Enterprise Search / Productivity · flintk12.comFlint
Graded against 811 verified platforms, from its own policy text. Automated assessment against a published rubric — not legal advice.
No lens is bandable yet — banding requires fully verified documents with on-criteria findings. The gap is shown honestly, never estimated.
Partially verified: Privacy Policy assessed. Everything below comes only from what was read in full.
Watch: Data retention
Start here. These are the highest-risk verified clauses AIRIN found in the platform's own policy text.
Obliges the company to retain personal information only as long as necessary for the purposes stated in the privacy notice or as required or permitted by law, sets an upper limit tied to account existence, and requires deletion or anonymisation once there is no ongoing legitimate business need — establishing a bounded retention standard protective of users.
Describes in summary form the categories of personal information that may be processed depending on how users interact with the services, and notes that online data partners or vendors may use cookies, establishing the factual scope of data collection activities.
States the purposes for which personal information is processed (providing, improving, and administering services, communication, security and fraud prevention, legal compliance, and consent-based purposes) and asserts an obligation to have a valid legal reason before processing, governing the controller's conduct.
How to read this page: Overall risk rates what Flint's own policy terms mean for your prompts, outputs, and data. The benchmark bands below grade those same verified terms relative to peers — a platform in a risky-by-default category can rate HIGH risk and still grade STRONG against its peer set. Both trace to the cited findings.
Partially verified — Privacy Policy — Verified (read in full, 123 findings). Findings below are from fully-read, verified documents only; remaining core documents are pending capture.
Terms not yet captured
AIRIN has not yet captured a gate-verified Terms of Service document for this platform.
- Privacy PolicyVerified - read in full - 123 citationsLast captured 2026-07-20
Only citation-backed plan differences are shown here; absent cells mean AIRIN has not verified a tier-specific claim.
Provides a procedure for users to raise questions or concerns, including a named contact email, and identifies a Data Protection Representative (DataRep) for certain regional users, specifying contact methods by email (with a required subject-line instruction) and online form.
" Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, ..."
Imposes multiple protective restrictions on Student Personal Data and Student-Created Content: data must be used solely for educational purposes, prohibits use for marketing without prior consent, prohibits disclosure or sale to third parties or business partners, and recognises school ownership of personally identifiable student information — all user-favorable restrictions on the controller's use of student data.
"We will consider and act upon any request in accordance with applicable data protection laws. How do we define and use student data? We are committed to the privacy and security of Student Personal Data and Student-Created Content and disc..."
Defines the legal bases the company relies on to process personal information, including consent, legal compliance, contractual obligations, protection of rights, and legitimate business interests, and identifies specific consent-based processing conditions applicable to certain users.
" In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with servic..."
Permits collection of personal information produced by an individual in the course of employment, business, or profession, provided collection is consistent with the purposes for which it was produced, as an exception to standard consent requirements.
" If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced"
Specifies the data elements within this sensory information category (images and recordings created in connection with business activities), defining the scope of covered data.
" Images and audio, video or call recordings created in connection with our business activities"
Enumerates specific data elements within the professional information category, including job-application data, defining the scope of employment-related data covered.
" Business contact details in order to provide you our Services at a business level or job title, work history, and professional qualifications if you apply for a job with us"
Grants users who qualify as California residents the right to request, once per year and at no charge, information about categories of personal information disclosed to third parties for direct marketing purposes and the identities of those third parties, and establishes the procedure for making such a request.
" California Civil Code Section 1798.83, also known as the "Shine The Light" law permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal informati..."
Grants users the right to request deletion of their personal information, obligates the business to honor such requests, and carves out exceptions such as legal obligations, protection against illegal activities, and other consumers' rights, establishing both the right and its limitations.
" Right to request deletion of the data — Request to delete You can ask for the deletion of your personal information. If you ask us to delete your personal information, we will respect your request and delete your personal information, su..."
Clause A indicates that online data partners may link automatically collected information (like IP address) to other personal information, whereas Clause B explicitly states that for student users, this data is de-identified, not linked to personal information, and not sold to third parties or business partners.
