Last updated: October 11, 2026
EdCredara ("we," "us," or "our") operates the EdCredara platform and Chrome extension (the "Service"). This policy explains how we collect, use, and protect information when you use our Service.
EdCredara is a business-to-business platform used exclusively by accredited doctoral psychology training programs and their authorized personnel — Directors of Clinical Training (DCTs), faculty, students, and site supervisors. We do not offer services directly to the general public.
Account information: name, email address, and role (e.g., DCT, student, faculty) provided when an account is created by a program administrator.
Program data: accreditation-related records entered by authorized users, including student clinical training data, evaluation records, practicum placements, clinical hours, and faculty information. This data is entered by and belongs to the program.
Usage data: standard server logs including IP addresses, browser type, and pages visited, used for security and performance monitoring.
Chrome extension: the EdCredara ARO Autofill extension reads the current page URL and page content on the APA ARO portal only, solely to autofill fields from your program's EdCredara data. It does not collect, store, or transmit any data outside of your authorized EdCredara session.
We use the information we collect to provide and improve the Service, send transactional emails (account setup, evaluation notifications, survey links), and support accreditation reporting workflows. We do not sell, rent, or share personal information with third parties for marketing purposes.
Student education records maintained within EdCredara are subject to the Family Educational Rights and Privacy Act (FERPA). EdCredara acts as a service provider to the institution and handles student data solely as directed by the program. Programs are responsible for ensuring their use of EdCredara complies with FERPA.
Data is stored on Supabase-managed PostgreSQL infrastructure hosted on AWS. We use industry-standard encryption in transit (TLS) and at rest. Access to program data is strictly scoped — users can only access data within their own program.
We retain program data for the duration of the program's active subscription and for a reasonable period after termination to allow for data export. Programs may request deletion of their data by contacting us.
We use the following third-party services to operate the platform:
Each of these services has its own privacy policy governing how they handle data.
Authorized users may request access to, correction of, or deletion of their personal information by contacting us. Student data requests should be directed to the program administrator in accordance with FERPA procedures.
We may update this policy from time to time. We will notify program administrators of material changes via email. Continued use of the Service after changes constitutes acceptance of the updated policy.
Questions about this policy or your data: privacy@edcredara.com