How this site uses what you send

Scope

This policy covers the public marketing Site, including the Contact form, optional file uploads, and pages that link here. It also covers how we handle that information in email and our vendors’ systems.

This Site is not a live district BoardAsk instance. A live instance answers from that district’s published records only, under a written customer agreement and any data processing addendum. Student data, Infinite Campus, IEPs, personnel files, and other non-public records are out of scope for BoardAsk. We do not use this Site to collect student records.

A Markdown copy of this policy is at https://recordask.com/privacy.md. Related terms for this Site are in the Terms of Use.

Personal information we collect

Information you provide

You may provide personal information through the Site or otherwise, including:

• Contact data, such as name, email address, phone number, organization or district, role or title, and mailing address if you give it.
• Communications data, such as the message you send, the reason you contacted us (meeting, proposal, press, or a general message), and our replies.
• User-generated content, such as files you attach (PDF, Word, Excel, or images) and any personal information those files contain.
• Other data you choose to include in a free-form field, which we will use as described here or as disclosed at the time of collection.

This Site does not currently offer public account registration, payment checkout, social-network login, contests, or a public comment board. We do not ask for government identification numbers, payment cards, or precise geolocation on this Site.

Information collected automatically

When you visit the Site, our hosting provider and we may log technical information such as IP address, browser and device type, referring URL, pages viewed, timestamps, and approximate location derived from IP address (for example city or region). See Cookies and similar technologies.

To limit automated contact-form and attachment-upload abuse, we transform the requesting network address into a keyed, one-way hash and keep a request counter for that pseudonymous value. The rate-limit table does not store the network address itself or a history of individual requests.

Information from other sources

We may combine what you send with information we already have about an inquiry, or with information a colleague at your organization provides when following up. We do not currently buy personal information from data brokers for this Site. If you send us a public record, a proposal, or a link, we treat that as part of your inquiry – not as student data collection.

Cookies and similar technologies

The Site may use cookies, local storage, and similar technologies that are strictly necessary to host the Site, keep it secure, and remember short-lived form state. Our hosting provider (currently Vercel) may set such cookies as part of delivering the Site.

We use Vercel Web Analytics to understand aggregate Site traffic and whether key contact paths are working. It records page or route views and limited technical context such as referring site, campaign parameters, broad country, browser, device type, and operating system. We also record two custom events: which contact option a visitor selects, and completion of an inquiry with its attachment count and delivery state (notification emailed or submission saved only). We do not send names, email addresses, phone numbers, message text, attachment names or contents, or other contact-form values to analytics.

Vercel Web Analytics does not use cookies. Vercel derives a daily visitor hash from an incoming request to produce aggregated statistics; the hash resets each day and is not designed to identify a person or track someone across sites. Vercel processes this analytics information for us as a service provider. We do not use advertising cookies or retargeting pixels.

Most browsers let you block or delete cookies. Blocking strictly necessary cookies may affect how the Site works. We currently do not respond to “Do Not Track” browser signals. We honor Global Privacy Control (GPC) signals as a request not to sell or share personal information; because we do not sell or share personal information from this Site for targeted advertising, a GPC signal does not change a separate advertising profile we do not keep.

How we use personal information

We use personal information to:

• Provide the Site and respond to meetings, messages, proposals, and press inquiries.
• Send service-related messages about a request you made (including a receipt if we send one).
• Evaluate whether BoardAsk is a fit for a district or organization, and prepare a proposal when asked.
• Operate, secure, and debug the Site, including preventing abuse of the contact form.
• Comply with law, enforce the Terms of Use, and protect BoardAsk, you, or others.
• Create aggregated or de-identified information that does not identify you, and use that for internal analysis of the Site.
• Measure aggregate page traffic and contact-flow events so we can understand Site performance and improve the inquiry process.

We do not use contact-form contents to train generalized AI models. BoardAsk’s product answers (on a live district instance) are generated from that district’s published records under the customer agreement – not from this marketing form.

We do not use this Site for interest-based or targeted advertising, and we do not send marketing email lists from this Site unless you have asked us to follow up about BoardAsk. You can tell us to stop promotional follow-up by emailing us; we may still send messages needed to complete a request you already made.

Retention

We keep personal information as long as needed for the purposes above, including to finish an inquiry, keep a business record of proposals and correspondence, meet legal or accounting requirements, and resolve disputes. Contact submissions and attachments are stored in our database and a private attachments bucket. When we no longer need the information, we delete it, anonymize it, or isolate it from further use.