" In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services. Our online data partners or vendors may use cookies and related technologies to connect your activities with other personal information they or others may hold about you, such as your email or online profiles. We automatically collect certain information when you access or log into our website, or visit, use, or navigate the Services. This information can include name and contact information, professional contact details (such as employer name, job title, phone number, and work address), device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes. We also use this information to send you communications to these emails or profiles, and otherwise improve and develop the Services. Like many businesses, we also collect information through cookies and similar technologies. You can find out more about this in our Cookie Notice: https://flintk12.com/cookies. The information we collect includes: Log and Usage Data . "
"This information is de-identified and aggregated to protect individual Student privacy. We do not link this automatically-collected data to a Student’s personal information. These data are stored and used internally and are not sold to third parties or business partners. We use this information to analyze trends, administer the Services, track users’ movements around the Services, gather demographic information about our user base, and better tailor our Services to our users’ needs. We may also collect IP address, device identifier or a similar unique identifier from Student users of our Services; we use such identifiers solely to support the internal operations of our Services in the same manner as described above, including to maintain or analyze their functioning; perform network communications; authenticate users or personalize content; and protect the security or integrity of users and our Services. Data collected automatically is stored and used for only as long as a user has an account with us, and is viewable, editable, and deletable upon request by a Student’s Parent and/or School. If you are a School or Parent wishing to manage your Student’s Personal Data or have any questions about Student Personal Data, please email us at support@flintk12.com . "
Within one documentClause A indicates that online data partners may use automatically collected information to connect user activities with other personal information, while Clause B explicitly states that Student Personal Data will not be disclosed or sold to third parties or business partners.
" In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services. Our online data partners or vendors may use cookies and related technologies to connect your activities with other personal information they or others may hold about you, such as your email or online profiles. We automatically collect certain information when you access or log into our website, or visit, use, or navigate the Services. This information can include name and contact information, professional contact details (such as employer name, job title, phone number, and work address), device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes. We also use this information to send you communications to these emails or profiles, and otherwise improve and develop the Services. Like many businesses, we also collect information through cookies and similar technologies. You can find out more about this in our Cookie Notice: https://flintk12.com/cookies. The information we collect includes: Log and Usage Data . "
"We will consider and act upon any request in accordance with applicable data protection laws. How do we define and use student data? We are committed to the privacy and security of Student Personal Data and Student-Created Content and disclose and use these data solely for educational purposes and to better provide educational experiences through our Services. Student Personal Data and Student-Created Content will not be used for marketing purposes without prior consent, and will not be disclosed or sold to third parties or business partners. Schools own all personally identifiable student information, including name, ID number, and photo, as well as all Student Personal Data and Student-Created Content. Learn more about student data collection, usage, and rights . Want to learn more about what we do with any information we collect? Review the privacy notice in full ."
Within one documentClause A explicitly states that Student-Created Content is not disclosed to third parties, while Clause B implies that online data partners or vendors may use personal information (which includes Student-Created Content) when the services are used, creating an opposing claim about data sharing.
" In Short : Student-Created Content is only used for educational purposes and not sold or disclosed to third parties or business partners. Through the use of our Services, Students may produce Student-Created Content. Some examples of this include but are not limited to chat message history, assignment submissions, essay texts, and audio recordings. Any Student-Created Content is stored in our systems for the sole purpose of assessing, tracking, and archiving Student’s learning progress. We do not disclose or sell Student-Created Content to third parties or business partners. Student-Created Content may be shared with other Students at their School and with administrators and teachers at their School. Our policy considers any Student-Created Content as “educational records” under FERPA. As such, upon request, Parents can view and delete any of their Student’s Student-Created Content as long as their Student is under the age of 18. If you are a School or Parent wishing to manage your Student’s Student-Created Content or have any questions about Student-Created Content, please email us at support@flintk12.com . "
" This summary provides key points from our privacy notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for. What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Further, when you access or log into our website, our online data partners or vendors may use cookies and related technologies to connect your activities with other personal information they or others may hold about you, such as your email or online profiles. Learn more about personal information you disclose to us . Do we process any sensitive personal information? We may process sensitive personal information when necessary with your consent or as otherwise permitted by applicable law. Learn more about sensitive information we process . Do we receive any information from third parties? The information that Flint receives from third parties is limited to rostering information and only when a User chooses to make use of our SIS and LMS rostering integration options to import their school’s roster. Roster information may include users' first name, last name, email address, and associated courses at the school. How do we process your information? "
Within one documentClause A describes general data sharing with online data partners who may connect activities with other personal information, which directly opposes Clause B's strict prohibition on disclosing or selling Student Personal Data to third parties or business partners and using it for targeted marketing.
