Legal
Privacy Policy
Last updated: October 20, 2026
1. Information We Collect
We collect (a) account information you provide such as name, email, role, license type, and state; (b) profile and supervision information including bios, photos, hour logs, goals, and messages; (c) usage and device data such as IP address, browser, and pages visited; and (d) payment metadata processed by our payment provider — we never store full card numbers.
2. How We Use Information
We use information to operate and improve the platform, match supervisees with supervisors, deliver notifications, process payments, prevent abuse, respond to support requests, and comply with legal obligations. We do not sell personal information.
Student Education Records (FERPA)
When a college or university uses Ascend for field education, student records (hours, placements, learning plans, evaluations) are handled on the school's behalf as a "school official" under FERPA. We use them only to provide the service, never sell them or use them for advertising, and return or delete them when the school asks or the agreement ends.
AI Features
Ascend offers optional AI features. Ember (our coaching assistant) is powered by OpenAI, and Scribe transcription is powered by Google Gemini. Content you submit to these features, and for Ember, related records in your account, is sent to these providers to generate a response. Organizations can turn AI features off for their members. Do not enter client identifying information into any AI feature.
Scribe Audio
Scribe recordings are stored in private storage, transcribed, and automatically deleted after the note is submitted or the retention period ends. Deletions are logged.
3. Data Security
Data is encrypted in transit (TLS) and at rest. Access to production systems is restricted to authorized personnel and audited. Row-level security policies isolate user data within our database. Despite these measures, no system is perfectly secure; please notify us immediately if you suspect unauthorized access to your account.
Security
Data is encrypted in transit and at rest. Accounts support multi-factor authentication, and access is limited by role.
4. Your Rights
You may access, correct, export, or delete your personal information at any time from account settings or by contacting us. Where applicable, you have rights under the GDPR and CCPA, including the right to object to certain processing and to lodge a complaint with a supervisory authority.
5. Cookies and Analytics
We use cookies and similar technologies to keep you signed in, remember preferences, and measure aggregate product usage. Analytics events do not include the content of clinical notes or messages. You can control cookies through your browser settings.
6. Third-Party Services
We rely on vetted sub-processors (hosting, database, email delivery, payments, error monitoring) bound by data-protection agreements. A current list is available on request. We do not share information with third parties for their own marketing purposes.
Service Providers
We share data only with providers that help run Ascend: Supabase (database and storage), Lovable (hosting and AI routing), OpenAI and Google (AI features), and Stripe (payments). We do not sell personal information.
7. Contact
Privacy questions or requests? Email help@ascendclinical.org.