1. Scope
This notice applies to truemadeai.com, pilot and contact requests submitted through the site, and the Tenet AI governance platform. It does not replace a district agreement, Data Processing Addendum, or the privacy terms of an AI provider that a district chooses to use.
2. Information from the public website
When you request a pilot or contact us, we may receive the information you provide, including:
- Your name, work email, role, district or school, approximate student count, and message.
- Your pilot interests, district size, device fleet, timing, and scheduling preferences.
- Information included in later email or support conversations.
Our hosting and abuse-prevention services may also process standard technical information such as IP address, browser type, requested URL, request time, and security signals. We use that information to operate the site, prevent abuse, and investigate reliability or security issues.
Website analytics
Vercel Web Analytics measures aggregate page visits and a small pilot-request funnel without cookies. Page-view events use only the canonical page path. Funnel events use fixed categories for a pilot-link click, first form interaction, and form result, and may include only a normalized product interest and a fixed result such as accepted, validation error, verification failure, or service error. They never include contact fields, free-text fields, raw form values, names, email addresses, district names, messages, URL query strings, or fragments; the only form-derived value is the normalized product-interest category described above. Vercel may derive aggregate referrer, country, browser, operating-system, and device information from a visit. Vercel states that it does not store information that personally identifies a visitor or reconstruct browsing across different sites, and that its short-lived visitor hash is discarded after 24 hours. This aggregate measurement is not used to identify an individual visitor to TrueMadeAI.
Google Analytics loads only after you choose "Allow Google Analytics." When enabled, it receives a page path without an arbitrary query string, page title, a minimized referrer, and bounded events for pilot-interest links, form starts, accepted pilot requests, assessment completion, resource downloads, and outbound scheduling links. Google may also process standard browser, device, coarse-location, and network information generated by the request. For campaign attribution, the site may send only the allowlisted tags utm_source, utm_medium, utm_campaign, utm_term, utm_content, and utm_id after rejecting values outside a short, restricted character set. The site does not populate those tags from form fields, names, email addresses, district names, assessment answers, or assessment scores, and campaign tags must not contain personal information. Other query parameters and URL hashes are not sent to Google Analytics.
With the same permission, the site stores the first consented touch for up to 90 days and a current-session touch that updates when a later tagged campaign is seen. This is not an authoritative original touch because nothing is captured before permission. It includes only six allowlisted UTM tags, the canonical landing path, and the referrer origin. Referrer paths, query strings, and fragments are excluded. These values are attached to HubSpot only if you submit the pilot form. Declining analytics, Global Privacy Control, or Do Not Track prevents capture and clears this attribution storage.
Advertising storage, Google signals, and ad personalization are disabled. The site honors Global Privacy Control and browser Do Not Track signals by not loading Google Analytics. Your choice is stored in this browser for up to 180 days. You can reopen the choice from "Analytics choices" in the footer and withdraw permission; the site then stops emitting events and attempts to remove its Google Analytics cookies.
3. Information used to operate Tenet
Tenet's hosted services hold the information needed to identify a district user and apply the correct policy, including:
- District, school, class, role, roster, and schedule mappings.
- District policy settings, class rules, platform permissions, and related configuration.
- Account, authentication, support, and operational records needed to run the service.
Tenet Edge performs supported content-sensitive checks on the managed device. Routine prompt and response bodies, raw file contents, and real-to-pseudonym mappings are not sent to or retained by TrueMadeAI's product backend. Coverage varies by AI product, content type, district configuration, and supported interaction path. The selected AI provider still receives the content needed to provide its service under the terms and account configuration that apply to the district's approved use.
Bring-your-own-storage analytics and evidence
Tenet's bring-your-own-storage (BYOS) analytics can send supported, bounded event data directly from the managed client to a district-controlled destination. General analytics exclude raw prompts, responses, file contents, removed identifiers, and pseudonym mappings. Exported records are not routed through or stored by TrueMadeAI's product backend. The district controls destination access, retention, and deletion. Authorized district users may review configured records through the managed Tenet experience.
