Privacy Policy

Effective date: June 29, 2026 · Last updated: October 1, 2026

Nudge K12, Inc. ("Ebby," "EbbyK12," "we," "us," or "our") provides an AI-powered admissions assistant that K-12 schools, independent and public charter, embed on their websites to help prospective families explore the school, get answers, and schedule visits. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

This policy covers ebbyk12.com, our admissions assistant widget, our admin dashboard, and related services (together, the "Services").

The short version

• We collect contact details you give us (like your name, work email, and school) when you request a demo or contact us.
• On our website we use cookies and tools like the Meta Pixel to understand traffic and measure advertising. You can opt out (see Cookies & Advertising).
• When our assistant runs on a school's website, we process family information on that school's behalf, as their service provider — the school controls that data.
• We never sell your personal information.
• We minimize data by design: we never send students' full names to AI providers (first initial only), we never store raw IP addresses, and we don't use family or student data to train AI models.
• You can ask us to access or delete your information (see Your Privacy Rights).

Our two roles

Ebby handles personal information in two distinct capacities:

As a business (data controller). When you visit ebbyk12.com, request a demo, or correspond with us, we decide how your information is used. This policy governs that.

As a service provider to schools (data processor). When a school embeds the Ebby assistant on its website, families interact with it, and we process their information on the school's behalf and under the school's instructions. The school is the controller of that information, and the school's own privacy policy governs it. For requests about family data collected through a school's website, please contact that school directly (see Student & Family Data).

Information We Collect

1. Information you provide to us

Demo and contact requests: your name, work email address, role, school name, and anything you include in a message or lead form (including forms submitted through Facebook or Instagram lead ads).

Account information: if you're a school administrator, your name, email, role, and authentication details (managed via our identity provider).

2. Information collected automatically on our website

Usage and device data: pages viewed, referring page, browser type, approximate location, and similar analytics data.

Cookies and similar technologies: including advertising and analytics tools such as the Meta Pixel (see Cookies & Advertising).

IP address: used transiently to estimate coarse location and protect against abuse. We do not store raw IP addresses — where location is derived, we discard the IP and retain only the approximate location and a one-way (SHA-256) hash for de-duplication.

3. Information we process on behalf of schools

When the Ebby assistant runs on a school's website, we may process, as the school's service provider:

• Parent/guardian name, email, and phone number (e.g., from a visit-booking form)
• A student's first name and grade level
• Family interests, enrollment timeline, and chat messages
• Pseudonymous visitor and session identifiers used for session continuity and aggregate analytics (these are not linked to a person unless and until a family submits a booking form)

We apply data minimization to all of the above (see How We Protect Your Information).

How We Use Information

We use information we collect as a business to:

• Respond to demo requests and inquiries, and contact you about Ebby
• Provide, maintain, secure, and improve the Services
• Measure and improve our marketing and advertising
• Comply with legal obligations and enforce our terms

We process information on behalf of schools solely to provide the assistant service to that school — to answer family questions, personalize responses, capture inquiries, and schedule visits — under the school's instructions. We do not use it for our own purposes.

We do not sell personal information, and we do not use families' or students' personal information to train AI models.

Cookies & Advertising

Our website uses cookies and similar technologies for functionality, analytics, and advertising. This includes the Meta Pixel, which helps us measure the performance of ads on Facebook and Instagram and reach relevant audiences.

You can control these in several ways:

• Adjust your ad preferences in your Facebook and Instagram account settings
• Use your browser settings to block or delete cookies
• Opt out of interest-based advertising via industry tools such as the Digital Advertising Alliance (optout.aboutads.info) or Network Advertising Initiative (optout.networkadvertising.org)

The assistant widget uses your browser's local/session storage to keep a conversation continuous and recognize returning visitors; it does not require advertising cookies.

How We Share Information

We share information only as described here. We do not sell personal information.

Service providers (subprocessors). We use trusted vendors to run the Services. They may process information only to provide services to us, under contractual confidentiality and data-protection obligations:

Schools. Information families provide through a school's embedded assistant is made available to that school (its authorized staff) through our dashboard.

Legal and safety. We may disclose information to comply with law, enforce our agreements, or protect the rights, safety, and security of users and the public.

Business transfers. If we're involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

Text Messages (SMS)

Some schools use Ebby to send admissions follow-up text messages. If you receive texts through Ebby:

• You opted in first. Texts are sent only to parents and guardians who gave the school permission to text them: on the school's own inquiry form, in a list the school imported with documented opt-in, or directly to the admissions office (recorded on your family's record).
• Reply STOP to stop. One reply ends all texts, immediately and automatically. Reply HELP for help. Your school's office can also record an opt-out for you at any time.
• What you'll receive. Inquiry confirmations, answers to admissions questions, and campus visit scheduling, from your school's admissions office. Message frequency is low, messages are sent during daytime hours, and message and data rates may apply.
• Students are never texted. Recipients are parents and guardians only.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Your mobile number and your text-message consent are used only to send the messages described above. They are never passed to anyone else for their own marketing, and they are never sold.

