Legal & Trust

Privacy, terms and how your family's information is handled.

Template drafts — not legal advice. NESTA processes information about children, which is protected under FERPA, COPPA, and applicable state privacy laws. Before launch, these documents must be reviewed and approved by a qualified US privacy attorney. Replace the placeholder contact email with your real address.

Important Information

NESTA is designed to help parents organize, understand and navigate their child's special education journey.

NESTA does not replace professional advice or services. Information and guidance provided through NESTA, including AI-generated information, is for general informational and organizational purposes only and should not be relied upon as legal, medical, educational or financial advice.

Where you require advice specific to your child or your circumstances, you should seek guidance from an appropriately qualified professional or relevant organization.

NESTA does not make decisions on behalf of parents, schools, school districts or other professionals. Any information provided should be considered alongside professional advice and your own circumstances.

If you are unsure about an important decision concerning your child, we recommend seeking advice from a suitably qualified professional.

NESTA is a tool for parents and carers of children with special educational needs and disabilities. This policy explains what information we hold, why, and your rights.

What we collect

  • Account email address (used to sign you in).
  • Child profiles you add: name, date of birth, diagnosis, IEP status and dates, school district and school contacts, notes and photo.
  • Documents you upload to the vault, appointments, school incidents, progress notes and saved emails.
  • Security audit logs (e.g. sign-in, data export, deletions) linked to your account.

Why we use it

To provide the service you have requested and with your consent. Health and diagnosis information about a child is sensitive data, processed only with your explicit consent. You can withdraw consent at any time by deleting the data.

How long we keep it

Only until you delete it. You can delete individual documents, a child profile, or your whole account at any time from Settings → Privacy & Security.

Sharing & sub-processors

We do not sell your information. It is shared only with the sub-processors listed in the Third-Party Services section, and only the minimum needed to run the service.

Your rights

  • Access, correct, port or delete your data.
  • Restrict or object to processing.
  • Withdraw consent at any time.
  • Complain to your state Attorney General's office or the FTC if you have concerns.