Who we are
This policy is issued by TPA VENTURES PRIVATE LIMITED, a private limited company incorporated in India (CIN U70200MH2026PTC469252) ("TPA Ventures", "we"). Our registered office is at A Floor 4, Plot 36 Hamam House, Ambalal Doshi Marg, Mumbai, Maharashtra, 400001, India. All customer data, including student data, is hosted in the United States.
This policy covers our website (tpaventures.si) and the TPA Ventures service used by school districts, cooperatives, charter schools and approved private schools ("Schools").
Two kinds of information
Student data: education records and personally identifiable information from education records that a School provides or authorizes us to access, such as evaluation reports, assessment results, IEP content and enrollment data. We process student data only as a school official on the School's behalf and under the School's direction.
Account and website data: names, work email addresses, roles and usage information for School staff, and the contact details visitors submit through our website forms.
How we use student data
We use student data only to provide the service the School has contracted for: extracting baselines, drafting PLAAFPs, goals and prior written notices for educator review, tracking timelines, and producing reports for the School.
We do not sell student data. We do not use it for targeted advertising, to build profiles for non-educational purposes, or to train or improve artificial intelligence models.
Generated drafts are always reviewed by certified educators. TPA Ventures does not make eligibility, placement or service decisions.
How we use account and website data
We use staff account data to operate accounts, provide support, secure the service and send service notices. We use website inquiry data to respond to the request and, where permitted, to send information about TPA Ventures. You can unsubscribe at any time.
We use privacy-respecting analytics on our marketing website. We do not place analytics or advertising trackers inside the application where student data is displayed.
Security
Data is encrypted in transit (TLS 1.2 or higher) and at rest (AES-256). Access is role-based, protected by single sign-on and multi-factor authentication, and logged. We maintain a SOC 2 Type II report, available to Schools under NDA.
Retention and deletion
We keep student data for as long as the School's agreement requires. On termination, or earlier on the School's written request, we delete or return student data within 60 days and provide written certification of deletion. Encrypted backups age out within 35 days after that.
Parent and student rights
Parents and eligible students exercise FERPA rights to inspect, review and request amendment of education records through their School. If we receive a request directly, we refer it to the School and assist the School in responding.
Contact
Questions about this policy: privacy@tpaventures.si. Security reports: security@tpaventures.si. We will post material changes to this page and notify School administrators at least 30 days before they take effect; we will not make material changes to how student data is used without the School's agreement.