Privacy Policy

1. Key definitions

"Personal Information" means information that identifies, relates to or can reasonably be linked, directly or indirectly, to you as an individual. It does not include information that has been deidentified or aggregated so that it can no longer reasonably be linked to you.

"Client" means a company, university or other organization that contracts with us for Services, such as an employer that enrolls its employees in training or an institution that licenses our curriculum.

2. When we act on behalf of our Clients

Much of our work is delivered to organizations, not individuals. When your employer, university or another Client enrolls you in a program, we usually process your Personal Information on that Client's behalf and under our contract with it. In that case, the Client's own privacy notice also applies, and the Client decides many questions about how your information is used, such as what progress reports it receives. If you have questions or want to exercise privacy rights about that information, we may refer you to the Client, and we will help the Client respond as our contract requires. Where we decide how and why Personal Information is processed, such as when you visit our websites, ask about our Services, apply to teach with us, join our talent network or enroll directly in a Flatiron School program, we are responsible for your Personal Information under this Policy.

3. Information we collect

The Personal Information we collect depends on how you interact with us. We collect information:

• that you give us directly, such as when you fill out a form, book a Lab, apply, enroll, take part in a program or communicate with our team;
• that your employer, university or other Client gives us, such as participant rosters, job titles and teams;
• automatically, when you use our websites and online tools (see "Cookies and similar technologies"); and
• from other sources, such as our partners, public sources like professional networking profiles and service providers that help us verify business contact information.

3.1 Categories of Personal Information

Depending on the Services you use, we may collect:

• Contact Information and Identifiers, such as your name, email address, phone number, mailing address and city or time zone.
• Professional Information, such as your employer, job title, role, team, function, company size, professional history, LinkedIn profile, résumé and credentials.
• Program Information, such as enrollment and attendance, assignments, projects and work you build in a program, assessments of your work, progress and completion records, certificates and feedback you give us.
• AI tool content. Participants use their organization's own AI subscriptions during a Lab or program, so prompts, files, data and outputs stay in the organization's accounts. We do not have access to this content.
• Hiring and Talent Information, such as roles an employer wants to fill, skills and experience you share with us for talent matching, your interest in opportunities and interview outcomes.
• Applicant Information, if you apply to teach with us or to a Flatiron School program, such as your education, certifications, teaching experience, availability and anything else you include in your application.
• Account Information, such as usernames and passwords for our learning platforms.
• Communications, such as emails, messages, chat or chatbot conversations, calendar invitations and recordings of live sessions where we have told you a session is recorded.
• Device and Navigational Information, such as IP address, device and browser type, pages visited, links clicked, referring sites and general location.
• Payment and Financing Information, if you pay for a Flatiron School program yourself, such as billing details and financing status. Payment card details are handled by our payment processors.
• Sensitive Personal Information, only where needed and permitted by law, such as government identification numbers needed to employ apprentices or meet tax or regulatory requirements, or demographic information you choose to share for program reporting.

3.2 Cookies and similar technologies

We and our service providers use cookies, pixels, web beacons, embedded scripts and similar technologies to collect Device and Navigational Information when you visit our websites or open our emails. We use them to:

• keep our websites working and secure;
• remember your preferences;
• understand how visitors use our websites and measure the performance of our content and emails.

Analytics. We use Google Analytics and similar tools to understand how our websites are used. You can learn how Google uses data at https://policies.google.com/technologies/partner-sites and opt out at https://tools.google.com/dlpage/gaoptout.

Your choices. You can block or delete cookies in your browser settings. If you disable some cookies, parts of our websites may not work properly.

Opt-out preference signals. We do not use advertising cookies, so there is no targeted advertising to opt out of. Because there is no common standard for older "Do Not Track" signals, we do not respond to them.

4. How we use Personal Information

We use Personal Information to:

• provide, configure and deliver our Services, including Labs and programs tailored to your organization and function;
• assess the work participants produce and report on progress and outcomes to the Client that enrolled them;
• respond to inquiries and requests, such as booking a Lab, planning an AI Accelerator or discussing a partnership;
• match alumni and apprentices with employers and build custom talent pipelines;
• review applications from prospective instructors and students;
• communicate with you about our Services, events and content, including marketing where permitted by law;
• understand how our Services are used and improve our programs, curriculum and websites;
• protect the security of our Services, prevent fraud and abuse and verify identity;
• meet legal, tax, regulatory, accreditation and reporting obligations and enforce our agreements; and
• for other purposes we describe when we collect the information, or with your consent.

