Security & data privacy
What a district technology director or privacy officer needs before buying. PeachPilot is offered by PromptGenix LLC.
Student data privacy agreement
Most Georgia districts use the Student Data Privacy Consortium (SDPC) agreements. PromptGenix will sign the SDPC National Data Privacy Agreement (NDPA), with the Georgia exhibit, so your legal team can review the same terms they already know. Districts may also send us their own agreement.
Request the privacy agreementServices we use
| Purpose | Provider | What it receives |
|---|---|---|
| AI model | Google Gemini, accessed through the Lovable AI Gateway | The text a staff member submits, after the student-information check. Not used to train models. |
| Database and sign-in | Lovable Cloud | Accounts, district settings, saved work, activity records. Encrypted in transit and at rest. |
| Website hosting | Cloudflare | Serves the website. No student data stored. |
| Local business search | Google Maps | Only a business type and county or city. |
| Payments | Paddle (Merchant of Record) | Billing details for paid plans. PeachPilot never sees card numbers. |
| Lovable email service | Staff email addresses for sign-up and report emails. |
How long data is kept
| Saved work (My Library) | Kept 30, 90, or 365 days, chosen by the district, then deleted automatically. |
|---|---|
| Unsaved results | Not stored. Shown on screen only. |
| Text sent to the AI | Processed to write the answer. Not kept by PeachPilot unless the staff member saves it, and never used for AI training. |
| Activity records | Who used which assistant and when. Never what was typed or written. |
| District policy documents | Kept until the district admin deletes them. |
| Accounts | Deleted on district request at the end of a contract. |
Safeguards
- Staff only. Students never sign in, and there is no student chatbot.
- A student-information check warns before likely names, IDs or birthdates are sent, with one-click Anonymize.
- Each staff member sees only their own work. District admins see activity, never content.
- Automatic sign-out after 30 minutes idle, for shared Chromebooks.
- No data sale, no advertising, no AI training on district data.
Extra care: IEP & 504 Helper
This is the tool closest to protected special education records, so it has stricter rules:
- It is designed to work without any student record. Staff describe needs in general terms (for example, "a 4th grader reading two levels below grade").
- Staff must not paste from IEPs, 504 plans, evaluations, or other education records, or enter names, IDs, birthdates or diagnoses tied to a real child. A warning appears on every use.
- Results are draft wording only. They are not legal documents, and the IEP or 504 team makes every decision under IDEA and Section 504.
- Districts can turn the IEP & 504 Helper off for any role in District Admin.
Certifications
PeachPilot does not yet have an outside security audit such as SOC 2. We will not claim one until it is complete. Questions: clay@promptgenixai.com.