Tomorrow's Water Workforce Pipeline Toolkit
Privacy Policy
Effective date: 09/18/2026 · Last updated: 09/21/2026
This Privacy Policy describes how information is collected, used, maintained, disclosed, and protected in connection with the Tomorrow's Water Workforce Pipeline Toolkit and related web application (“Toolkit”).
The Toolkit contains resources developed for the ACWA Foundation and is operated and administered by Tomorrow's Talent, LLC (“Tomorrow's Talent,” “we,” “us,” or “our”).
This Privacy Policy applies to information processed through the Toolkit and related account-administration activities.
1. Information We Collect
Depending on how an Agency uses the Toolkit, we may collect the following categories of information.
Agency and Account Information
Information used to create and administer an Agency's subscription, such as:
- Agency name;
- Authorized-user or account-contact names;
- Business email addresses;
- Business telephone numbers;
- Job titles or roles;
- Subscription and access-period information; and
- Other account-administration information.
Authentication and Security Information
Information used to authenticate users and protect accounts, which may include:
- Account email or username;
- Password authentication data;
- Multi-factor authentication information;
- Login and authentication events; and
- Security-related account information.
Passwords are not intended to be stored in readable plain-text form.
We process authentication information using technical safeguards appropriate to the authentication service used by the Toolkit.
Agency Branding
An Agency may upload its logo or other authorized branding for use within the Toolkit or on documents created through the Toolkit.
Roadmap and Program Progress
We may store information regarding an Agency's progress through Toolkit activities, including tasks or milestones that users have marked complete.
Template Information
The Toolkit may store information an Agency enters into customizable templates.
The Agency determines this information, which may include information about Agency personnel, applicants, students, interns, supervisors, or other individuals.
Agencies should not enter sensitive personal information that is not necessary for the applicable template.
Demographic Information
For certain programs, forms, surveys, or reporting functions, we may collect demographic information about program participants. This information may include:
- Race;
- Ethnicity;
- Gender or gender identity;
- Age or age range;
- Geographic or educational characteristics; and
- Other demographic information required for program reporting or grant-funding purposes.
Unless otherwise clearly stated at the time the information is requested, providing demographic information is voluntary.
Demographic information is collected solely for program reporting, evaluation, and applicable grant or funding requirements. It is not collected for marketing, advertising, or to make individual employment, internship, placement, or eligibility decisions, unless a specific program is legally required to collect or use such information and that use is separately disclosed.
We may use demographic information to:
- Meet grant, funding, contractual, or program-reporting requirements;
- Measure participation and program reach;
- Prepare demographic summaries for each participating agency;
- Evaluate participation trends within an individual agency;
- Prepare aggregate demographic reporting across all participating agencies;
- Compile annual demographic statistics and program outcomes by calendar year; and
- Provide aggregate or deidentified reports to the ACWA Foundation, participating agencies, funders, program partners, or other authorized stakeholders.
Demographic reporting may occur at two primary levels:
- Agency-Level Reporting: Demographic information may be summarized for each participating agency so the agency and authorized program administrators can understand the demographic composition of participants served through that agency's program.
- Annual Program Reporting: Agency-level information may be combined with information from other participating agencies to produce aggregate demographic statistics for the overall program during a calendar year.
Reports provided to external partners, funders, stakeholders, or the public will be presented in aggregated or deidentified form and will not be intended to identify individual participants.
We do not sell demographic information, use it for advertising, or use it to create marketing profiles.
Access to identifiable demographic information is limited to authorized personnel and service providers who require access for legitimate reporting, grant-compliance, program-administration, security, or legal purposes.
Race, ethnicity, and certain other demographic characteristics may constitute sensitive personal information under applicable privacy law. We limit the collection, access, use, and retention of this information to purposes reasonably necessary to fulfill reporting, grant-funding, program-evaluation, contractual, and legal requirements.
Activity and Audit Information
We may maintain records concerning use and administration of the Toolkit, such as:
- Dates templates were modified;
- Dates documents or Toolkit files were generated or downloaded;
- Administrative account changes;
- Subscription or access changes;
- Authentication or security events; and
- Administrative actions and associated reasons.
Technical Information
Our systems and infrastructure providers may automatically process limited technical information necessary to operate and secure the Toolkit, such as:
- Internet Protocol address;
- Device or browser information;
- Date and time of requests;
- Session information;
- Error information; and
- Security logs.