How we share personal information

We may share personal information with:

• Service providers that host the Site, provide aggregate web analytics, store form data and files, and send email on our behalf. Today that includes Vercel (hosting and Web Analytics), Supabase (database and private file storage), and Resend (email).
• Professional advisors, such as lawyers, insurers, and accountants, when they need it to advise us.
• Authorities and others when we believe in good faith it is necessary to comply with law, protect rights or safety, or address fraud or abuse.
• Business transferees, if we negotiate or complete a financing, sale, merger, or similar transaction involving Just Right Place, LLC or BoardAsk.
• People you designate, if you ask us to copy a colleague or reply on a thread they started.

We do not sell personal information for money. We do not share personal information from this Site for cross-context behavioral advertising. We do not operate a public user directory on this Site.

Your choices

• Access or update. Email contact@recordask.com and tell us what you sent and from which address. We will correct or update what we reasonably can.
• Decline to provide. Required contact fields are needed to reply. If you skip them, we may not be able to complete the request.
• Delete. You can ask us to delete a contact submission or attachment, subject to records we must keep.
• Marketing. We do not run an advertising network on this Site. To stop follow-up about BoardAsk, email us.

Other sites and services

The Site may link to third-party sites (including our studio site and scheduling tools). We do not control those services. Their privacy practices apply to your use of them.

Security

We use technical and organizational safeguards designed to protect personal information, including private storage for uploads and access limited to people who need it to reply. Internet transmission and vendor processing still carry risk. We cannot guarantee that information will never be accessed, disclosed, altered, or destroyed.

International data transfer

We are based in the United States. Vendors that help us run the Site may process information in the United States or other countries. If you contact us from outside the United States, you understand that we process your information in the United States, where privacy laws may differ from those where you live.

Children

The Site is for adults evaluating or buying BoardAsk – districts, solicitors, administrators, and press. It is not directed to children under 18, and it is not a student or parent help desk. If you believe a child provided personal information here, contact us and we will delete it as required by law.

Changes

We may update this Privacy Policy. Material changes will be noted by updating the effective date and posting the revised policy on the Site. Continued use of the Site after the effective date means the updated policy applies to your later interactions with the Site.

How to contact us

For privacy questions or to exercise a privacy right, contact:

• Email: contact@recordask.com
• Mail: Just Right Place, LLC, 2500 Colliery Avenue, Scranton, PA 18505
• Web: Contact

State privacy rights notice

This section applies to residents of U.S. states that have privacy laws granting the rights described below, to the extent those laws apply to us (the “State Privacy Laws”). Rights vary by state and are not absolute. We may decline a request as permitted by law, including if we cannot verify your identity or understand the request.

For this section, “Personal Information” has the meaning given to personal data or personal information in the applicable State Privacy Law, except for information those laws exclude.

Your privacy rights

Depending on your state, you may have the right to:

• Know / access categories and a copy of Personal Information we have collected about you.
• Correct inaccurate Personal Information.
• Delete Personal Information we collected from you.
• Appeal our denial of a valid request.
• Nondiscrimination for exercising these rights.

Sale, sharing, and targeted advertising. We do not sell Personal Information, share it for cross-context behavioral advertising, or process it on this Site for targeted advertising, as those terms are used in State Privacy Laws. We do not use Personal Information from this Site for profiling that produces legal or similarly significant effects.

Sensitive Personal Information. We do not intentionally collect sensitive personal information on this Site. A file you attach might contain it; we use attachments only to reply to that request and do not use them to infer characteristics about you.

Consumers under 16. We do not have actual knowledge that we collect, sell, or share the personal information of consumers under 16 on this Site.

How to exercise rights

Email contact@recordask.com or use Contact. Say that you are making a state privacy request and include the email address you used on the Site. We may need to verify that you are the person the information is about (for example by confirming control of that email). An authorized agent may submit a request; we may require proof of authority, including a power of attorney or signed permission.

Practices in the past 12 months

The following describes our practices currently and during the 12 months before the effective date. Information you type into a free-form field or attach as a file may include other categories.

California Shine the Light. We do not disclose personal information to third parties for their own direct marketing. California residents may still email contact@recordask.com with the subject “Shine the Light Request,” their name and mailing address, and a statement that they are a California resident.

Nevada. We do not sell covered information as defined in Nevada law. Nevada residents who want to opt out of any future sale may email contact@recordask.com.

Texas. We do not sell sensitive personal data as defined by the Texas Data Privacy and Security Act.