How Edra uses information in Sol

A practical privacy baseline for the controlled Sol proof of concept.

Effective August 24, 2026 · Version sol-privacy-2026-08-24-poc

Who is responsible

Edra, Inc. owns and operates Sol and is responsible for the website, applications, accounts, and platform operations described here. Isaac S. Lee studies Sol as part of approved doctoral research at the University of Cambridge. Cambridge does not own or operate Sol and is not a partner in Edra. Research records may also be governed by Isaac’s approved research proposal.

Information we collect

Depending on how you use Sol, we collect identity and contact details; application and eligibility information; account and sign-in records; finalized conversation transcripts; authorized IEP, Regional Center, testing, assessment, and other support documents; draft profiles, insights, evidence links, and corrections; optional Telegram or WhatsApp identifiers and delivery data; and security, consent, document-access, and technical audit records.

Why we use it

We use information to review applications, communicate decisions, create and protect accounts, operate Sol conversations and document review, prepare drafts for participant and professional review, conduct the approved research, provide support, respond to privacy or safeguarding concerns, prevent misuse, maintain traceability, and comply with law. A person reviews applications; applying does not automatically enroll anyone.

AI, voice, and service providers

Relevant text and authorized document excerpts may be processed by configured providers that help operate Sol, including Microsoft Azure, Microsoft Entra, OpenAI, Telegram, Twilio, and WhatsApp when those functions are enabled. Web chat is the primary experience. Telegram and WhatsApp are optional and have their own terms and privacy practices. Raw participant voice and generated Sol audio are not retained by the Sol application; finalized transcript text is retained.

Sensitive information and professional review

Conversations and support documents may include education, disability, health, behavior, and wellbeing information. Sol uses this information only for the purposes described here and in the participant information. Sol drafts may be wrong or incomplete. They do not diagnose, determine eligibility, create an official education plan, or replace qualified professional judgment.

Retention

For this controlled PoC, incomplete applications are normally deleted after 30 days and rejected or withdrawn applications after 90 days. Active account details and source documents are kept through participation and normally no more than six months afterward. Security and delivery logs are normally kept for 12 months and rolling database backups for 30 days. Consent, audit, coded transcripts, and de-identified research records may be kept for 10 years after the research project ends. We may keep a record longer when reasonably necessary for safety, law, a legal hold, research integrity, or an approved research requirement.

Children and young people

This PoC is limited to participants ages 13 through 21. We do not knowingly enroll anyone under 13. Where a learner cannot legally consent for themselves, the approved workflow requires a parent or guardian’s permission and the learner’s own affirmative assent. A caregiver’s permission does not override a capable learner’s decision to say no or stop.

Security and access

Sol uses encrypted connections, role-based access, private document storage, malware scanning and quarantine, session controls, audit logging, and backups. Caregiver and learner conversations are separate and are not automatically shown to one another. Authorized Edra and research staff may access information only for assigned purposes. No system can eliminate every security risk.

Your choices and rights

You may ask to access, correct, download, restrict, or delete information; withdraw consent; stop an optional messaging channel; or raise a privacy or complaint question. Rights and exceptions depend on your location and the type of record. Information already de-identified, included in completed analysis, or required for safety, law, research integrity, or a legal claim may need to remain. We do not sell personal information or use it for targeted advertising.

International and regional protections

Edra is a U.S. company and approved providers may process information in the United States or other locations. Where California, another U.S. state, EEA, UK, Canadian, or other privacy law applies, Edra will honor applicable mandatory rights and use appropriate safeguards. This policy is a global baseline; mandatory local protections continue to apply.

Changes and contact

We will identify material changes with a new version and seek renewed agreement where required. For privacy, safeguarding, accessibility, research, complaint, or withdrawal questions, email support@edra1.com or write to Edra, Inc., 963 W. Ave J, Lancaster, CA 93534, United States.