Privacy Policy
Last updated: March 21, 2026
This Privacy Policy explains how EWIS+ Ally (“we,” “us,” or “the Platform”) collects, uses, and shares information about “Members” and “Allies.” Our practices are designed to comply with the California Consumer Privacy Act (CCPA/CPRA) and other applicable global privacy frameworks. We are committed to transparency and handle your data with the highest industry standards.
1. Information We Collect
1.1 Onboarding & Professional Data
1.1.1 Allies
We collect contact info, work history, education, certifications, skills, and demographic data to build your ally profile.
1.1.2 Members
We collect contact info, career stage, experience level, education, and specific matching priority rankings.
1.1.3 Background Checks
To ensure community safety, all users must complete a background check via our third-party provider. EWIS+ Ally receives a “Pass/Fail” status; we do not store your full sensitive background report on our local servers.
1.2 Interaction & AI Data
- AI Preparation Inputs: Text and data provided while interacting with the EWIS+ Ally AI agent.
- Chat Transcripts: Full audio or text transcripts of the “Ally Chat” session.
1.3 Categories of Personal Information Collected (California Disclosure)
Under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), EWIS+ Ally may collect the following categories of personal information:
- Identifiers: Such as name, email address, IP address, account login credentials, and device identifiers.
- Professional or Employment Information: Such as work history, career stage, certifications, skills, and professional interests.
- Internet or Electronic Network Activity: Such as interactions with the platform, usage logs, and device metadata.
- Audio or Electronic Communications: Including transcripts or recordings of Ally Chat sessions.
- Inferences: Insights derived from onboarding data and interactions to facilitate AI-driven matching.
- Sensitive Personal Information: Demographic data (e.g., racial/ethnic origin, gender identity) used to ensure inclusive STEAM+ matching, and neural data (if applicable to future AI-driven interactions).
- Sources of Personal Information: We collect personal information directly from users, automatically through use of the Services, and from trusted third-party service providers such as payment processors and background check providers.
This disclosure is provided in accordance with the California Consumer Privacy Act (CPRA), Cal. Civ. Code §1798.130.
2. How We Use Your Information
2.1 AI Matching
To facilitate the connection between Members and Allies using our proprietary AI algorithm.
2.2 Service Improvement
We use non-identifying, de-identified, or aggregated elements of your onboarding data and chat transcripts to train and refine our matching models and AI agents. This allows us to improve the experience for the entire community without exposing your personal identity to the model’s training set.
2.3 Safety & Compliance
To monitor for violations of our Code of Conduct and to investigate reported incidents during chats.
2.4 Payments
To process subscriptions and cycle fees via secure, PCI-DSS compliant third-party payment processors (such as Stripe).
2.5 Automated Decision-Making Technology (ADMT)
EWIS+ Ally utilizes automated systems and machine learning algorithms to assist in matching Members and Allies. EWIS+ Ally performs periodic internal reviews of our matching logic to identify and mitigate unintended algorithmic bias, ensuring that matches are based on professional criteria and user-defined priorities.
- Logic: These systems analyze onboarding data, professional attributes, preferences, and interaction signals to generate recommended matches.
- User Rights & Appeals: In accordance with 2026 California regulations, users may request additional information about the logic involved in our automated matching process, opt-out of such processing (which may limit Service functionality), or request a human review and appeal of significant automated decisions—such as account suspension or match eligibility—by contacting our Privacy Officer at privacy@elevatewomeninstem.com. Further details on our commitment to fairness and your rights can be found in our AI Transparency & Logic Disclosure.
3. Data Sharing & Third Parties
3.1 Sale or Sharing of Personal Information
EWIS+ Ally does not sell your personal information. We also do not share personal information for cross-context behavioral advertising as defined under the California Privacy Rights Act. If our practices change in the future, users will be provided with an opportunity to opt out through a “Do Not Sell or Share My Personal Information” mechanism as required by law.