Incident evidence is a separate data class. When an incident-evidence feature is active for a deployment, a defined safety or compliance event may preserve conversation text and identifying context for district review. Those records are sent to the configured district-controlled destination rather than TrueMadeAI's product backend. The managed client may hold a bounded local delivery queue until export succeeds. Configured alerts may send bounded factual event metadata through TrueMadeAI services, but the standard observational alert path excludes conversation transcripts. The exact event types, destinations, access rules, and retention settings are documented during district review.
4. Tenet Gateway
Tenet Gateway is offered through a founding-district program. It is not represented as a generally available service. Data handling for a participating district is defined in that district's founding-program agreement and Data Processing Addendum before production data is used.
5. How we use information
We use information for limited operational purposes:
- Responding to pilot, procurement, support, and security inquiries.
- Authenticating users and delivering district-authorized policy.
- Operating, securing, troubleshooting, and improving service reliability.
- Meeting contractual and legal obligations.
We do not sell personal information. We do not use student data or customer content for advertising, and we do not use it to train AI models.
6. Service providers and disclosures
We use service providers for hosting, customer relationship management, email delivery, analytics, and abuse prevention. They receive only the information needed to perform those services and act under their own contractual and security obligations. Website infrastructure may include Google Analytics, HubSpot, Resend, and Cloudflare Turnstile when those services are enabled.
We may disclose information when required by valid legal process, to protect the security or rights of users and the service, or as part of a corporate transaction subject to appropriate confidentiality and notice obligations. District data is not disclosed for advertising.
7. District-approved AI providers
Tenet operates alongside AI services approved by the district. Student requests that proceed to an AI provider are handled under the district's agreement and configuration with that provider. TrueMadeAI does not control the provider's independent data practices. Districts should review those terms before authorizing a service.
8. Education privacy
Tenet is designed to support district privacy obligations, including deployments that use the school-official model under FERPA and school authorization permitted under COPPA. The district decides whether those models apply to its deployment and remains responsible for its legal determinations. TrueMadeAI does not provide legal advice.
Data Processing Addendum materials are available for district review. Contact us before deployment if a district requires state-specific terms.
9. Retention and deletion
Website inquiries are retained for as long as needed to respond, maintain business records, and meet legal obligations. Tenet service data is retained according to the signed district agreement and applicable law. BYOS analytics and incident evidence follow the access, retention, and deletion controls of the configured district destination. Districts can request export, correction, or deletion of data held by TrueMadeAI through their authorized contact, subject to contractual and legal requirements.
10. Security
We use administrative, technical, and organizational safeguards appropriate to the information we handle. These include transport encryption, provider-managed encryption at rest for stored service data, district-scoped authorization, and access controls based on role and operational need. No security measure eliminates all risk.
Read the Tenet trust center for a current summary of product boundaries and review materials.
11. Your choices
You may ask us to update or delete information you submitted through the public website. District users should route requests concerning district-managed records through their district administrator so identity and authority can be confirmed.
You can decline or withdraw optional Google Analytics through "Google Analytics choices" in the footer. Global Privacy Control and browser Do Not Track signals also prevent Google Analytics and consented campaign attribution from loading. The cookieless, aggregate Vercel page-view and pilot-funnel measurement described above does not use this optional Google Analytics permission.
12. Children and the public website
The public marketing site is intended for district decision-makers and other adults. We do not ask children to submit pilot or sales inquiries. Tenet may be used by schools with students, but that use is controlled by the district and governed by the district agreement.
13. Changes to this notice
We will update this page when our practices materially change and will revise the date above. Contractual notice requirements in a signed district agreement remain separate.
14. Contact
Privacy questions and Data Processing Addendum requests can be sent to support@truemadeai.com or discussed by phone at 773-766-5694.