Children's Privacy (COPPA)

Ebby is designed for adults — parents, guardians, and school staff — not children. The assistant is intended for parents and guardians exploring schools, and we do not knowingly collect personal information directly from children under 13.

Where a school uses Ebby and a parent provides limited information about a child (such as a first name and grade), the school acts as the operator and consenting party under the FTC's school official exception (16 CFR 312.5(c)(3)), as Ebby operates as the school's designated agent for an educational purpose. We minimize child-related data: a student's full name is never transmitted to third-party AI services (first initial only), and no information is collected directly from children.

If you believe a child has provided us personal information, contact us and we will delete it.

Student & Family Data (FERPA)

When families interact with the assistant on a school's website, we process their information as the school's service provider, under the school's direction and agreement with us. The school is the controller of that data.

Pre-enrollment inquiry information is generally treated as CRM/marketing data rather than a FERPA "education record." Regardless, we support FERPA-compatible practices: schools can access all data tied to a family inquiry through an authenticated, school-scoped dashboard, and can permanently delete/anonymize a family's personal information at any time.

If you're a parent or guardian and want to access or delete information you provided through a school's website, please contact that school, which controls the data. We will assist the school in fulfilling such requests.

Data Retention

We keep personal information only as long as needed for the purposes described here, then delete or anonymize it. School administrators can delete a family's personal information from the dashboard at any time; deletion anonymizes identifying fields (name, email, phone, student name, notes, and AI-generated summaries) and clears associated chat messages, while retaining anonymized records for aggregate analytics.

How We Protect Your Information

We use administrative, technical, and organizational safeguards designed to protect personal information, including:

• Data minimization by design — we collect and transmit the least data necessary
• Encryption in transit for data moving between systems
• Row-Level Security on all database tables, blocking direct or anonymous access — all access flows through our authenticated backend
• Role-based, school-scoped access controls so staff see only their own school's data
• No raw IP storage — only coarse location and a one-way hash
• PII kept out of notification emails — staff notifications carry only a first name and a secure link

No method of transmission or storage is 100% secure, but we work to protect your information and continually improve our safeguards.

Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal information, to opt out of certain processing, and to not be discriminated against for exercising these rights.

• For information you gave us as a business (e.g., a demo request): contact us at the address below and we'll respond as required by applicable law.
• For information collected through a school's website: contact the school, which controls that data; we will support the school's response.

To exercise a right, email privacy@ebbyk12.com. We may need to verify your identity before acting on a request.

California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) gives you certain rights regarding your personal information. This section supplements the rest of this policy. It does not apply to information we process on behalf of schools as a service provider — for that, please contact the relevant school.

Categories of personal information we collect. In the past 12 months, we may have collected these categories from website visitors and prospects:

• Identifiers — name, email address, IP address
• Commercial information — demo and inquiry requests
• Internet or other electronic activity — interactions with our website and ads
• Geolocation data — coarse, city-level location (we do not store raw IP addresses)
• Professional information — your role and the school you're affiliated with

We collect this directly from you and automatically through your device, use it for the purposes described in How We Use Information, and disclose it to the service providers listed in How We Share Information.

Sale or sharing. We do not sell your personal information for money. However, our use of advertising technologies (such as the Meta Pixel) may be considered "sharing" of identifiers and internet-activity data for cross-context behavioral advertising under California law. You have the right to opt out — email privacy@ebbyk12.com or use the controls in Cookies & Advertising (including your Facebook and Instagram ad settings and your browser's cookie controls).

Your California rights:

• Know / Access the personal information we have collected about you
• Delete personal information we collected from you (subject to legal exceptions)
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information
• Non-discrimination — we will not discriminate against you for exercising your rights

To exercise these rights, email privacy@ebbyk12.com. We may need to verify your identity, and you may use an authorized agent to submit a request on your behalf.

International Users

We operate in the United States, and your information will be processed and stored in the United States, which may have different data-protection laws than your country. By using the Services, you understand your information may be transferred to and processed in the United States.

Third-Party Links

Our website and the assistant may link to third-party sites or pages we don't control. This policy doesn't apply to those sites; please review their privacy policies.

Changes to This Policy

We may update this policy from time to time. When we do, we'll revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Services after an update means you accept the revised policy.

Contact Us

Questions about this policy or your information?

Nudge K12, Inc.
Email: privacy@ebbyk12.com
3029 Berkeley Ave, Los Angeles, CA 90026

This policy is governed by the laws of the State of California, without regard to conflict-of-law principles.