" In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services. Our online data partners or vendors may use cookies and related technologies to connect your activities with other personal information they or others may hold about you, such as your email or online profiles. We automatically collect certain information when you access or log into our website, or visit, use, or navigate the Services. This information can include name and contact information, professional contact details (such as employer name, job title, phone number, and work address), device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes. We also use this information to send you communications to these emails or profiles, and otherwise improve and develop the Services. Like many businesses, we also collect information through cookies and similar technologies. You can find out more about this in our Cookie Notice: https://flintk12.com/cookies. The information we collect includes: Log and Usage Data . "
" We are committed to the privacy and security of Student Personal Data and Student-Created Content and disclose and use these data solely for educational purposes and to better provide educational experiences through our Services. We will collect, use, share, and retain Student Personal Data and Student-Created Content only for purposes for which we were authorized by their School or the parent/student. Student Personal Data and Student-Created Content will not be used to target marketing and advertisements to Students, and will not be disclosed or sold to third parties or business partners. Schools own all personally identifiable student information, including name, ID number, and photo, as well as all Student Personal Data and Student-Created Content. Our vendors with whom Student Personal Data and Student-Created Content is shared in order to deliver the educational service, if any, are obligated to follow the same commitments as outlined in this privacy policy."
Within one documentClause A states student data is used solely for educational purposes and complies with COPPA/FERPA, while Clause B describes automatic collection and linking of user activities to 'online profiles' by 'online data partners or vendors,' which contradicts the 'solely educational' and COPPA-compliant use for child/student users.
" In Short : Users under 13 years old can sign up and use our Services with parental consent. We use student data solely for educational purposes and comply with student data privacy regulations including COPPA and FERPA. For the following sections #14-16, “ Child ” or “ Children ” means a user under 13 years old. For Child users of our Services, our privacy practices are informed by the Children’s Online Privacy Protection Act (” COPPA” ). These sections also explain how a parent or guardian (“ Parent ” or “ you ” for the following 3 sections) can restrict the collection, use, and/or disclosure of your Child’s information and how you can request deletion of your Child’s information. This privacy policy applies to Child users of Flint and administrators and teacher end users (collectively, “ Schools ”). When the Service is used as part of the School’s educational program, the personal information related to the School’s student users (“ Students ”), who may or may not be under 13 years old, may include information defined as “education records” by the Family Educational Rights and Privacy Act (” FERPA” ) or other information protected by similar state student data privacy laws. We refer to this information as “ Student Personal Data ”. Through the use of our Services, Students may also generate content (” Student-Created Content ”). All Student user data is stored and used for only as long as a user has an account with us, and is viewable, editable, and deletable upon request by a Student’s Parent and/or School. "
" In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services. Our online data partners or vendors may use cookies and related technologies to connect your activities with other personal information they or others may hold about you, such as your email or online profiles. We automatically collect certain information when you access or log into our website, or visit, use, or navigate the Services. This information can include name and contact information, professional contact details (such as employer name, job title, phone number, and work address), device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes. We also use this information to send you communications to these emails or profiles, and otherwise improve and develop the Services. Like many businesses, we also collect information through cookies and similar technologies. You can find out more about this in our Cookie Notice: https://flintk12.com/cookies. The information we collect includes: Log and Usage Data . "
Within one document
Evidence appendix
Showing priority citations first. The full appendix is available for audit trails; not every citation is a severe risk.
" This summary provides key points from our privacy notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for. What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Further, when you access or log into our website, our online data partners or vendors may use cookies and related technologies to connect your activities with other personal information they or others may hold about you, such as your email or online profiles. Learn more about personal information you disclose to us . Do we process any sensitive personal information? We may process sensitive personal information when necessary with your consent or as otherwise permitted by applicable law. Learn more about sensitive information we process . Do we receive any information from third parties? The information that Flint receives from third parties is limited to rostering information and only when a User chooses to make use of our SIS and LMS rostering integration options to import their school’s roster. Roster information may include users' first name, last name, email address, and associated courses at the school. How do we process your information? "
Describes in summary form the categories of personal information that may be processed depending on how users interact with the services, and notes that online data partners or vendors may use cookies, establishing the factual scope of data collection activities.
