Privacy Policy
The Boost Pad Inc., a nonprofit doing business as Max University ("Max University," "we," "us") provides CoachMax, an AI-assisted assessment and coaching platform for organizations such as schools, training programs, and accelerators. This policy explains what personal information we collect, how we use it, and the choices you have.
1. Who this policy covers
It covers visitors to coachmax.maxuniversity.org, people who contact us, administrators who set up an organization, and instructors and learners who use CoachMax through an organization.
When an organization (for example, a school) uses CoachMax, that organization decides what learner information is collected and why. For that information we act as a service provider (or "processor") on the organization's behalf, under our agreement with them, including our Data Processing Agreement. Learners should direct requests about their records to their organization first.
2. Information we collect
- Account information: name, email address, role, organization, and password (stored only by our authentication provider in hashed form).
- Learner work: submissions such as text, documents, links, and videos, and the assessments, scores, feedback, and instructor comments created from them.
- Curriculum content: programs, assignments, rubrics, and materials an organization uploads or syncs from its learning management system (LMS).
- Billing information: billing contact, plan, and invoices. Card details are collected and stored by our payment processor, not by us.
- Usage and device information: pages viewed, actions taken, IP address, browser type, and timestamps, used to run, secure, and improve the service.
- Communications: messages you send us and email delivery information.
3. How we use information
- To provide CoachMax: create accounts, assess submissions against the organization's rubric, deliver feedback, notify instructors, and produce reports.
- To secure the service: authenticate users, prevent abuse, keep audit logs, and investigate incidents.
- To bill organizations and send receipts.
- To send service emails, such as feedback-ready and review notifications. We do not send marketing email to learners.
- To improve and support the service, using aggregated or de-identified data where possible.
- To comply with law and enforce our Terms.
4. AI processing
CoachMax uses third-party AI models to read submissions and draft assessments against the organization's rubric. We send only what is needed to produce the assessment.
We do not use learner submissions or organization content to train AI models, and we use AI providers whose commercial terms do not allow them to train on that data by default.
AI assessments can be wrong. Organizations can require instructor review, and instructors can edit, override, or hold any assessment.
5. How we share information
We do not sell personal information and we do not share it for targeted advertising. We share information only:
- With the organization that provides your account (your school, program, or employer).
- With service providers that help us run CoachMax (subprocessors), under contracts that limit their use of the data. A current list is in our Data Processing Agreement.
- With integrations an organization chooses to connect, such as its LMS.
- If required by law, or to protect the rights, safety, and security of users or the public.
- As part of a merger or acquisition, with notice and continued protection of your information.
6. Students and FERPA
When we receive education records from a school, we act as a "school official" with a legitimate educational interest under the Family Educational Rights and Privacy Act (FERPA), under the school's direct control. We use those records only to provide the service to the school, and we do not re-disclose them except as the school directs or the law allows.
7. Age requirement
CoachMax is intended for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it. Organizations must not enroll learners under 18.
8. Retention and deletion
We keep personal information for as long as the organization's account is active or as needed to provide the service. Organizations can set retention periods and delete learners, submissions, and files at any time. After an organization's account ends, we delete or return its data within 30 days unless the law requires us to keep it longer. Backups are overwritten on a rolling schedule.
9. Security
We protect information with encryption in transit and at rest, organization-level data separation, role-based access, two-factor sign-in for administrators, private file storage with expiring links, audit logging, and regular backups. No system is perfectly secure; if a breach affects your personal information, we will notify the affected organization and individuals as required by law, including North Carolina law.
10. Your choices and rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to opt out of certain processing. If your account comes from an organization, contact that organization first; we will help them respond. You can also email privacy@maxuniversity.org. We will not discriminate against you for exercising your rights. We verify requests before acting on them.
11. Cookies
We use essential cookies to keep you signed in and secure, and, with your consent, analytics cookies to understand how the website is used. See our Cookie Notice for details.
12. Changes
We will post changes here and update the effective date. If changes are material, we will notify organization administrators by email before they take effect.
13. Contact
The Boost Pad Inc. (Max University), 2400 Greenland Ave., Charlotte, NC 28208, USA. Email: privacy@maxuniversity.org.