2. How We Use Information
We use information collected through the Toolkit for purposes including:
- Creating and administering Agency accounts;
- Authenticating Authorized Users;
- Providing Toolkit functionality;
- Generating customized documents;
- Maintaining Agency roadmap progress;
- Providing customer support;
- Maintaining security and preventing unauthorized access;
- Troubleshooting and improving service reliability;
- Maintaining operational and audit records;
- Managing subscriptions;
- Complying with applicable law and contractual obligations;
- Protecting the rights, security, and integrity of the Toolkit, participating Agencies, Tomorrow's Talent, and the ACWA Foundation; and
- Preparing agency-level and calendar-year aggregate demographic reports required for program evaluation, grant compliance, funding requirements, and stakeholder reporting.
We do not use Toolkit information for targeted advertising.
3. Template Information and Agency Documents
Information entered into Toolkit templates is associated with the Agency account that submitted it.
Access to template information is restricted through technical and administrative controls.
Tomorrow's Talent personnel are not expected to access the substantive contents of Agency template responses during ordinary administration or customer support unless such access is technically enabled, authorized, necessary to address a support or security matter, permitted under the applicable agreement, or required by law.
Administrative personnel may be able to determine that a template has been used or modified and may see related activity information without viewing the substantive content of the template.
4. Information Agencies Submit About Other Individuals
The Toolkit is primarily intended for authorized representatives of subscribing Agencies.
An Agency may choose to enter information concerning employees, interns, students, applicants, supervisors, or other individuals when creating documents or administering internship-related activities.
The Agency is responsible for determining that it has the authority to collect and submit that information and for providing any notices or obtaining any permissions required by applicable law.
Unless specifically requested by a Toolkit feature, Agencies should not submit:
- Social Security numbers;
- Financial-account information;
- Payment-card information;
- Medical or health information;
- Driver's-license or state-identification numbers;
- Authentication credentials; or
- Other sensitive information unnecessary for the applicable Toolkit function.
5. Children and Minors
The administrative Toolkit is intended for use by authorized Agency personnel and is not designed for children to create accounts independently.
The Toolkit may contain information entered by Agencies about student interns, including minors, when necessary for legitimate internship-program administration, program reporting, or grant and funding requirements.
Agencies are responsible for complying with laws and policies applicable to information concerning minors.
If Tomorrow's Talent later offers a feature through which students or children provide information directly to the Toolkit, this Privacy Policy and the associated data-collection process should be reviewed before that feature is launched.
6. Service Providers
We may disclose information to service providers that perform services necessary to operate the Toolkit, such as:
- Cloud-hosting providers;
- Database and file-storage providers;
- Authentication providers;
- Security providers;
- Email or system-notification providers; and
- Technical-support or infrastructure providers.
The Toolkit currently uses Supabase for certain hosted database, authentication, and private-file-storage functionality.
Service providers receive information only as reasonably necessary to perform services on our behalf and are subject to applicable contractual and security requirements.
We may update our infrastructure providers from time to time.
7. Sale, Advertising, and Cross-Context Behavioral Advertising
We do not sell personal information for monetary compensation.
We do not use personal information collected through the Toolkit for targeted or cross-context behavioral advertising.
We do not use demographic information for marketing or advertising purposes.
We do not use third-party advertising trackers within authenticated Toolkit functions.
If these practices change, this Privacy Policy will be updated, and any legally required choices will be provided before the new practice begins.
8. Cookies and Similar Technologies
The Toolkit may use cookies, browser storage, tokens, or similar technologies that are necessary to:
- Authenticate users;
- Maintain secure sessions;
- Remember security-related settings;
- Prevent fraud or unauthorized access; and
- Operate the Toolkit.
We do not currently use these technologies for third-party targeted advertising.
9. California Do Not Track Disclosure
Some browsers allow users to send a “Do Not Track” signal.
Because the Toolkit does not currently use third-party tracking for behavioral advertising across unrelated websites or online services, the Toolkit does not separately alter its behavior in response to legacy browser Do Not Track signals.
If legally recognized opt-out preference signals become applicable to our data practices, we will process them as required by applicable law.
Third parties are not permitted to use the authenticated Toolkit to track users across unrelated websites for targeted advertising.
10. Data Retention
We retain information only for as long as reasonably necessary for the purposes for which it was collected, including operating the Toolkit, administering subscriptions, maintaining security and audit records, fulfilling grant and reporting requirements, resolving disputes, and complying with legal and contractual obligations.
