Legal
Privacy Policy
Last updated: October 7, 2026
The Inclusive Practice, LLC ("we," "us," or "our") operates PULSE at pulseforeducation.com. This Privacy Policy explains how we collect, use, and protect information when you use our platform.
1. Who We Are
The Inclusive Practice, LLC is an educational consulting and technology company headquartered in Connecticut. PULSE is a workload analysis, scheduling, and organizational health platform built for special education providers and administrators in K–12 school districts. We are not a healthcare provider or covered entity under HIPAA.
2. Information We Collect
Account Information
Your name, email address, and hashed password. If you sign in with Google, we receive your name and email from Google OAuth.
Workload Profile Data
Your role, FTE allocation, district and building name, bargaining agreement terms, and weekly service schedule. This is provider-level professional information — not student medical or therapeutic records.
Student Roster Data (School and District Plans)
Administrators may import student names or initials, grade level, disability category, and service minutes. We never collect Social Security numbers, medical records, psychological evaluations, or Protected Health Information. Student data is used solely to calculate caseload and schedule compliance — never for advertising or sale.
Usage Data
PULSE's own servers record which parts of PULSE each account uses, one entry per day. We use these records to keep PULSE secure, to improve it, and to show each district how its staff use PULSE, as counts by role and school, never one person's activity. We keep them for 400 days.
Payment Information
Payments are processed by Stripe. We do not store credit card numbers. We retain transaction records including plan type, amount, and billing email.
Uploaded Schedule Documents
Providers and administrators may upload photos, PDFs, spreadsheets or other documents of a weekly service schedule or a school's master bell schedule. An uploaded file is kept only until PULSE reads it and the results are confirmed, and it is deleted within 30 days of upload at most. PULSE keeps what was extracted from the file and a fingerprint of it (a sha256 hash that cannot be turned back into the file), never the file itself. Student names or initials written on an uploaded schedule are read so that each session can be matched to a student on the provider’s caseload, and the names as written are kept with the schedule that was extracted from the file.
Aggregate Research Use
De-identified, aggregate data may be used to study special education staffing and workforce trends. This use is governed by the data privacy agreement your district signs with us — the authoritative instrument — and not by any per-user setting.
3. How We Use Your Information
- —To provide, operate, and improve the PULSE platform
- —To calculate workload utilization rates and generate reports
- —To send transactional emails (account confirmation, password reset, invitations)
- —To respond to support requests
- —To detect and prevent fraud, abuse, and security incidents
- —With your consent, to send product updates and research findings
- —To study special education staffing and workforce trends using de-identified, aggregate data, as governed by the data privacy agreement signed with your district
We never sell your data. We never use your data to train AI models without explicit consent. We never use student data for advertising or behavioral profiling.
4. FERPA Compliance
PULSE is designed to support, not burden, FERPA compliance.
The Family Educational Rights and Privacy Act (FERPA) protects the privacy of student education records. When PULSE is used by a school district, the district is the responsible educational agency and The Inclusive Practice, LLC acts as a "school official" providing services under the district's direction.
- —PULSE does not store full student education records — only service-delivery data needed to verify schedule compliance and calculate provider workload.
- —Student data entered into PULSE is owned by the district, not by The Inclusive Practice, LLC.
- —We do not disclose student data to third parties except as required by law or directed by the district.
- —Districts may request deletion of all student data at any time by contacting eric@theinclusivepractice.com
- —We support districts in fulfilling parent requests for access, correction, or deletion of records.
- —PULSE does not collect data directly from students. The platform is used exclusively by adult professionals.
- —In compliance with the Student Online Personal Information Protection Act (SOPIPA) and similar state laws: PULSE does not use student data for targeted advertising, does not build student profiles for non-educational purposes, does not sell student data, and does not disclose student data except as required to provide the service or as required by law. Districts in states with specific ed tech privacy requirements (including California, New York, Colorado, Virginia, Texas, and Connecticut) may request a Data Processing Agreement (DPA) by contacting eric@theinclusivepractice.com.
5. Data Sharing
Service Providers: Supabase, Inc. — database, sign-in and file storage; Amazon Web Services, Inc. — secure transfer and storage of district data feeds; Vercel, Inc. — hosting, content delivery and performance measurement; Anthropic, PBC — AI language models, for document extraction and narrative; Resend, Inc. — transactional email; Functional Software, Inc. (Sentry) — error monitoring (error reports only); beehiiv, Inc. — the newsletter, for those who opt in; Google LLC — Google Sign-In; Google LLC (Calendar) — optional staff calendar connection; Google LLC (Drive) — optional sharing of files a staff member picks; Microsoft Corporation — optional staff calendar connection.
