Privacy Policy

What we collect

When you submit the diagnostic, we collect:

• Your first and last name, work email address, and role
• Your district's name, state, and (optional) approximate enrollment size
• Your responses to the 16 diagnostic questions
• Standard server log information (IP address, browser type, request timestamps) used to operate the site and detect abuse

We do not collect information about students or anyone other than the person completing the diagnostic.

How we use what we collect

• To compute and display your results on screen
• To email you a personalized PDF report
• To add you to PIVOT's customer relationship management (CRM) system so we can follow up about how PIVOT can help your district
• To analyze responses in aggregate so we can improve the diagnostic over time

Where your information is stored

We use trusted service providers to operate the diagnostic. Each provider only receives the information necessary for its function:

• Supabase — secure Postgres database hosted in the United States. Stores your submission and responses.
• Salesforce — PIVOT's CRM. Stores your contact information and a record of your submission so PIVOT staff can follow up.
• Resend — email delivery service. Receives your email address and PDF report to deliver your results.
• Google Cloud — hosts the diagnostic website and processes server logs.

Information stored in your browser

Two things are stored locally in your browser to make the diagnostic work:

• In-progress draft answers are saved in your browser's local storage so you can refresh the page or come back later without losing your place. They never leave your device until you submit, and they are automatically cleared after a successful submission.
• A signed session cookie is set when you submit the diagnostic, or when you enter your access code. The cookie lets you re-open your results page without entering the code. It does not contain personal information and is only readable by the diagnostic site.

What we do not do

• We do not sell your information.
• We do not share your information with anyone other than the service providers listed above.
• We do not use third-party advertising or marketing trackers on the diagnostic.

Retention

We delete your submission and your answers from the diagnostic once it is 2 years old (we run the deletion monthly); your results page stops working then. If you received your results email, the PDF attached to it is yours to keep. A submission we have not finished processing is kept until we have. PIVOT keeps your contact details and a record of your results in its CRM until you ask us to delete them: email info@pivotleaders.org and we will delete your information within 30 days.

Your choices

You can email info@pivotleaders.org at any time to:

• Request a copy of the information we have about you
• Request that we correct or update your information
• Request that we delete your information
• Ask any other privacy-related question

Children's privacy

The diagnostic is intended for adult district leaders. We do not knowingly collect information from anyone under 13.

Security

All connections to the diagnostic use HTTPS. Your submission is protected at rest by database access controls and is only accessible to PIVOT staff via the CRM. Your results page is gated by a 6-digit access code, shown once after you submit and sent only to your email.

Changes to this policy

If we update this policy, we will change the effective date at the top of the page. For material changes, we will note them clearly. The current version is dated September 30, 2026.