AI-generated interpretation, not legal advice.
"We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so. Learn more about how we process your information . In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties. Learn more about when and with whom we share your personal information . How do we keep your information safe? We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Learn more about how we keep your information safe . What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. Learn more about your privacy rights . How do you exercise your rights? The easiest way to exercise your rights is by visiting sohan@flintk12.com, or by contacting us. "
States the purposes for which personal information is processed (providing, improving, and administering services, communication, security and fraud prevention, legal compliance, and consent-based purposes) and asserts an obligation to have a valid legal reason before processing, governing the controller's conduct.
AI-generated interpretation, not legal advice.
" In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services. Our online data partners or vendors may use cookies and related technologies to connect your activities with other personal information they or others may hold about you, such as your email or online profiles. We automatically collect certain information when you access or log into our website, or visit, use, or navigate the Services. This information can include name and contact information, professional contact details (such as employer name, job title, phone number, and work address), device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes. We also use this information to send you communications to these emails or profiles, and otherwise improve and develop the Services. Like many businesses, we also collect information through cookies and similar technologies. You can find out more about this in our Cookie Notice: https://flintk12.com/cookies. The information we collect includes: Log and Usage Data . "
States that certain information such as IP address and browser/device characteristics is automatically collected when users visit the services, and that online data partners or vendors may use cookies and related technologies to link user activity with other personal information they or others hold, establishing data-collection practices and third-party data-linking activities.
AI-generated interpretation, not legal advice.
" Device Data . We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information."
States that device data including IP address, device and application identification numbers, location, browser type, hardware model, internet service provider, mobile carrier, operating system, and system configuration is collected from users' devices, enumerating the device-level data-collection obligation.
AI-generated interpretation, not legal advice.
" You may request to opt out from future selling or sharing of your personal information to third parties. Upon receiving an opt-out request, we will act upon the request as soon as feasibly possible, but no later than fifteen (15) days from the date of the request submission."
Grants individuals the right to opt out of future selling or sharing of personal information to third parties, and obligates the company to act on such requests within fifteen days of submission.
AI-generated interpretation, not legal advice.
" In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law. We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible."
Obliges the company to retain personal information only as long as necessary for the purposes stated in the privacy notice or as required or permitted by law, sets an upper limit tied to account existence, and requires deletion or anonymisation once there is no ongoing legitimate business need — establishing a bounded retention standard protective of users.
AI-generated interpretation, not legal advice.
" In Short: We may share information in specific situations described in this section and/or with the following third parties. Vendors, Consultants, and Other Third-Party Service Providers. We may share your data with third-party vendors, service providers, contractors, or agents (" third parties ") who perform services for us or on our behalf and require access to such information to do that work. We have contracts in place with our third parties, which are designed to help safeguard your personal information. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will also not share your personal information with any organization apart from us. They also commit to protect the data they hold on our behalf and to retain it for the period we instruct. The third parties we may share personal information with are as follows:"
Grants permission to share user data with third-party vendors, service providers, contractors, or agents performing services on the company's behalf, and imposes an obligation to have contracts in place designed to safeguard personal information and restrict third parties from using the data beyond what the company instructs.
AI-generated interpretation, not legal advice.
" Will your information be shared with anyone else? We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. Learn more about how we disclose personal information to in the section, " When and with whom do we share your personal information?" We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration. This is not considered to be "selling" of your personal information. We have not sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We have disclosed the following categories of personal information to third parties for a business or commercial purpose in the p receding twelve (12) months: Category A. Identifiers"
Permits disclosure of personal information to service providers under written contracts, permits use for internal research and technological development, states that such use is not considered a sale, and affirms that personal information has not been sold or shared, establishing both permitted sharing scope and a non-sale representation.
AI-generated interpretation, not legal advice.