Our intended retention practices include:
- Active account information: retained for the duration of the Agency's subscription and for a limited period thereafter as needed for administration, legal obligations, or account restoration;
- Template responses: retained until the Agency modifies or deletes the information, subject to applicable backup, legal-hold, grant, contractual, and records-retention requirements;
- Agency logos: retained until removed by the Agency or the applicable account is deleted, subject to normal backup processes;
- Demographic information: identifiable demographic information is retained only for as long as reasonably necessary for applicable reporting, grant, funding, contractual, program-evaluation, or legal requirements. Aggregated or deidentified demographic statistics may be retained for historical reporting, year-over-year analysis, program evaluation, and grant reporting;
- Activity records: visible to the Agency within the Toolkit for approximately 90 days and retained internally according to our applicable security, contractual, reporting, and records-retention schedule;
- Security records: retained for a period reasonably necessary for fraud prevention, security, audit, and legal-compliance purposes; and
- Backups: information may remain temporarily in secure backup systems until overwritten pursuant to our normal backup schedule.
We periodically review retention practices and may delete or deidentify information when continued retention is no longer reasonably necessary.
11. Security
We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, destruction, use, modification, or disclosure.
Depending on the system involved, safeguards may include:
- Authentication controls;
- Multi-factor authentication;
- Access restrictions;
- Encrypted network communications;
- Private file storage;
- Logging and monitoring;
- Role-based administrative permissions; and
- Security controls provided by our infrastructure providers.
No online system can guarantee absolute security.
If we identify a security incident involving personal information, we will investigate and provide notifications when required by applicable law.
12. Access, Correction, and Deletion
Authorized Agency users may be able to modify or delete certain information directly through the Toolkit, including template responses and Agency branding.
An Agency may also contact Tomorrow's Talent to request:
- A copy of account information we maintain;
- Correction of inaccurate account information;
- Deletion of information, when applicable;
- Information regarding applicable retention practices; or
- Assistance with account administration.
Some information may be retained when reasonably necessary or legally required, including information required for:
- Security;
- Fraud prevention;
- Grant or funding documentation;
- Contractual obligations;
- Legal claims;
- Recordkeeping; or
- Compliance with law.
Aggregated or deidentified information that can no longer reasonably be associated with a particular individual may be retained for historical, statistical, program-evaluation, and reporting purposes.
13. California Privacy Rights
California law provides certain individuals with privacy rights under applicable circumstances.
If Tomorrow's Talent is subject to the California Consumer Privacy Act with respect to particular information, California residents may have rights including the right to:
- Know the categories and specific pieces of personal information collected;
- Know the sources and purposes for which information is collected or used;
- Know the categories of third parties to whom information is disclosed;
- Request correction of inaccurate personal information;
- Request deletion of personal information, subject to legal exceptions;
- Opt out of the sale or sharing of personal information when applicable;
- Limit certain uses or disclosures of sensitive personal information when applicable; and
- Receive equal service and treatment for exercising applicable privacy rights.
We currently do not sell personal information or share personal information for cross-context behavioral advertising.
Requests may be submitted using the contact information below.
We may take reasonable steps to verify the identity and authority of a person making a request.
Authorized agents may submit requests where permitted by applicable law.
14. Disclosure Required by Law or for Security
We may disclose information when reasonably necessary to:
- Comply with applicable law, regulation, court order, subpoena, or other lawful process;
- Respond to lawful governmental requests;
- Investigate fraud, misuse, or security incidents;
- Enforce applicable agreements;
- Protect the security or integrity of the Toolkit; or
- Protect the rights or safety of Tomorrow's Talent, the ACWA Foundation, participating Agencies, users, or others.
15. Changes to This Privacy Policy
We may update this Privacy Policy periodically.
The “Last Updated” date at the beginning of this Policy identifies the most recent revision.
If we make a material change affecting how personal information is collected, used, or disclosed, we will provide reasonable notice through the Toolkit, by email to the Agency's designated contact, or through another appropriate method.
16. Contact Us
Questions, requests, or concerns about this Privacy Policy or information handled through the Toolkit may be directed to:
Tomorrow's Talent, LLC599 N. Arrowhead Ave., PMB 7, San Bernardino, CA 92401info@tomorrowstalent.org909.206.6102Privacy requests should include enough information for us to identify the applicable Agency account and understand the request.