Privacy Notice

What We Collect

When you register for a session, we collect:

• Your first and last name
• Your email address
• The sessions you registered for and the time you registered

We do not collect Social Security numbers, government IDs, salary information, payment information, or any data unrelated to running the program.

Action Plans and any worksheets are downloadable templates you complete and keep on your own device. We do not store, transmit, or retain their contents. Any free-text you do submit through the platform (pre-session responses, program messages) is treated as draft, predecisional working material prepared for the program’s internal use.

Why We Collect It

• To confirm your registration and send you calendar invites
• To send reminders the day before each session
• To produce an attendance roster for instructors
• To send any program-related communications between sessions

How Long We Keep It

We keep your data only as long as needed to run the program and to meet the minimum retention required by applicable New York City and Office of Technology and Innovation (OTI) records rules, then delete it.

In practice that means your registration records are kept for the duration of the cohort and a short close-out period, after which all identifying information (name, email, agency, title) is purged from the database. Aggregate, non-identifying counts (attendance percentages, session fill rates) may be kept for program evaluation. Operational logs (audit history and email-delivery records) are kept only as long as needed for security and support, then purged. You can request earlier deletion of your data at any time.

Who Can See Your Data

• Program administrators
• Instructors of the specific sessions you registered for
• The platform’s hosting and database providers
• Our email-delivery provider, which delivers program email and routes any replies to the program inbox
• Our error-monitoring provider, which receives technical diagnostics scrubbed of personal information

Each is a vetted, US-based processor bound by a data-processing agreement covering use, retention, and breach notification. The complete, current list is available to program administrators on our subprocessors page.

We do not sell, rent, or share your data with any third party for marketing, advertising, or any other purpose.

Your Rights

• See what we have. Reply to any program email and we’ll send you everything we hold for your record.
• Correct it. Edit your name any time on your profile page. To correct your agency or title, reply to any program email.
• Delete it. Reply to any program email and request deletion. We comply within 5 business days.
• Cancel a session. Every confirmation email has a cancel link. No login required.

Security

All data is encrypted in transit and at rest. Administrative access is role-restricted and logged, and protected by strong passwords (minimum 16 characters) with two-factor authentication required for every admin account. Automated daily database backups (7-day retention) are managed by our database provider. Public sign-ups are disabled. Accounts are created only via approved program rosters.

Cookies

We use cookies only to keep you signed in, and we do not use tracking, advertising, or analytics cookies. We do use our hosting provider’s privacy-preserving, cookieless analytics to measure aggregate traffic and page performance; it sets no cookies, collects no personal information, and does no advertising or cross-site tracking.

Questions

Reply to any program email or send a message.