"We will consider and act upon any request in accordance with applicable data protection laws. How do we define and use student data? We are committed to the privacy and security of Student Personal Data and Student-Created Content and disclose and use these data solely for educational purposes and to better provide educational experiences through our Services. Student Personal Data and Student-Created Content will not be used for marketing purposes without prior consent, and will not be disclosed or sold to third parties or business partners. Schools own all personally identifiable student information, including name, ID number, and photo, as well as all Student Personal Data and Student-Created Content. Learn more about student data collection, usage, and rights . Want to learn more about what we do with any information we collect? Review the privacy notice in full ."
Imposes multiple protective restrictions on Student Personal Data and Student-Created Content: data must be used solely for educational purposes, prohibits use for marketing without prior consent, prohibits disclosure or sale to third parties or business partners, and recognises school ownership of personally identifiable student information — all user-favorable restrictions on the controller's use of student data.
AI-generated interpretation, not legal advice.
" We are committed to the privacy and security of Student Personal Data and Student-Created Content and disclose and use these data solely for educational purposes and to better provide educational experiences through our Services. We will collect, use, share, and retain Student Personal Data and Student-Created Content only for purposes for which we were authorized by their School or the parent/student. Student Personal Data and Student-Created Content will not be used to target marketing and advertisements to Students, and will not be disclosed or sold to third parties or business partners. Schools own all personally identifiable student information, including name, ID number, and photo, as well as all Student Personal Data and Student-Created Content. Our vendors with whom Student Personal Data and Student-Created Content is shared in order to deliver the educational service, if any, are obligated to follow the same commitments as outlined in this privacy policy."
Restricts the company's use of Student Personal Data and Student-Created Content to educational purposes only, prohibits use for targeted marketing and advertising to students, prohibits disclosure or sale to third parties or business partners, and limits collection, use, sharing, and retention to purposes authorized by the School or parent/student — protective of student data.
AI-generated interpretation, not legal advice.
" In Short : We collect Student Personal Data directly and automatically. We do not sell or disclose Student Personal Data. Some automatically collected data may be de-identified and aggregated to inform analytics internally so we can improve our Services. Data collected directly might include Student Personal Data like names, email addresses, and Google profile pictures that a School provides when deciding to use our Services. These data are used solely to manage access to content within our Services and assess, track, and archive Student’s learning progress. This data is by default viewable by Schools and is upon request viewable by Parents and editable and deletable by Schools and Parents. We will not build a personal profile of a Student other than for supporting authorized educational/school purposes or as authorized by the parent/student. We do not disclose or sell Student Personal Data to third parties or business partners. Data collected automatically may include information about a Student’s use of our Services through our servers and in log files, such as the following: domain name; browser type and operating system; web pages viewed; links clicked; the length of time spent on our Services; the length of time our Services are used; the referring URL, or the webpage that led a user to our Site; language information; device name and model; operating system type, name, and version; and activities within our Services. "
Restricts the use of Student Personal Data to managing access and tracking learning progress; prohibits selling or disclosing it; limits automatically collected data to de-identified and aggregated internal analytics — user-favorable restrictions on data use.
AI-generated interpretation, not legal advice.
" In Short : Student-Created Content is only used for educational purposes and not sold or disclosed to third parties or business partners. Through the use of our Services, Students may produce Student-Created Content. Some examples of this include but are not limited to chat message history, assignment submissions, essay texts, and audio recordings. Any Student-Created Content is stored in our systems for the sole purpose of assessing, tracking, and archiving Student’s learning progress. We do not disclose or sell Student-Created Content to third parties or business partners. Student-Created Content may be shared with other Students at their School and with administrators and teachers at their School. Our policy considers any Student-Created Content as “educational records” under FERPA. As such, upon request, Parents can view and delete any of their Student’s Student-Created Content as long as their Student is under the age of 18. If you are a School or Parent wishing to manage your Student’s Student-Created Content or have any questions about Student-Created Content, please email us at support@flintk12.com . "
Restricts Student-Created Content to educational purposes only; prohibits selling or disclosing it to third parties or business partners; limits storage to the sole purpose of assessing and archiving Student learning progress — user-favorable restriction on use and sharing of student-generated content.
AI-generated interpretation, not legal advice.
" If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim"
Identifies processing of personal information contained in a witness statement for the purpose of assessing, processing, or settling an insurance claim as a permitted exception to standard consent requirements.
AI-generated interpretation, not legal advice.
