significant changes that would materially affect your choices or our data sharing, we will provide additional notice where feasible. Continued use after changes are posted constitutes acceptance.

Contact Us

Nova Parent Collective LLC
michael@novaparentcollective.com