Privacy Policy

How the Sculpting Choices Autism Foundation collects, uses, and protects your information on the SCAIP\u2122 platform.

Last updated: September 2, 2026

Our Commitment

Sculpting Choices Autism Foundation, Inc. (“the Foundation”) respects your privacy. This policy explains what information we collect through the SCAIP\u2122 platform, why we collect it, how it is protected, and the choices you have. We build to HIPAA-aligned standards and do not process protected health information (PHI) until formal certification and Business Associate Agreements are in place.

What We Collect

Information We Collect

Only what is needed to operate the platform and serve your needs.

Account Information

  • Name, email address, and password (stored as a one-way hash) used to create and secure your login.
  • Account type (parent, professional, school, or hospital) and, for organizations, the organization name.
  • Role assignment (user or admin) that determines what data you can access.

Profile & Client Data

  • Client profiles you create (child or client name, date of birth, diagnosis status, treatment, notes) — visible only to you and admins.
  • Family Roadmap entries (child name, age, stage, completed steps, notes) — visible only to you and admins.
  • Directory profile details you choose to publish (bio, phone, email, organization).

Messages & Referrals

  • Secure messages you send or receive within the platform, including subject, body, sender, and recipient.
  • Referral records (client name, services requested, urgency, status, response notes) — visible to the referring user, the receiving organization, and admins.
  • Notifications generated when messages or referrals are created or updated.

Usage & Diagnostic Data

  • Analytics events (e.g., which resources you viewed or searches you ran) used to improve the platform.
  • Contact form submissions, newsletter sign-ups, event registrations, and donation records.
  • Technical logs needed to operate, secure, and troubleshoot the platform.
How We Use It

How We Use Your Information

To operate, secure, and improve the platform \u2014 never sold.

  • Create and manage your account and role-based access.
  • Display your directory listing and enable messaging and referrals.
  • Respond to contact requests, applications, and registrations.
  • Process donations and issue receipts.
  • Improve content, resources, and the platform experience.
  • Detect, prevent, and respond to security and fraud issues.
  • Comply with legal obligations and protect the Foundation’s rights.

We do not sell your personal information to third parties.

Your Rights

Your Privacy Rights

You control your data \u2014 here is what you can do.

Access

You can request a copy of the personal data we hold about you. Account holders can view their own profiles, roadmaps, messages, and referrals directly within the dashboard.

Correct

You can update or correct your account information, directory profile, client profiles, and roadmap entries at any time. Request corrections to other records by contacting us.

Delete

You can delete your own profiles, roadmaps, and directory listings. You may request deletion of your account and associated data, subject to legal retention obligations.

Opt Out

You can opt out of marketing communications and analytics tracking. You cannot opt out of data required to operate the platform or comply with legal obligations.

Security & HIPAA

How We Protect Your Data

Layered technical and organizational safeguards.

Hosted on Base44 cloud infrastructure with TLS 1.3 encryption in transit and at rest.
Role-based access control and row-level security so users only see data their role permits.
Separate production and non-production environments; test data only until formal HIPAA audit.
Audit logging of administrative actions and verification workflows.
Protected Health Information is not processed until HIPAA certification and BAAs are executed.

Cookies & Analytics

We use essential cookies to keep you logged in and the platform working, and analytics to understand usage. You can disable non-essential cookies in your browser; some features may not function as a result.

Data Retention

We keep your data only as long as needed to provide services and meet legal obligations. You can request earlier deletion of your own records; we will honor requests unless retention is legally required.

Children\u2019s Privacy

The platform may store information about minors (e.g., a child\u2019s name and diagnosis status) entered by a parent or authorized guardian who manages that profile. We do not knowingly collect personal information directly from children. Guardians control and may delete these records at any time.

Changes & Contact

We may update this policy as the platform evolves; material changes will be posted here. For privacy requests or questions, use the Contact page or reach the Foundation directly. This policy is provided for transparency and is not a substitute for formal legal or compliance counsel.