1. Introduction
CampusRaven helps high school students discover colleges, track applications, and share progress with parents and advisors. This Privacy Policy explains what data we collect, how we use it, and how we protect it. By using CampusRaven, you agree to the practices described here.
2. Information We Collect
- Account info: name, email address, hashed password
- Profile info: GPA, SAT/ACT scores, intended major, graduation year, interests, home location, preferences
- Activity: saved colleges, essay drafts, application status, advisor notes, meetings, checklist items, deadlines
- Family connections: parent email addresses you explicitly add to your profile
- Payment info: handled by Stripe. We do not store credit card numbers or full payment details.
- Technical: browser type, IP address, and basic usage data (e.g., pages visited) collected by our hosting provider
- Usage analytics: our hosting provider's built-in analytics (Base44) records the pages you visit, how long a visit lasts, the site that referred you, any campaign tags in the link you followed (such as utm_source or an ad click ID), and a few product events, such as starting or finishing the college fit quiz and creating an account from it. These events are linked to a random visit ID stored in your browser and, if you're signed in, to your account. They do not include your quiz answers, grades, name or email.
- Cookies and browser storage: we use essential cookies and your browser's local storage to keep you signed in, remember your cookie-notice choice, hold the analytics visit ID, and, if you take the quiz without an account, keep your quiz results so you can save them after signing up (we ignore them after 7 days). We do not use advertising cookies.
3. How We Use Your Information
- Provide personalized college recommendations via AI
- Track your applications and upcoming deadlines
- Share your progress with parents and advisors you've explicitly linked
- Send transactional emails (deadline reminders, advisor messages, weekly digests)
- Improve the platform, fix bugs, and develop new features
4. Third-Party Services
We work with the following third-party services to operate CampusRaven:
- Stripe: payment processing
- Base44: hosting platform and infrastructure
- College Scorecard / IPEDS: publicly available college data
- AI features: To generate college recommendations we send your profile details (e.g., GPA, test scores, intended major, and location) or your college fit quiz answers to a large language model; for essay and interview feedback we send the text you submit. These requests run through Base44's AI integration to third-party LLM providers (Anthropic and OpenAI). We send only what is needed to produce your results. Under Base44's data processing terms and these providers' API terms, your data is used only to generate your results, is not used to train AI models, and is never sold or used for advertising.
5. Children's Privacy
- CampusRaven is intended for users 13 years of age and older
- Users under 18 should review this policy with a parent or guardian before signing up
- We do not knowingly collect personal information from children under 13
6. Your Rights
- Access your data via My Profile
- Request data export: use "Export My Data" under My Profile's Privacy & Data section to download a JSON file of your data, or email support@campusraven.com and we'll send it within 30 days
- Request account deletion: use "Delete My Account" under My Profile's Privacy & Data section, or email support@campusraven.com; we'll permanently delete your data within 30 days of request
- Object to or restrict processing: email us at support@campusraven.com
7. Data Sharing
- We do not sell your personal data
- We share data with advisors and parents only when you've explicitly linked them to your account
- We share with service providers (Stripe, Base44, AI providers) strictly under contract and only as necessary to provide the service
8. Data Security
- HTTPS encryption on all connections
- Passwords hashed using industry-standard algorithms
- Server-side row-level access controls (RLS) on every record
- Regular security reviews and infrastructure monitoring
9. Data Retention
- Active accounts: retained as long as you use the service
- Deleted accounts: data permanently removed within 30 days of account deletion
- Backups: backup systems may retain data for up to 90 days before expiring
10. Contact
Questions about this policy? Email us at support@campusraven.com.
11. Updates to This Policy
We'll notify users by email when this policy changes materially. Continued use of CampusRaven after such changes constitutes acceptance of the updated policy.