3.2 Service Providers
We share information with trusted third-party partners who assist us in operating our Services, conducting our business, or servicing you (e.g., payment processors, background check providers, and hosting services). These partners have access to your information only to perform specific tasks on our behalf and are obligated to protect it.
3.3 AI Subprocessors
We utilize enterprise-tier API services from third-party providers (e.g., OpenAI, Anthropic, or Google) to power our AI agents. Data sent to these providers is governed by their enterprise privacy terms, which generally prohibit using your data to train their public foundation models.
3.4 Corporate Transactions
We may sell, transfer, or otherwise share some or all of our assets, including your personal information, in connection with a potential or actual corporate transaction such as a merger, acquisition, reorganization, or sale of assets. In such an event, you will receive notice if your data is transferred and becomes subject to a substantially different privacy policy.
3.5 Legal Disclosures
We may disclose your information to third parties if we determine that such disclosure is reasonably necessary to: (a) comply with any applicable law, regulation, legal process, or appropriate government request; (b) protect any person from death or serious bodily injury; (c) prevent fraud or abuse of EWIS+ Ally or our users; or (d) protect the rights, property, or safety of EWIS+ Ally, our users, or others.
4. Data Security & Security Limitations
4.1 Security Measures
We strive to ensure that our servers and connections incorporate industry-standard encryption and security protocols. We have implemented physical, electronic, and managerial procedures designed to safeguard and secure the information we collect.
4.1.1 Encryption
All data is encrypted in transit via Transport Layer Security (TLS) and at rest using AES-256 or higher.
4.1.2 Access Control
Access to account information, chat transcripts, and sensitive onboarding data is strictly limited to authorized EWIS+ Ally personnel for safety, compliance, and support purposes only.
4.2 Security Limitations
While EWIS+ Ally implements commercially reasonable technical, administrative, and organizational safeguards designed to protect personal information, no method of transmission over the Internet or electronic storage system can be guaranteed to be completely secure. Accordingly, EWIS+ Ally cannot guarantee absolute security of your data. To the extent permitted by applicable law, EWIS+ Ally shall not be responsible for unauthorized access that occurs despite the implementation of reasonable security measures.
4.3 Account Security
Access to your account requires a unique username and password. You are responsible for maintaining the confidentiality of your credentials and should always log out and close your browser at the end of each session.
4.4 Reporting Breaches
IF YOU BELIEVE YOUR PRIVACY HAS BEEN BREACHED THROUGH THE USE OF OUR WEBSITE, APPLICATIONS, OR OTHER SERVICES PLEASE CONTACT US IMMEDIATELY AT: legal@elevatewomeninstem.com.
5. Your Privacy Rights
Depending on your jurisdiction, including if you are a California resident, you may have the following rights:
5.1 Right to Know
Request information about the categories and specific pieces of personal information we collect about you.
5.2 Right to Access
Request a copy of the personal data we hold about you.
5.3 Right to Deletion
Request deletion of your personal information, subject to certain legal exceptions.
5.4 Right to Correction
Request correction of inaccurate personal information.
5.5 Right to Data Portability
Receive your personal data in a structured, commonly used format.
5.6 Right to Non-Discrimination
We will not discriminate against you for exercising your privacy rights.
To exercise these rights, please contact our Privacy Officer at privacy@elevatewomeninstem.com.
6. Data Retention
EWIS+ Ally retains personal information only for as long as reasonably necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements.
Typical retention periods include:
- Account data: Retained while an account remains active and for up to 24 months after account closure.
- Chat transcripts: Retained for three (3) years.
- Payment records: Retained as required for financial reporting and tax obligations.
- Security logs: Retained for up to twelve (12) months.
7. Do Not Track Signals (CalOPPA)
Some web browsers may transmit “Do Not Track” signals. EWIS+ Ally currently does not respond to “Do Not Track” signals as there currently is no consistent industry standard.
8. Contact Us
If you have any questions or concerns about this Privacy Policy, or to exercise your privacy rights, please contact our Data Privacy Officer at privacy@elevatewomeninstem.com.