Privacy Policy

Last updated: August 2025

At My SteppingStone, Inc. ("Company", "we", "our" or "us"), we respect your privacy and are committed to protecting it through our compliance with this Privacy Policy (“Policy”). This Policy describes how we collect, process, retain and disclose personal data about you when providing services to you through our web application and marketing website that link to this Policy (our "Services") and our practices for using, maintaining, protecting and disclosing that information.

Through the Services.
In communications, including email, text, chat and other electronic messages, between you and the Services.

Please read this Policy carefully to understand our policies and practices regarding your information and how it’s treated. By interacting with our Services or providing us with your information, you agree to the collection, use and sharing of your information as described in this Policy. This Policy may change from time-to-time with or without notice (see additional information below about changes to the Policy). Your continued use of the Services after we make changes as described here is deemed to be acceptance of those changes, so please check the Policy periodically for updates.

The Personal Data That We Collect or Process

We collect personal information you voluntarily provide via web forms, including your name, email address and company. We may also collect non-identifiable information using cookies and analytics to better understand site traffic and usage.

Use of Cookies and Tracking

Our website uses cookies to collect information about how visitors use the site. You can adjust your browser settings to refuse or delete cookies. Because we operate in the U.S. only, we do not provide cookie opt-in banners.

How We Use Your Information

We use this information to respond to inquiries, provide updates and improve our website performance and services. We may use your email to share product information and news, but you can opt out at any time.

Discloser of Your Information

We may disclose information to HubSpot and other third parties; provided, however, we use HubSpot and other services to collect and store your information for communication and marketing purposes only after you have completed a “Contact Us” or “Schedule Demo” form. We do not sell your data. We may share limited data with other third-party service providers to help us operate the website.

We may also disclose your personal data:

To comply with any court order, law or legal process, including to respond to any government or regulatory request.
If we believe disclosure is necessary or appropriate to protect the rights, property or safety of our organization, our customers or others.

Use of Artificial Intelligence (AI)

We use Artificial Intelligence (AI) technologies across our platform to enhance functionality, personalize user experiences and improve the quality of our Services. Our AI systems may help generate content, provide recommendations, support user interactions, detect misuse or automate certain features based on user input and activity.

We are committed to using AI responsibly and transparently. Specifically:

Data Use: We may use de-identified, aggregated or user-provided data to train, improve, or fine-tune our AI systems, but we do not use personally identifiable information (PII) for these purposes unless we have obtained appropriate consent or are otherwise permitted by applicable law.
Human Oversight: We maintain human oversight of AI outputs where necessary, particularly in educational, advisory or safety-critical contexts.
Bias & Fairness: We strive to reduce bias in our AI systems and regularly evaluate outputs for fairness, accuracy and relevance and we utilize a third-party auditor to regularly review our AI capabilities to ensure compliance with current industry regulations.
User Control: Where applicable, users may opt out of certain AI-driven features or request human alternatives, subject to platform functionality.
Transparency: When interacting with an AI-generated response, recommendation or outcome, we will clearly identify it as such.

Our use of AI complies with applicable privacy laws, including the Family Educational Rights and Privacy Act (FERPA), the Children's Online Privacy Protection Act (COPPA) and other relevant data protection regulations.

If you have questions about how AI is used in our Services or would like to request more information, please contact us at support@mysteppingstone.ai.

Children's and Minors' Data

Our Services are not intended for, and we do not knowingly collect any personal data from, children under the age of 13. If we learn we have collected or received personal data from a child under 13 years old without verification of parental consent, we will delete that information.

FERPA Compliance

If and to the extent our Services involve the collection, use, storage or disclosure of student education records as defined under FERPA, we comply with all applicable requirements of FERPA and related regulations.

We recognize that education records are protected under federal law and commit to maintaining the privacy and security of such information. We will only access, use or disclose education records in accordance with the institution's written authorization or as otherwise permitted under FERPA. We do not use student education records for any purposes other than those explicitly authorized by the educational institution and necessary for providing our Services.

In accordance with FERPA:

We implement reasonable administrative, physical and technical safeguards to protect the confidentiality, integrity and availability of education records;
We do not disclose education records to third parties without proper consent or a valid exception under FERPA;
We assist institutions in responding to requests from eligible students to access or amend their education records, as appropriate.
ce and we utilize a third-party auditor to regularly review our AI capabilities to ensure compliance with current industry regulations.

Your State Privacy Rights

Depending on your state of residency, you may have certain rights related to your personal data, including:

Access and Data Portability. You may confirm whether we process your personal data and access a copy of the personal data we process. To the extent feasible and required by state law, depending on your state, data will be provided in a portable format. Depending on your state, you may have the right to receive additional information, and it will be included in the response to your access request.
Correction. You may request that we correct inaccuracies in your personal data that we maintain, taking into account the information's nature and processing purpose.
Deletion. You may request that we delete personal data about you that we maintain, subject to certain exceptions under applicable law.
Opt Out of Using Personal Data for Targeted Advertising, Profiling and Sales. You may request that we do not use your personal data for these purposes.

Important: The exact scope of these rights vary by state. There are also several exceptions where we may not have an obligation to fulfill your request.

To exercise any of these rights, please contact us a support@mysteppingstone.ai.

Some browsers and browser extensions support the Global Privacy Control (“GPC”) that can send a signal to process your request to opt out from certain types of data processing, including data "sales" as defined under certain laws. When we detect such a signal, we will make reasonable efforts to respect your choices indicated by a GPC setting as required by applicable law.

Nevada provides its residents with a limited right to opt out of certain personal data sales.

If you are a California resident, additional information applies to you. To access our supplemental California privacy statement and learn more about California residents' privacy rights, visit https://oag.ca.gov/privacy/ccpa.

How We Protect Your Personal Data

We use commercially reasonable administrative, physical and technical measures designed to protect your personal data from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. However, no website, mobile application, system, electronic storage or online service is completely secure, and we cannot guarantee the security of your personal data transmitted to, through, using or in connection with the Services. In particular, email, texts and chats sent to or from the Services may not be secure, and you should carefully decide what information you send to us via such communications channels. Any transmission of personal data is at your own risk.

The safety and security of your information also depends on you. You are responsible for taking steps to protect your personal data against unauthorized use, disclosure, and access.

How We Retain Your Personal Data

We keep the categories of personal data described in this Policy for as long as reasonably necessary to fulfill the purposes described or for as otherwise legally permitted or required, such as maintaining the Services, operating our organization, complying with our legal obligations, resolving disputes, and for safety, security, and fraud prevention. This means that we consider our legal and business obligations, potential risks of harm and nature of the information when deciding how long to retain personal data. At the end of the retention period, personal data will be deleted, destroyed or deidentified.

If you are a California resident, visit https://oag.ca.gov/privacy/ccpa for more information about the retention periods that apply to the personal data categories we collect.

Changes to Our Privacy Policy

We may update this Policy from time to time, and we will provide notice of any such changes to the Policy as may be required by law. The date the Policy was last updated is identified at the top of the document. We will notify you of changes to this Policy by updating the "last updated" date and posting the updated Policy on the website. We may email or otherwise communicate reminders about this Policy, but you should check the Policy periodically to see any changes.