Privacy Policy
Last updated and effective: June 17, 2026 (version 2026-06-17)
This Privacy Policy describes how Olive & Rose LLC ("we," "us") collects, uses, and discloses your personal information when you visit or make a purchase from https://www.oliveandrose.net (the "Site"), and when your school uses the ACSI Accreditation Assistant at app.oliveandrose.net (the "Service"). Part B contains the Service-specific disclosures; the Data Processing Addendum ("DPA") governs our processing of school data in detail.
Part A - The Site
​
Information We Collect
When you browse, register, or make a purchase we collect information you provide (name, email address, password, communications, payment details) and information collected automatically, including IP address, computer connection details, and session analytics (page response times, visit duration, interaction patterns). The Site is hosted on the Wix.com platform; your data may be stored through Wix's data storage, databases, and applications on secure servers behind a firewall. Direct payment gateways adhere to PCI-DSS standards.
How We Use Site Information
When you conduct a transaction, submit a form, or create an account on our website, as part of the process, we collect personal information you give us such as your name, address, email address, payment information (including credit card information). Your personal information will be used for the specific reasons stated above only.
We collect such Non-personal and Personal Information for the following purposes:
-
To provide and operate our services;
-
To optimize the Site and analyze usage;
-
To send service-related and (with your consent where required) promotional communications;
-
To provide customer assistance and technical support;
-
To create aggregated, non-identifying statistical data;
-
To comply with applicable laws and regulations.
Minors
The Site and the Service are not intended for individuals under the age of 18, and we do not intentionally collect personal information from children. The Service is specifically designed not to process student information at all — see Part B, Section 8. Parents or guardians may contact us to request deletion of a child's information.
​
How We Store, Use, Share, and Disclose Your Information
Olive & Rose Education is hosted on the Wix.com platform. Wix.com provides us with the online platform that allows us to sell our products and services to you. Your data may be stored through Wix.com’s data storage, databases and the general Wix.com applications. They store your data on secure servers behind a firewall.
All direct payment gateways offered by Wix.com and used by our company adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of major brands. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers.
We may share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request for information we receive, or to otherwise protect our rights.
Advertising
​
We use your Personal Information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:
We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: https://policies.google.com/privacy?hl=en.
​
You can also opt-out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.
We share information about your use of the Site, your purchases, and your interaction with our ads on other websites with our advertising partners. We collect and share some of this information directly with our advertising partners, and in some cases through the use of cookies or other similar technologies (which you may consent to on our website).
​
You can opt out of Google's targeted advertising by visiting: https://www.google.com/settings/ads/anonymous
​
Communication
We may contact you to notify you regarding your account, to troubleshoot problems with your account, to resolve a dispute, to collect fees or monies owed, to poll your opinions through surveys or questionnaires, to send updates about our company, or as otherwise necessary to contact you to enforce our User Agreement, applicable national laws, and any agreement we may have with you. For these purposes we may contact you via email, telephone, text messages, and postal mail.
Cookies & Analytics
Wix uses cookies to provide the platform experience, identify registered members, monitor performance, and keep the platform secure. We use Google Analytics and may share site-usage data with analytics and advertising partners through cookies or similar technologies.
You can opt out of Google Analytics (https://tools.google.com/dlpage/gaoptout) and of targeted advertising through your ad-settings.
The Service at app.oliveandrose.net uses only strictly-necessary session cookies (secure, HttpOnly) to keep you signed in. It does not use advertising cookies.
Wix uses cookies for important reasons, such as:
-
To provide a great experience for you
-
To identify registered members (users who are registered to our site)
-
To monitor and analyze the performance, operation and effectiveness of Wix’s platform
-
To ensure our platform is secure and safe to use.
Review the table below to see which cookies are placed on our site:
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
​
Part B — The ACSI Accreditation Assistant (Service)
6. Information we collect in the Service
​
-
Account and subscription data (via Wix): your member identity, login email, and pricing-plan/subscription status.
-
School profile you provide at onboarding: school name, student enrollment count (a number only — never student identities), target accreditation visit date, accreditation type and history, and primary contact name and email.
-
Uploaded documents: the institutional accreditation evidence your school chooses to upload, plus text extracted from those documents for processing.
-
Generated content: readiness analyses, AI-drafted self-assessment content, and reports produced for your school.
-
Agreement and audit records: which versions of the legal documents and the Data Responsibility Acknowledgement were accepted, by which member account, and when; and content-free operational logs (which school ran which action, when, and with what outcome — never document contents).
​
7. How we process Service data, and who helps us
Your school's data is processed solely to provide the Service, under the roles and safeguards in the DPA. We use these subprocessors:
​
-
Google Cloud (US region) — application hosting, document storage, database, and job queue. Encrypted in transit and at rest, with per-school isolation.​
-
Anthropic (commercial API) — AI analysis and draft generation. Commercial terms apply: no training on your data, and limited-duration retention per Anthropic's commercial data policy.
-
Pinecone — search over ACSI-framework reference content. Queries may include short excerpts derived from your documents; your documents are not stored in Pinecone.
-
Wix — identity, login, and subscription billing. Your direct relationship for payment data.
-
Resend — transactional email (report delivery and service notices). Email content is limited to reports and service messages.
​We do not sell your data, use it for advertising, or permit AI providers to train on it.
8. No personal information — by design and by rule
The Service prohibits uploading personal information that could identify an individual — including student personally identifiable information (rosters, gradebooks, transcripts, IEP/504 records, health records, or documents pairing student names with grades or identifiers) and personal contact details (personal phone numbers, email addresses, and street addresses). Every upload is automatically screened before any AI processing; files that appear to contain such information are refused — not stored, never processed, never sent to any AI provider — and their contents are deleted immediately. Schools commit to redacting personal information before upload via the in-app Data Responsibility Acknowledgement.
​
9. Retention and deletion
​
- Active or paused subscription: your school's data is retained so your accreditation history stays intact across cycles.
- Cancellation or lapse: data is retained for a 90-day grace period, then deleted.
- Refused uploads: a file refused by the personal-data screen is never stored — its contents are deleted immediately at the point of refusal.
- On request: your school may request export (the Service provides a full ZIP export) or deletion of its data at any time at john@oliveandrose.net; we honor verified deletion requests within 30 days, subject to records we must keep by law.
10. Security
​
The Service uses TLS for all connections, encryption at rest, per-school data isolation enforced on every request, secure HttpOnly session cookies, secrets management for all credentials, and content-free operational logging. Security practices are detailed in the DPA's security schedule.
​
Part C — General
​
11. Sharing and legal disclosure
​
We may share information to comply with applicable law, respond to lawful requests and legal process, enforce our agreements, or protect the rights, property, or safety of Olive & Rose LLC, our customers, or others.
​
12. Your rights
​
Depending on your jurisdiction (including California and the European Economic Area), you may have rights to access, correct, amend, delete, or port your personal information, and to withdraw consent to processing. Contact us via the Site's contact form or at john@oliveandrose.net and we will respond as required by applicable law.
