Privacy Policy

1. Who we are

SLPDesk ("we", "us") provides clinical documentation, scheduling, and progress-monitoring software for school-based speech-language pathologists. This policy covers data collected through slpdesk.com and the SLPDesk application. Contact us at hello@slpdesk.com with any privacy question.

2. What we collect

• Account data: name, email, role, and district/school affiliation.
• Student and clinical data entered by therapists: caseload rosters, IEP goals, session notes, progress data points, audio recordings, and Medicaid billing fields — entered under the school district's or clinic's authority, not ours.
• Usage data: pages visited, feature usage, and error logs, to keep the product working.
• If you sign in with Google or another SSO provider, we receive your name, email, and profile photo from that provider.

3. HIPAA and FERPA

Student and clinical records handled through SLPDesk are treated as protected health information (HIPAA) and education records (FERPA). We apply role-based access control, per-district data isolation, and audit logging to every record. School districts and clinics remain the HIPAA covered entity / FERPA-responsible party; SLPDesk acts as a business associate / school official under a data processing agreement. To request a BAA or DPA, email hello@slpdesk.com.

4. How we use data

We use collected data to operate, secure, and improve SLPDesk — generating reports, sending scheduled deadline and session emails you've configured, and diagnosing bugs. We do not sell student or clinician data, and we do not use student data for advertising.

5. Data retention & deletion

Data is retained for as long as the district or clinic's account is active, or as required by applicable education/health record retention law. Account owners can request export or deletion by emailing hello@slpdesk.com.

6. Contact

Questions about this policy: hello@slpdesk.com.