Privacy Policy

We collect the information you give us directly when you sign up, complete onboarding, or update your profile. This typically includes:

• Account details — name, email address, password (stored hashed and managed by Supabase Auth).
• Profile details — GPA, ACT/SAT scores, home state, intended major, graduation year, sport and position (athletes only).
• Schools you follow within the dashboard.
• Payment information — card details are collected and stored by Stripe; we never see or store full card numbers.
• Usage data — pages visited, features used, alerts read or clicked.

• Personalize your alert feed, scholarship matches, and AI counselor responses.
• Send transactional emails (welcome, deadline reminders, billing notices).
• Send the weekly Monday digest of new alerts for the schools you follow (opt-out anytime).
• Detect fraud, abuse, and security incidents.
• Improve the product — anonymized, aggregated usage informs roadmap decisions.

We do not sell or rent your personal information to third parties. We do not target ads to minors with your data.

We share data only with the service providers needed to run the product:

• Supabase — authentication and primary database.
• Stripe — payment processing and subscription billing.
• SendGrid — transactional email delivery.
• Anthropic — powers the AI Counselor (your messages and profile data are sent at request time; not retained for training per Anthropic's commercial terms).
• Railway, Netlify — infrastructure hosting.

Each provider operates under its own privacy policy and security commitments. We do not share data with marketing or advertising networks beyond what is required for first-party analytics (Facebook Pixel and Google Analytics 4 for our marketing pages).

• Access or update your profile anytime from the Profile page in your dashboard.
• Cancel your subscription anytime from the Settings page or directly through the Stripe customer portal.
• Request deletion of your account by emailing privacy@campusscouts.com — we will erase your account within 30 days, retaining only records required by law (e.g., billing history).
• Unsubscribe from marketing emails using the link in any digest. Transactional emails (billing, security) cannot be opted out of while your account is active.

CampusScouts is intended for high-school-aged users (typically 13–19) and their parents. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has signed up, contact us at privacy@campusscouts.com and we will delete the account.

Active accounts: data is retained while you use the service. After you cancel, we retain your profile for 90 days in case you reactivate, then permanently delete it. Billing records are retained for 7 years to comply with US tax law.

All data is transmitted over HTTPS. Authentication is handled by Supabase Auth with industry-standard JWT signing. We do not store plaintext passwords. We follow least-privilege access for our internal team and audit production data access regularly.

We may update this policy as the product evolves. Material changes will be announced via email at least 14 days before they take effect. Continued use of the service after the effective date means you accept the updated policy.

Questions or requests under GDPR, CCPA, or any other applicable privacy law? Email privacy@campusscouts.com. We respond within 7 business days.