" For identifying injured, ill, or deceased persons and communicating with next of kin"
Identifies identifying injured, ill, or deceased persons and communicating with next of kin as a permitted exception to standard consent requirements for processing personal information.
AI-generated interpretation, not legal advice.
" If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse"
Identifies reasonable grounds to believe an individual is or may be a victim of financial abuse as a permitted exception allowing processing of personal information without standard consent.
AI-generated interpretation, not legal advice.
" If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province"
Permits processing of personal information without consent where obtaining consent would compromise the availability or accuracy of the information and the collection is reasonably related to investigating a breach of agreement or legal contravention.
AI-generated interpretation, not legal advice.
" If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records"
Permits disclosure of personal information without consent when required to comply with a subpoena, warrant, court order, or rules of court relating to production of records.
AI-generated interpretation, not legal advice.
" If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced"
Permits collection of personal information produced by an individual in the course of employment, business, or profession, provided collection is consistent with the purposes for which it was produced, as an exception to standard consent requirements.
AI-generated interpretation, not legal advice.
Clause detail — protections, your obligations, and coverage
Every clause below is a verbatim quote from Flint's own published policy, read in full and linked to its exact location. Protections and user obligations are reported separately from risk because they are different kinds of clause — an obligation on you is not a risk to your data. Informational only, not legal advice.
✅ Protections found
0 verified clausesClauses in Flint's policies that work in your favour — commitments the platform made to you.
No protective clause has been verified in Flint's published policies yet. That means we did not find one in the documents we read — not that the platform offers nothing.
📋 Rules you must follow
0 verified clausesWhat Flint requires of YOU. These are your obligations, not risks to your data or IP, so they are cited here and excluded from this platform's risk rating.
No user-conduct rule has been verified in Flint's published policies yet.
What the policies actually cover
0 topicsNone of Flint's verified clauses has been assigned a topic yet. The clause-trust review has not reached this platform's findings.
Clause intelligence
Canonical clauses and stance patterns extracted from the same gate-verified citations shown on this page.
The clause allows indefinite, perpetual, or necessity-based retention.
“In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law. We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this not...”Open source citation
The clause permits sale of personal data or information.
“Will your information be shared with anyone else? We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. Learn more about how we disclose personal information to in the section, " When and with whom do we share your personal information?" We may use your personal information for our own business purposes, such as for undertaking int...”Open source citation
The clause permits sale of personal data or information.
“whether we sell or share personal information to third parties;”Open source citation
The clause permits sale of personal data or information.
“In Short : We collect Student Personal Data directly and automatically. We do not sell or disclose Student Personal Data. Some automatically collected data may be de-identified and aggregated to inform analytics internally so we can improve our Services. Data collected directly might include Student Personal Data like names, email addresses, and Google profile pictures that a School provides when deciding to use o...”Open source citation
The clause permits disclosure or sharing with third parties, affiliates, vendors, or subprocessors.
“This summary provides key points from our privacy notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for. What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Se...”Open source citation
Tier matrix
Plan-level conditions detected from citation-backed clauses. Empty tiers mean AIRIN has not captured decisive tier language yet.
| Tier | Surface | Verdict | Risk | Citations |
|---|---|---|---|---|
| All applicable tiers | privacy data use | worsens | HIGH | 7 |
| All applicable tiers | subprocessors data sharing | conditional | MEDIUM | 1 |
| Team / Business | data retention | conditional | MEDIUM | 1 |
| Team / Business | privacy data use | worsens | HIGH | 4 |
| Team / Business | subprocessors data sharing | worsens | HIGH | 2 |
Policy evolution
Open full timelineBefore/after stance changes across captured policy versions. When no material delta exists yet, AIRIN shows the latest citation-backed stance events instead.