4.1 How we use information, by relationship

Enterprise Clients and prospective Clients. We use the business contact and professional information of people who work with us on behalf of a Client to manage our relationship, scope and deliver programs and send relevant updates about our Services.

Program participants. If your employer enrolls you, we use your information to deliver the program, support you and assess your work against the standards agreed with your employer. We share attendance, progress, completion and assessment results with your employer as our contract with it requires.

Flatiron School students and alumni. We use your information to deliver your program, provide career support, maintain your academic records, meet regulatory and accreditation reporting requirements and keep you connected with the alumni community.

Talent network and employers. If you are an alum, we may contact you about job opportunities that match your training and experience. We introduce you to an employer only after you tell us you are interested. If you are an employer or recruiter, we use your information to understand your hiring needs and connect you with candidates.

Instructor applicants. We use the information in your Teach with us submission, such as your LinkedIn profile, résumé and credentials, to assess your fit for teaching roles and contact you about opportunities.

4.2 Artificial intelligence

Our programs teach people to use AI tools, and participants often work on real tasks from their jobs. We handle this content carefully:

• Participants use their employer's own AI subscriptions, under the employer's own agreements and settings. We do not have access to the prompts, files or outputs in those accounts.
• We use content you or your organization provide in a Lab or program only to deliver and support the Services, as our agreement with your organization allows.
• We do not use Client confidential information, or any work participants share with us during programs, to train AI models, and we do not permit our service providers to do so.
• We may use AI tools ourselves, for example to help draft feedback, summarize sessions or support learners. A person on our team reviews any assessment that affects your progress or completion.

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.

4.3 Deidentified and aggregated information

We may create deidentified or aggregated information, such as program outcome statistics, and use it for any lawful purpose. We will not attempt to reidentify it, except as required by law.

5. How we disclose Personal Information

We disclose Personal Information only as described below:

• Clients. With the employer, university or other organization that enrolled you or sponsors your program, as described in section 4.1.
• Employers, with your consent. With prospective employers when you have asked us to introduce you for a role or apprenticeship.
• Affiliates. Within the Flatiron Education family of companies, to deliver and support our Services.
• Service providers. With vendors that help us run our business, such as cloud hosting, learning platforms, AI and productivity tools, customer relationship management, email, analytics, payment processing and customer support. They may use Personal Information only to provide services to us.
• Program and event partners. With organizations we run programs or events with, such as when you register for a co-hosted event. Their privacy policies govern their use of your information.
• Legal and safety. Where required by law or legal process, or to protect the rights, property or safety of Flatiron, our users or others.
• Business transfers. As part of a merger, acquisition, financing, sale of assets or similar transaction, subject to appropriate confidentiality protections.
• With your consent or at your direction. For any other purpose you agree to.

Information you choose to post in community spaces, such as forums, alumni groups or public social media, may be visible to others.

6. No sale of Personal Information

We do not use advertising cookies or pixels on our websites, and we do not sell Personal Information or share it for targeted advertising. If that changes, we will update this Policy first.

7. Your privacy rights

Depending on where you live, you may have the right to:

• know and access the Personal Information we hold about you, including the categories of sources, purposes and recipients, and receive a copy in a portable format;
• correct inaccurate Personal Information;
• delete Personal Information, subject to exceptions allowed by law;
• opt out of the sale or sharing of Personal Information, targeted advertising and certain profiling;
• limit or consent to the use of Sensitive Personal Information;
• obtain a list of the third parties we have disclosed your Personal Information to, where state law provides that right; and
• appeal our decision about your request.

Residents of California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia and other states with comprehensive privacy laws have some or all of these rights. If you live in the European Economic Area, United Kingdom or Switzerland, see section 12.

