/ Legal
Privacy Policy
Effective June 6, 2026 · Last updated June 11, 2026
1. Overview
This Privacy Policy explains how Irys Technologies, Inc. ("Irys," "we," "us," or "our") handles information in connection with the website at irystechnologies.ai (the "Site").
The Site provides aggregated, statistical information derived from public records. We want to be clear about two distinct categories of information:
- The information we publish — this is aggregate and statistical only. It does not name or identify any individual. (Section 2.)
- The information we collect from visitors — like most websites, we collect limited technical and contact information when you use the Site. (Section 3.)
If you only read one thing: we do not publish the names, identities, or individual records of any person. We publish summaries, totals, averages, and distributions.
2. The data we publish (aggregate / statistical only)
Source. The statistics on this Site are derived from public records lawfully obtained from the California State Teachers' Retirement System ("CalSTRS") and/or other government agencies, which are obligated to make such records available under the California Public Records Act (Cal. Gov. Code § 7920 et seq.). Information lawfully made available from federal, state, or local government records is treated as "publicly available" and is not "personal information" under the California Consumer Privacy Act (Cal. Civ. Code § 1798.140).
What we publish. Only aggregated and statistical information — for example, totals, counts, averages, medians, ranges, and distributions across groups (such as by employer, district, region, year, or category).
What we do NOT publish. We do not publish, and the Site is not designed to disclose, any of the following about an identifiable individual:
- Names or personal identifiers;
- Social Security numbers or other government IDs;
- Home or mailing addresses, phone numbers, or email addresses;
- Dates of birth;
- Individual benefit, pension, or salary amounts tied to a named person;
- Disability status, pension type, medical, or beneficiary information; or
- Any other information that identifies, relates to, or could reasonably be linked to a particular person.
Re-identification safeguards. We apply minimum group-size thresholds and other aggregation controls so that statistics cannot reasonably be used to identify, or infer information about, any individual. Where a group is too small to aggregate safely, we suppress or further combine the data.
We are not a data broker, and we do not sell personal information. Because the information we publish is non-identifiable aggregate data drawn from government records, we do not sell or share the personal information of consumers with whom we have no direct relationship within the meaning of California's data-broker laws (Cal. Civ. Code § 1798.99.80 et seq.).
3. The data we collect from visitors
Separately from the statistics we publish, we collect limited information when you visit or interact with the Site. We collect this only from school-district and county staff and other business contacts — never from students.
- Information you provide. When you request a demo or a risk report, we collect your name, work email, and any optional details you choose to share — such as your district or county and the figures you enter into the risk-preview calculator (for example, membership count).
- Usage and device data. Our servers keep standard request logs — IP address, browser type, device identifiers, pages viewed, referring URLs, and timestamps — collected automatically for security, abuse prevention, and reliability.
- Analytics and session-replay data. We use Microsoft Clarity to understand how visitors use the Site. It captures interaction events — such as clicks, scrolls, mouse movement, and navigation — together with a replay of your session, page metrics, and device and browser information (for example, screen size, browser, operating system, and approximate location inferred from your IP address). See Section 6.
- Cookies and similar technologies. We use strictly necessary cookies to operate the Site, and our analytics provider (Microsoft Clarity) sets first- and third-party cookies and uses similar technologies to recognize sessions. We do not run our own advertising; however, Microsoft may use the data it collects for its own purposes, including advertising. See Section 6.
Legal bases (where applicable, e.g., GDPR): your consent (which you may withdraw at any time), our legitimate interest in operating a business-to-business service, and compliance with legal obligations.
4. How we use information
We use the limited visitor information described above to:
- Respond to your demo or report request and contact you to schedule;
- Provide, maintain, and secure the Site;
- Understand and improve how the Site is used;
- Detect, prevent, and address technical issues, fraud, or misuse; and
- Comply with legal obligations and enforce our Terms & Conditions.
We do not use the published statistical data to build profiles of individuals, and we do not combine it with visitor data to identify anyone.
5. How we share information
We do not sell or rent your personal information for money. We share visitor information with the service providers and analytics partners who process it under contract for limited purposes:
- Notion — stores demo and report requests (our CRM).
- Railway — hosts the Site and processes server logs.
- Google Fonts — the Site loads web fonts from Google; your browser's request to Google may be logged by Google under its own policy.
- Microsoft (Clarity) — provides website analytics, heatmaps, and session replay; receives and processes your interaction, usage, and device data on Microsoft's systems. Unlike our other providers, Microsoft does not act solely on our behalf — it also processes this data as an independent controller for its own purposes, including product improvement and advertising, as described in Section 6 and the Microsoft Privacy Statement.
We may also share visitor information with:
- Legal and safety recipients — when required by law, subpoena, or to protect rights, safety, or the integrity of the Site; and
- Successors — in connection with a merger, acquisition, or sale of assets, subject to this Policy.
6. Cookies and analytics
Strictly necessary cookies. We use strictly necessary cookies to operate the Site and remember basic preferences. You can control cookies through your browser settings; disabling some cookies may affect Site functionality.
Microsoft Clarity. We use Microsoft Clarity, a third-party analytics service, to understand how visitors interact with the Site through behavioral metrics, heatmaps, and session replays (recordings of actions such as clicks, scrolls, and navigation). This data is captured using first- and third-party cookies and similar tracking technologies and is processed by Microsoft on its own systems. We use it to improve the Site and for security and fraud prevention; Microsoft may use it for its own purposes, including product improvement and advertising. We do not use it to identify you, and we do not run our own advertising. Learn more in the Microsoft Privacy Statement and the Microsoft Clarity Terms of Use.
Your choices. Because Microsoft may use Clarity data for advertising, our use of Clarity may be treated as "sharing" of personal information for cross-context behavioral advertising under California law. You can opt out of this analytics collection in any of these ways: enable Global Privacy Control (GPC) in your browser — which we honor, and which stops Microsoft Clarity from loading; block third-party cookies or use a tracker-blocking browser extension; or contact us at the address in Section 11 and ask us to stop. We honor recognized opt-out preference signals, including GPC, where applicable.
7. Third-party services
The Site relies on a small number of third-party providers — currently Railway (hosting and content delivery), Notion (request and CRM storage), Google Fonts (web fonts), and Microsoft Clarity (website analytics, heatmaps, and session replay; see Section 6). Their handling of data is governed by their own privacy policies. The Site may also link to third-party websites; we are not responsible for their content or privacy practices.
8. Your privacy rights
California residents (CCPA/CPRA). Subject to law, you may have the right to know what personal information we collect about you, to request deletion or correction, to opt out of the sale or sharing of personal information, and to be free from discrimination for exercising these rights. We do not sell your personal information for money, and the data we publish is non-identifiable aggregate data; however, our use of Microsoft Clarity may be treated as "sharing" for cross-context behavioral advertising, which you can opt out of as described in Section 6. To make any other request, contact us using Section 11.
Other jurisdictions (e.g., GDPR). You may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing or withdraw consent. We will respond as required by applicable law.
Verification. We may need to verify your identity before fulfilling a request. You may use an authorized agent where the law permits.
9. Data retention and security
We retain visitor information only as long as necessary for the purposes described here or as required by law, then delete or de-identify it. Analytics data collected through Microsoft Clarity is retained by Microsoft in accordance with its own data-retention practices. We use reasonable administrative, technical, and physical safeguards to protect information, though no method of transmission or storage is completely secure.
10. Children's privacy
The Site is intended for school-district and county staff and other business users. It is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
11. Contact us and removal requests
Questions, privacy requests, or concerns about the data on this Site:
Email: admin@irystechnologies.ai
If you believe any statistic could identify you or another person, or you have a safety concern, contact us at the address above and we will review and, where appropriate, suppress or remove the relevant data. See our Terms & Conditions for the removal-request process.
12. Changes to this Policy
We may update this Policy from time to time. We will post the revised version with a new "Last updated" date and, where required, provide additional notice.