Privacy Policy
Last updated: October 20, 2026
Contact: admin@theatiportal.com
Access Technology Institute (ATI) operates The ATI Portal at theatiportal.com. This Privacy Policy explains how we collect, use, and protect information when you use our service.
Who We Are
The ATI Portal is a business management platform for access technology trainers. We are operated by CathyAnne Murtha, Access Technology Institute, California.
Information We Collect
Account information: When you register, we collect your name, email address, and password. Professional tier subscribers provide payment information processed directly by Stripe. We never store credit card numbers.
Practice information: Trainers enter student records, session notes, progress reports, invoices, authorizations, case manager contacts, and billing information. This is your business data and belongs to you.
Usage data: We collect information about how you use the portal including login times, features accessed, and session duration. This helps us improve the service.
Activity on records: Each time a record is opened, created, changed, deleted, sent, downloaded or printed, the portal records who did it, when, which record, and the approximate place of the sign-in. These entries are kept for six years, as health privacy rules expect, and cannot be changed or deleted. A trainer working alone can read and download their own; a team or Full Access Pass leader can read and download their team's.
Device and technical data: We collect your IP address, browser type, and device information for security and troubleshooting purposes. When you sign in, we also record an approximate location, such as a city, worked out from your IP address on our own server so that you can recognise your sign-ins. Your IP address is not sent to anyone to do this.
How did you hear about us: New members may optionally tell us how they found the portal. This is never required.
How We Use Your Information
To provide the service: Your data is used to operate the portal, process payments, send transactional emails, and deliver the features you have subscribed to.
AI features: The OCR authorization scanning and AI progress report summary features send document content to Anthropic for processing. By using these features you consent to that processing. We do not retain data on Anthropic's servers beyond what their standard API processing requires. Results are stored only in your portal account.
Analytics: We use aggregated, non-identifying usage data to understand how the portal is used and to improve it. Individual records are never used for this purpose.
Communication: We send transactional emails related to your account. We do not send marketing emails unless you have specifically opted in.
Student Data
Trainers who enter student information into the portal are the data controllers for that information. The ATI Portal is the data processor. Trainers are responsible for obtaining appropriate consent from students to store their information in the portal and for complying with applicable privacy laws in their jurisdiction.
We process student data only as directed by the trainer and only to provide the service.
Third Parties Who Receive Data
Stripe: Payment processing. Stripe handles all subscription billing. Their privacy policy governs their use of payment data.
Anthropic: AI processing for OCR and progress report summary features. Used only when a trainer activates these features.
AWS S3: File storage for the ATI Library, pictures in session notes, logos and backups. Files are stored encrypted. When you connect your own OneDrive or Google Drive in the Windows app, your own Library files are kept there instead.
Microsoft and Google: only when you connect your own account in the Windows app, as described under Your Microsoft or Google Account.
ScalaHosting: Application and database hosting. The portal runs on a private server operated for Access Technology Institute, and your portal data is stored in PostgreSQL on that same server rather than with a separate database provider.
We do not sell your data. We do not share your data with advertisers. We do not share your data with any third party except as described above to operate the service.
Your Microsoft or Google Account
The ATI Portal app for Windows can connect to your own Microsoft account (OneDrive and Outlook email) or your own Google account (Google Drive and Gmail). Connecting is optional, and you choose which.
What the app can reach: your name and email address, to show which account is connected; a folder the app makes in your OneDrive, or only the files the app makes in your Google Drive, for your Library files and receipts; and the ability to send an email from your account when you tell it to send one. It cannot read your email, and it cannot see other files in your drive.
What happens to it: the app uses this access only to do what you ask, on your own computer. Your files stay in your drive, and email you send stays in your own mailbox. The sign-in the app keeps for your Microsoft or Google account is kept on your computer, protected by Windows, and is never sent to The ATI Portal's server. The server keeps only the list of your Library files and the agreement you gave before connecting.
What we never do: we do not sell this information, use it for advertising, use it to train artificial intelligence, or let people read it, except with your permission, for security, or where the law requires.
Before you connect, the app asks you to agree that your own cloud storage will not hold protected health information. Student records belong in the portal, not in your drive.
Disconnecting: you can disconnect in the app's Settings at any time, or remove the app's access in your Microsoft or Google account. Your files stay in your drive.
The ATI Portal's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Data Retention
Your data is retained for as long as your account is active. When you close your account, you have 14 days to export your data. After 14 days all data is permanently deleted, except the activity entries described above, which are kept for six years.
Your Rights
You may access, correct, or export your data at any time through the portal. The Import/Export feature allows you to download a complete copy of your data.
You may request deletion of your account and all associated data by contacting admin@theatiportal.com. The activity entries described above are kept for six years even after an account is deleted.
Security
We use industry standard security practices including encrypted connections (HTTPS), encrypted file storage, encrypted backups, two-factor authentication, and regular security reviews. No system is perfectly secure and we cannot guarantee absolute security, but we take reasonable precautions to protect your data.
Children
The ATI Portal is intended for adult professionals. It is not directed at children under 13. If you believe a child under 13 has created an account, contact admin@theatiportal.com and we will delete the account.
Changes to This Policy
We will notify you by email before making significant changes to this policy. Continued use of the portal after notice constitutes acceptance of the updated policy.
Contact
For privacy questions or requests contact admin@theatiportal.com.
Access Technology Institute
CathyAnne Murtha, Founder
theatiportal.com