How to make a request

Email privacy@flatironeducation.com with the subject line "Privacy Request." We will verify your identity before responding, usually by matching information you give us with information we already hold. You may use an authorized agent; we may ask for proof that the agent is authorized and ask you to verify your identity directly.

We respond within the time required by applicable law, generally within 45 days, and will tell you if we need more time. If we deny your request, we will explain why. If your request relates to information we process on behalf of a Client, we may refer you to that Client.

Appeals. If you disagree with our decision, you can appeal by replying to our response or emailing privacy@flatironeducation.com with the subject line "Privacy Appeal." We will respond within the time required by law. If you are not satisfied with the outcome, you may contact your state attorney general.

Non-discrimination. We will not discriminate against you for exercising your privacy rights, for example by denying you Services or charging you different prices. We will not retaliate against employees, applicants or contractors for exercising their rights.

California "Shine the Light." We do not share Personal Information with third parties for their own direct marketing.

8. Sensitive Personal Information

We collect Sensitive Personal Information only when needed for a specific purpose, such as employing apprentices, meeting legal or regulatory requirements or program reporting you agree to. We do not use or disclose Sensitive Personal Information to infer characteristics about you, and we obtain your consent where the law requires it. Where you have given consent, you may withdraw it at any time.

Please do not send us payment card numbers, government identification numbers or other Sensitive Personal Information by email.

9. Marketing and other communications

Email. You can unsubscribe from marketing emails at any time using the link in each email or by contacting us. We may still send you messages about Services you use, such as program logistics, account notices and updates to our terms or this Policy.

Text messages. If you agree to receive text messages, you can opt out at any time by replying STOP. Message and data rates may apply.

Recorded sessions and calls. We may record live sessions and calls for quality, training or program purposes. We will tell you when a session is being recorded and obtain consent where the law requires it.

10. Retention

We keep Personal Information for as long as needed for the purposes described in this Policy, including to:

• deliver our Services and meet our contracts with Clients;
• maintain academic, completion and certificate records, which we may keep for longer periods to verify credentials and meet regulatory requirements;
• maintain business records for analysis and audit;
• comply with legal obligations; and
• resolve disputes and enforce our agreements.

When Personal Information is no longer needed, we delete or deidentify it. Information we hold on a Client's behalf is retained and deleted as our contract with that Client requires.

11. Information security

We use reasonable administrative, technical and physical safeguards designed to protect Personal Information against unauthorized access, loss, misuse and alteration, such as limiting access to people who need it and using established service providers with strong security practices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. International users and data transfers

We are based in the United States and work with Clients and learners around the world. Your Personal Information may be processed in the United States and other countries whose data protection laws may differ from those where you live. When we transfer Personal Information from the European Economic Area, United Kingdom or Switzerland, we rely on safeguards recognized by law, such as the Standard Contractual Clauses in our agreements with Clients and service providers.

Legal bases for processing (EEA, UK and Switzerland)

We process Personal Information where it is necessary to perform a contract with you or your organization; to comply with legal obligations; for our legitimate interests, such as delivering and improving our Services, keeping them secure and marketing to business contacts, where those interests are not overridden by your rights; or with your consent, which you can withdraw at any time.

You may have the right to access, correct, delete, restrict or object to the processing of your Personal Information, to data portability and to lodge a complaint with your local data protection authority. Contact us to exercise these rights.

13. Minors

Our Services are intended for adults and are not directed to anyone under 18. We do not knowingly collect Personal Information from anyone under 18. If we learn that we have, we will delete it. If you believe we may have information about someone under 18, contact us at privacy@flatironeducation.com.

14. Third-party websites and services

Our Services may link to or work with websites, AI platforms and services we do not own or control, including social media platforms such as LinkedIn and X. This Policy does not apply to them, so please review their privacy policies.

On our social media pages, we may remove comments that are off-topic, promotional, obscene, threatening, harassing or hateful, or that advocate illegal activity or infringe the rights of others.

15. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will post the updated Policy with a new effective date and, where required by law, notify you by email or another method. The Policy in effect when we collect your information applies to that information, unless we notify you otherwise and obtain any consent the law requires.

16. Contact us

Flatiron Education LLC is responsible for Personal Information under this Policy. If you have questions or concerns, contact: