• Overview
• Terms of Use
• Privacy Policy
• Subscription Agreement

Privacy Policy

Last updated: October 22, 2026

1. Who this covers

This policy covers the website at 2gno.me, its subdomains and every 2gnoMe portal (the "Service"). It is provided by Brandme LLC, a New York limited liability company doing business as 2gnoMe ("2gnoMe", "we", "us").

2. Two roles we play

• For Organizations. When a school, district, agency or company uses 2gnoMe, it decides what data goes in and who sees it. We process that data ("Customer Data") on its behalf, under its instructions, its agreement with us and any data privacy agreement it has signed. Questions about your data in an Organization's portal go to that Organization first; we help it respond.
• For our website and marketing. When you visit 2gno.me, book a demo or contact us, 2gnoMe decides how that information is used, as described here.

3. Information we collect

In portals (Customer Data)

• Account details: name, email address, role, school or department.
• Organization details: roles, groups, supervisors and coaching relationships.
• Content users enter: self-reflections, goals, observation notes and ratings, feedback, forms, portfolio files, observation video recordings and learning activity.
• AI Maturity responses, including short business-context questions such as industry and role.
• Usage and technical data needed to run and secure the Service, such as log-ins, IP address, browser type and error logs.

From integrations an Organization turns on

Google Workspace, ClassLink and LTI platforms. See section 7 for Google Workspace.

On our website and in marketing

What you enter in forms and demo bookings (such as name, email, organization and role), and the cookie and analytics data in section 9.

4. Student information

2gnoMe is built for adults and does not need student information. Students do not have accounts, and we ask users not to enter student names or other student identifiers.

Observation notes, files or recordings can still include student information, for example a classroom video. When they do, we treat it as confidential Customer Data and use it only to provide the Service. Where FERPA applies, 2gnoMe acts as a "school official" with a legitimate educational interest, under the Organization's direct control. We delete it on the Organization's request or when its agreement ends. Requirements under state student-privacy laws are set in the Organization's data privacy agreement with us.

5. How we use information

We use Customer Data only to:

• provide, support and secure the Service for the Organization;
• authenticate users and manage access;
• run the reflection, observation, feedback, learning and reporting features the Organization uses;
• respond to support requests;
• meet legal obligations.

We may create de-identified, aggregated statistics, such as completion rates or score distributions across many organizations, to improve the Service and publish benchmarks. They do not identify any person or Organization, and we do not try to re-identify them.

We use website and marketing information to answer inquiries, schedule demos, send information you asked for, and measure our marketing. You can unsubscribe from marketing email at any time.

6. AI features

• AI features draft feedback from evidence already in the Service. They do not score, rate, label or make decisions about anyone.
• Names, email addresses and other direct identifiers are removed before evidence is sent to the AI model.
• Our AI model provider is OpenAI. Customer Data is not used to train, fine-tune or improve AI models, by 2gnoMe or by OpenAI. The AI features do not keep Customer Data. OpenAI may keep de-identified requests for up to 30 days to detect abuse, and then deletes them.
• A person reviews, edits and approves every draft before it is shared.
• Google Workspace data is never sent to AI models.

7. Google Workspace data

When an Organization connects Google Workspace for single sign-on and setup, 2gnoMe reads, with read-only access through the Google Admin SDK:

• user names and email addresses;
• user roles, group memberships and group member relationships.

Scopes: admin.directory.user.readonly, admin.directory.group.readonly, admin.directory.group.member.readonly. We do not access Google Drive, Calendar or Gmail content.

We use this data only to sign users in, place them in the right Organization and role, and support group-based access. We do not use it for advertising, do not sell it, do not send it to AI model providers, and share it only with the hosting and security providers in section 8, under confidentiality obligations.

2gnoMe's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

8. Who we share information with

We share personal information only with:

• Subprocessors that help us run the Service, under written contracts that limit their use to our instructions (list below).
• The Organization that provides your account, and the people it authorizes.
• Integrations the Organization turns on, such as ClassLink or an LTI platform.
• Authorities, when required by law or valid legal process, or to protect the rights and safety of users, the public or 2gnoMe.
• A successor, if 2gnoMe is merged or acquired. The successor must keep the commitments in this policy and in Organizations' data privacy agreements.

Subprocessors

9. Cookies, analytics and advertising

Our public website uses cookies and similar tools from Google and LinkedIn to measure traffic and to show 2gnoMe ads to past visitors. Portal pages are not used for advertising. You can block or delete cookies in your browser, opt out of Google ad personalization at adssettings.google.com, and manage LinkedIn ad settings in your LinkedIn account.

10. Security

• Encryption in transit (TLS) and at rest.
• Role-based, least-privilege access, monitored and logged.
• Access to Customer Data limited to staff who need it to support or secure the Service, under confidentiality obligations.
• If we confirm a security breach affecting Customer Data, we notify the affected Organization without undue delay, and within any time set by law or its agreement with us.

11. Where data is stored and accessed

Customer Data is stored on AWS in the United States. Members of our engineering and support team outside the United States may access it, under the same controls, only to maintain and support the Service.

12. Retention and deletion

• We keep Customer Data while the Organization's subscription is active, or as its agreement specifies.
• When an agreement ends, Customer Data is deleted or returned within 30 days under a plan agreed with the Organization, unless the law requires longer. Backups are deleted on their normal rotation.
• Free portals may be closed after a long period of inactivity, with notice to the portal's administrator, and their data deleted.
• An Organization, or a user with its approval, can request deletion at any time at support@2gno.me. We complete verified requests within 30 days.
• Website and marketing contacts are kept until you ask us to delete them or we no longer need them.

13. Your choices and rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, and to object to some uses. For data in an Organization's portal, contact that Organization; we help it respond. For website and marketing data, write to legal@2gno.me. We will not treat you differently for exercising these rights.

14. International users

2gnoMe serves Organizations outside the United States, including in Colombia. Data is processed in the United States. Where local law requires it, such as Colombia's Law 1581 of 2012, we process data under the Organization's instructions and an agreement that provides the required protections.

15. Children

The Service is not directed at children under 13, and we do not knowingly collect their personal information directly from them. If we learn we have, we delete it.

16. Changes to this policy

We will notify users by email or in the Service at least 30 days before a material change takes effect. We will not make a material change to how Customer Data is used without the Organization's agreement.

17. Contact

Brandme LLC, doing business as 2gnoMe
legal@2gno.me · support@2gno.me · (888) 880-5210