Each is bound by a data processing agreement and prohibited from using your data for their own purposes. The full current list is at /legal/subprocessors.
Contacted by your browser: Cloudflare, Inc. — Turnstile, the automated-abuse check on public forms; Internet Archive (Open Library) — book cover images in the professional library; Google LLC (YouTube) — embedded lesson video; Vimeo, Inc. — embedded lesson video; Google LLC (Drive video preview) — embedded lesson video hosted in Google Drive.
These load embedded content or run a security check, so they see the request — an address and a referring page. We send them no district, staff or student data.
Legal Requirements: We may disclose data if required by law, subpoena, or court order.
Business Transfers: If The Inclusive Practice, LLC is acquired, your data may transfer as part of that transaction. We will notify you beforehand.
With Your Consent: No other sharing without explicit consent.
Google User Data and Limited Use
PULSE's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Google Calendar (calendar.readonly and calendar.events: read and write). If you connect your Google Calendar, PULSE reads your calendar events each time you open your PULSE calendar and shows them beside your schedule. It does not store their titles, descriptions or guests. PULSE also writes to your calendar: the first time you edit or schedule an event from PULSE, Google asks you to allow it, and after that PULSE changes your calendar only when you create, move, rename, invite people to or delete an event from PULSE. A student's name appears in the title of an event PULSE writes only when the Google account is on your school district's own Google Workspace domain, which your district declares to PULSE. On any other Google account, including a personal one, PULSE writes a title that names no student. If you tell PULSE what an event was (for example, an IEP meeting), PULSE stores your answer with the event's date and time so your workload can count it. If you import sessions from your calendar, their titles are kept for up to 7 days while you review them; what you confirm becomes part of your schedule, and the rest is deleted.
Google Drive (drive.file). If you connect Google Drive, PULSE can access only the individual files you pick in Google's file chooser. When you share one into PULSE, PULSE stores its name, type, owner and link. At your request, PULSE can give the people in that conversation view access to that file, and it can remove that access. If you choose Save to Google Slides on a report, PULSE creates that presentation in your Drive from the report's de-identified figures. A deck that includes student information can only be downloaded; PULSE never saves it to Google Drive.
Your Google account (openid, email). PULSE uses your Google account's email address only to show which account is connected.
We do not use Google user data for advertising, do not sell it, and do not use it to train generalized AI or machine-learning models. We transfer it to others only as necessary to provide these features, to comply with the law, or as part of a merger or acquisition with notice to you. People at The Inclusive Practice, LLC do not read it except with your permission, for security, or to comply with the law. You can disconnect at any time from Settings, Your connections, which withdraws PULSE's permission at Google and deletes the access tokens PULSE held.
6. Data Security
TLS encryption in transit, AES-256 encryption at rest via Supabase, access scoped to each user's own organization by row-level security in the database and by checks in the application, and regular security reviews. We will notify affected users promptly in the event of a data breach.
This site is protected by Cloudflare Turnstile to prevent automated abuse. Cloudflare's Privacy Policy and Terms of Service apply to data processed through Turnstile.
7. Data Retention
We retain account data while your account is active. Deletion requests are processed within 30 days. Anonymized aggregated research data may be retained indefinitely.
8. Your Rights
- —Access the personal data we hold about you
- —Correct inaccurate data
- —Request deletion of your account and associated data
- —Withdraw research consent at any time
- —Export your workload profile data
Contact: eric@theinclusivepractice.com
9. Children's Privacy
PULSE is for adult professionals only. We do not knowingly collect personal information directly from children under 13. Student data entered by administrators is governed by FERPA as described in Section 4.
10. Cookies and browser storage
Essential and preference cookies (theme, time zone); no tracking or advertising cookies. Disabling cookies will prevent login.
PULSE also keeps a few items in your browser's own storage on the device you use. They stay on that device and are not sent to us: display choices (for example, whether the side menu is collapsed and which calendar view you used last), which tours and notices you have already seen, how many decisions were waiting the last time you opened your home page, and your most recent page searches in the search bar, which never include a student or staff member. Clearing your browser's site data removes them. On our public website, your browser keeps the first page you visited and the link that brought you there; it is sent to us only if you sign up for our newsletter.
11. Changes
Material changes will be communicated by email before taking effect. Continued use constitutes acceptance.