Privacy Notice

Scope and information we process

Public visitors may browse course descriptions and public educational material without an account. When you create or use an account, we process your display name, email address, selected learning role, authentication status, account dates, policy-acceptance records, and the technical records needed to provide and protect the account.

Supabase processes passwords, email verification, and authentication sessions for the site. The Grand Alignment does not receive or store readable passwords.

Learning, assignment, and certificate records

When you use connected course features, we may process enrollments, module and content versions, selected responses, activity and assessment results, completion status, course progress, assignments, certificates, and technical event identifiers used to prevent duplicate submissions or synchronize eligible offline work.

A learning record or certificate is an organization-issued record. It is not a professional license, academic degree, or accreditation unless the site expressly says otherwise.

Contact and donor-interest submissions

When you use the Contact page or submit a Founders Circle inquiry, we process the information you provide, such as your name, email address, organization, phone number when requested, selected interests, giving preferences, and message. The site validates and routes these submissions through the organization’s email service to authorized recipients; it does not retain the message body as an ordinary website database record.

Do not place passwords, account credentials, government identifiers, medical records, bank information, payment-card information, or other unnecessary sensitive information in an ordinary website form.

Employee Workspace and secure files

For authorized employees and administrators, the private workspace may process employee profiles, work email addresses, job titles, schedules, assigned work, projects, daily updates, time entries, corrections, time-away requests, contracts, policy acknowledgments, secure files, file-access events, and audit records.

Secure files may include paystubs and payroll-related documents. Those documents may contain compensation, withholding, tax, or other payroll information. They are available only through authenticated, authorized application routes; the system does not create public file links, and file access or download events are logged where the feature provides that record.

The workspace is not intended for full Social Security numbers, complete bank-account credentials, raw payment-card data, medical records, or sensitive identifiers that are not necessary for the work purpose. Authorized users should redact or omit such information before upload whenever possible.

Donations and payment information

Donation checkout is provided by Stripe. Stripe processes payment-card and transaction information under its own terms and privacy practices. The Grand Alignment receives the transaction details and contact information that Stripe makes available for administering and acknowledging a donation, but raw payment-card details should be entered only in Stripe’s checkout and never in an ordinary Grand Alignment form.

Technical data, cookies, and browser storage

The site and its providers process necessary session cookies, authentication tokens, browser storage, request and delivery information, security events, and audit logs. This information is used to keep you signed in, preserve limited device-side work, prevent duplicate actions, diagnose delivery problems, and protect the service.

Network information such as an IP address may appear in ordinary hosting or security logs. Public inquiry forms use a temporary cryptographic digest of a network address for rate limiting when that address is available. The policy-acceptance record does not add an IP address solely for proving acceptance.

Service providers

OpenAI Sites hosts and delivers the application. Cloudflare infrastructure, including Workers, D1, and R2, supports application execution, structured records, and private file or audio storage. Supabase provides account authentication and email verification. Resend delivers operational messages and website inquiries. Stripe processes donation payments. OpenAI services may also support configured narration or generative-AI-assisted educational material.

These providers process information for their assigned service roles and under their applicable agreements and privacy terms. The site does not currently offer public account sign-in through ChatGPT.

Why we use information

We use information to operate and secure accounts; provide courses, progress, assignments, certificates, employee tools, contracts, and secure files; respond to inquiries; process donations; send required messages; maintain accurate operational and audit records; investigate misuse or failures; and meet applicable legal and recordkeeping obligations.

The Grand Alignment does not sell personal information or use account-policy acceptance as consent to promotional email.

Disclosure and access

We disclose personal information to the service providers described above, to authorized personnel who need it for their work, at your direction, or when reasonably required by law, safety, security, or protection of rights. Ordinary users cannot view another person’s account, learning, employment, secure-file, or policy-acceptance record. Authorized administrators receive only the access provided by their role.

Retention

We retain information for as long as needed for the account or service, the purpose for which it was collected, security and audit integrity, dispute handling, and applicable legal, tax, employment, nonprofit, or recordkeeping duties. Retention therefore varies by record category rather than using one period for everything.

Account closure removes or disables access, but it may not erase records that must remain for security, audit history, employment, payroll, contracts, donations, issued certificates, or legal obligations. Policy-acceptance records are retained as append-only evidence of the versions accepted.

Your choices and requests

You may use the Contact page to request access to or correction of account information, ask a privacy question, request account closure, or request deletion where available. We may need to verify your identity and may retain information when an exception or legal obligation applies. Marketing enrollment, if offered, is optional and separate from the required account agreement.

International processing and data location

The site and its service providers may process information in the United States and other locations where they operate. The Grand Alignment does not promise that all information will remain in one country or in a particular data-residency region.

Security

We use measures designed to protect information, including verified authentication, server-side authorization, role-based access, private object storage, limited-purpose cookies, secure transport, and audit records. No transmission, service, or storage method can be guaranteed completely secure. Protect your credentials, do not share your account, and report suspected unauthorized access.

Minimum age

The Grand Alignment does not offer an account or direct online service to a child under 13 and does not provide a parent-managed account pathway for a child under 13. Account holders must also meet any higher minimum digital-consent age that applies where they live.

Early-learning material remains available as a resource for parents, guardians, educators, and other adult facilitators to use with younger learners without creating an individual account, profile, login, or course-progress record for the child.

Contact and changes

Use the Contact page for privacy or security questions. We may update this notice when practices or services change. A material update may require account holders to acknowledge a new version before returning to a private account area.