Skip to content

Privacy Policy

Effective July 11, 2026 · Last updated July 11, 2026

1. Who We Are

StoryLab is operated by IvyStoryLab LLC (“StoryLab,” “we,” “us”) at ivystorylab.com. We provide one-on-one writing and humanities coaching for students of all ages, delivered in person or by video. This Privacy Policy explains what data we collect, why, and how we protect it.

2. Information We Collect

2.1 Information you provide

  • Account information:the enrolling parent or guardian’s name and email, the student’s name, and program details (such as grade, goals, and schools of interest).
  • Student work: essays, drafts, and materials a student or family shares with a coach.
  • Communications: messages, scheduling requests, and feedback you send us.
  • Session recordings: video-session recordings, where made, with participant consent.
  • Payment information: processed by Stripe. We do not store full card numbers; we receive transaction metadata (amounts, dates, package status).

2.2 Information we generate

  • Coaching records: session notes, summaries, and the updates we prepare for families.
  • Usage data: sessions scheduled and completed, and basic website interactions.

2.3 Automatically collected

  • IP address, browser type, and device type;
  • Pages visited and interactions on our website;
  • Cookies used for authentication and session management.

3. How We Use Your Information

  • To provide coaching: matching students with coaches, scheduling sessions, reading and responding to student work, and preparing feedback and family updates;
  • To run our practice: processing payments, sending account and scheduling messages, and maintaining the security of our systems;
  • To support our coaches with software: some of the tools we use are AI-assisted (for example, to help organize scheduling or draft session notes and family updates). These tools support our people; they do not replace the human coaching relationship, and we do not permit our AI providers to use your data to train their general models;
  • To keep students safe: acting on serious welfare concerns as described below;
  • To improve our service: understanding, in aggregate, how families use our website and coaching.

We do not sell your personal information, and we do not use it for advertising.

4. How We Share Your Information

We share data only in these circumstances:

  • With the student’s coach and our staff: so they can provide and coordinate coaching for that student;
  • With service providers:payment processing (Stripe), video sessions (Google Meet), hosting, and the AI providers behind the AI-assisted tools we use to support coaching. Data is shared only as needed to provide these services and is subject to each provider’s terms;
  • As required by law: when required by law, subpoena, or legal process, or when we believe disclosure is necessary to protect the rights, safety, or property of a student, a family, or others.

5. Students & Minors

We take the privacy of student data seriously, especially for minors.

  • Enrollment through a parent or guardian:minors participate only through a parent or legal guardian, who is the account holder, agrees to these policies on the student’s behalf, and consents to their child’s participation.
  • Video-session consent: where a session is recorded, we do so with participant consent, and consent can be withdrawn at any time by contacting us.
  • Safety:if a coach becomes aware of a serious concern for a student’s welfare — such as signs of distress, self-harm, or abuse — we will respond appropriately, which may include contacting the parent or guardian and, where warranted, directing the student or family to emergency resources.

6. Data Retention

  • Account and coaching records: retained while your account is active and for a reasonable period afterward to support the coaching relationship, then deleted or de-identified, except where retention is required by law;
  • Student work: retained so a coach can support the student across sessions; you may ask us to delete it (see Your Rights);
  • Payment records: retained as required by tax and financial-reporting laws (typically seven years).

7. Data Security

We use industry-standard measures to protect your data, including encryption in transit (TLS), encrypted storage, and access controls that limit who can see a student’s information. No system is perfectly secure; if we discover a breach affecting your personal information, we will notify you and applicable authorities as required by law.

8. Your Rights

Depending on your location, you may have the right to:

  • Access the data we hold about you;
  • Correct inaccurate data;
  • Delete your data, subject to retention requirements;
  • Receive your data in a portable format;
  • Withdraw consent (for example, recording consent); and
  • Object to certain processing.

To exercise any of these rights, email us at storylab.ivy@gmail.com.

9. Cookies

We use essential cookies for authentication and session management. We do not use advertising cookies or third-party tracking cookies. Essential cookies cannot be disabled, as our website cannot function without them.

10. Third-Party Services

  • Stripe — payment processing (Privacy Policy);
  • Supabase — database and authentication (Privacy Policy);
  • Vercel — website hosting (Privacy Policy);
  • Google Meet — video sessions (Privacy Policy);
  • AI providers (such as OpenAI and Anthropic) — power the AI-assisted tools we use to support coaching; we do not permit them to use your data to train their general models.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you — for example, by email or through our website — before they take effect.

12. Contact

Questions or concerns about your privacy? Email us at storylab.ivy@gmail.com. See also our Terms of Service.