Latest stance: third party or vendor sharing on privacy data use
“You may request to opt out from future selling or sharing of your personal information to third parties. Upon receiving an opt-out request, we will act upon the request as soon as feasibly possible, but no later than fifteen (15) days from the date of the request submission.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“We are committed to the privacy and security of Student Personal Data and Student-Created Content and disclose and use these data solely for educational purposes and to better provide educational experiences through our Services. We will collect, use, share, and retain Student Personal Data and Student-Created Content only for purposes for which we were authorized by their School or the parent/student. Student Personal Data and Student-Created Content will not be used to target marketing and advertisements to Students, and will not be disclosed or sold to third parties or business partners. Schools own all personally identifiable student information, including name, ID number, and photo, as well as all Student Personal Data and Student-Created Content. Our vendors with whom Student Personal Data and Student-Created Content is shared in order to deliver the educational service, if any, are obligated to follow the same commitments as outlined in this privacy policy.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“This summary provides key points from our privacy notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for. What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Further, when you access or log into our website, our online data partners or vendors may use cookies and related technologies to connect your activities with other personal information they or others may hold about you, such as your email or online profiles. Learn more about personal information you disclose to us . Do we process any sensitive personal information? We may process sensitive personal information when necessary with your consent or as otherwise permitted by applicable law. Learn more about sensitive information we process . Do we receive any information from third parties? The information that Flint receives from third parties is limited to rostering information and only when a User chooses to make use of our SIS and LMS rostering integration options to import their school’s roster. Roster information may include users' first name, last name, email address, and associated courses at the school. How do we process your information?”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so. Learn more about how we process your information . In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties. Learn more about when and with whom we share your personal information . How do we keep your information safe? We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Learn more about how we keep your information safe . What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. Learn more about your privacy rights . How do you exercise your rights? The easiest way to exercise your rights is by visiting sohan@flintk12.com, or by contacting us.”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services. Our online data partners or vendors may use cookies and related technologies to connect your activities with other personal information they or others may hold about you, such as your email or online profiles. We automatically collect certain information when you access or log into our website, or visit, use, or navigate the Services. This information can include name and contact information, professional contact details (such as employer name, job title, phone number, and work address), device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes. We also use this information to send you communications to these emails or profiles, and otherwise improve and develop the Services. Like many businesses, we also collect information through cookies and similar technologies. You can find out more about this in our Cookie Notice: https://flintk12.com/cookies. The information we collect includes: Log and Usage Data .”Open timeline citation
Latest stance: third party or vendor sharing on privacy data use
“Device Data . We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.”Open timeline citation
Latest stance: third party or vendor sharing on subprocessors data sharing
“In Short: We may share information in specific situations described in this section and/or with the following third parties. Vendors, Consultants, and Other Third-Party Service Providers. We may share your data with third-party vendors, service providers, contractors, or agents (" third parties ") who perform services for us or on our behalf and require access to such information to do that work. We have contracts in place with our third parties, which are designed to help safeguard your personal information. This means that they cannot do anything with your personal information unless we have instructed them to do it. They will also not share your personal information with any organization apart from us. They also commit to protect the data they hold on our behalf and to retain it for the period we instruct. The third parties we may share personal information with are as follows:”Open timeline citation
Latest stance: sale or sell on subprocessors data sharing
“Will your information be shared with anyone else? We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. Learn more about how we disclose personal information to in the section, " When and with whom do we share your personal information?" We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration. This is not considered to be "selling" of your personal information. We have not sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We have disclosed the following categories of personal information to third parties for a business or commercial purpose in the p receding twelve (12) months: Category A. Identifiers”Open timeline citation
Capture recency
- Privacy Policy:Last captured 2026-07-20· verified 2026-07-20verified once — not yet re-verified
Dates state when our pipeline captured and verified each document — not when the vendor last changed it. Documents are re-scanned on a recurring cadence; a document verified once says so until a re-scan confirms it again.
132 findings first captured First scan: July 2026.
Compare and stack are saved in your browser. Open compare · View your stack. A correction triggers an automated re-read of Flint's policies — no human edits the data.
Need this for procurement or legal diligence?
Free shows today's risk. A Stack Audit gives you a citable, verbatim-sourced PDF across your whole AI stack — and flags the moment a vendor's terms change.
Know where the missing document lives?
We haven't yet verified Flint's Terms of Service. Point us at the official page and our pipeline will attempt to capture and read it in full. Submissions are candidates only — nothing is published until it passes the same verification gates as every other document on this site.
Every finding above is a verbatim quote from Flint's own published policy, captured to an immutable snapshot and read in full through a two-gate verification pipeline. Confidence labels and any analysis are AI-generated and informational only — not legal advice.
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.