Privacy Policy

Scholarship Suite (“we,” “us,” “our”) operates the Scholarship Suite web application at scholarshipsuite.com (the “Service”). This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our Service.

By creating an account or using the Service, you consent to the data practices described in this policy.

1. Information We Collect

1.1 Information You Provide Directly

Account Information

• Full name
• Email address
• Password (stored in hashed form; we never have access to your plaintext password)

Student Profile Information

• Age and grade level
• Location (city and state)
• Ethnicity and gender (optional)
• GPA and standardized test scores (SAT/ACT)
• School name
• Extracurricular activities and hobbies/interests
• Career goals
• Parents' employers (for company scholarship matching)
• First-generation college student status

Scholarship Data

• Scholarship names, amounts, deadlines, URLs, and sources
• Application status and notes
• Requirements and eligibility criteria

Essay Content

• Essay prompts
• Essay drafts and final versions
• Essay tags and categorizations

Teacher and Recommendation Information

• Teacher names, subjects, and email addresses
• Description of your relationship with each teacher
• Recommendation letter request status and deadlines

Application Records

• Application submission dates and outcomes
• Amounts won
• Application materials and notes

1.2 Information We Collect Automatically

Usage and Activity Data

• Actions you take within the Service (e.g., adding a scholarship, saving an essay)
• Timestamps of activity
• Consecutive-day usage streaks

Technical Data

• Server logs (IP address, browser type, request timestamps)
• Error logs for debugging purposes

Cookies and Session Data

• Authentication session cookies (HTTP-only, secure) managed by Supabase Auth
• We do not use advertising cookies, tracking pixels, or third-party analytics cookies

1.3 Information Generated by the Service

Our AI agents generate the following data based on your inputs:

• Scholarship match percentages and eligibility assessments
• Essay strategy suggestions and brainstorming angles
• Essay review feedback, scores, and improvement recommendations
• Recommendation letter request templates, brag sheets, and draft letters
• Application prioritization plans and schedules
• AI processing metadata (token counts for service monitoring)

2. How We Use Your Information

We do not use your information for advertising, selling to data brokers, training AI models, or building marketing profiles.

3. How We Share Your Information

We do not sell your personal information. We share your data only with the following third-party service providers:

3.1 Anthropic (Claude AI)

Your student profile, essay prompts, essay drafts, scholarship details, and teacher information are sent to Anthropic's Claude API when you use any AI agent feature. Under Anthropic's commercial API terms, data submitted through the API is not used to train their models.

3.2 Supabase

All account data is stored in a PostgreSQL database hosted by Supabase, which also handles user authentication. Data is encrypted in transit and at rest.

3.3 Resend

Your email address, name, and upcoming scholarship deadline details are shared to deliver daily deadline reminder emails (if opted in).

3.4 Vercel

Server request logs, which may include IP addresses and request metadata, are processed by Vercel for hosting.

3.5 Legal and Safety Disclosures

We may disclose your information if required by law or to protect our rights, prevent fraud, or protect user safety.

4. Data About Others (Teachers)

When you add teacher information, you represent that you have a legitimate educational relationship with that teacher and will use any AI-generated templates responsibly. We do not contact teachers directly.

5. Data Security

• Encryption in transit (TLS/HTTPS) and at rest
• Passwords hashed using industry-standard algorithms
• HTTP-only, secure authentication cookies
• API keys stored as environment variables, never exposed to clients
• API routes verify authentication before returning user data
• Data isolation — each user's data is scoped to their account

6. Data Retention

6.1 Active Accounts

We retain your data for as long as your account is active.

6.2 Account Deletion

When you request account deletion, all data is permanently and irreversibly deleted — profile, scholarships, essays, teacher records, and activity logs.

6.3 Backup and Residual Data

Deleted data may persist in encrypted backups for up to 30 days.

6.4 Server Logs

Technical logs are retained for up to 90 days.

7. Your Rights and Choices

• Access: View all your data through the Service dashboard
• Update: Modify your data at any time through the Service
• Delete: Request complete deletion at privacy@scholarshipsuite.com (processed within 30 days)
• Email Preferences: Enable or disable reminders in settings
• Data Portability: Request a copy at privacy@scholarshipsuite.com
• Withdraw Consent: Delete your account at any time

8. Children's Privacy

The Service is for users 13 years of age or older. Users between 13 and 18 must have parental consent. Parents may review, request deletion of, or refuse further collection of their child's data by contacting privacy@scholarshipsuite.com.

9. Cookies and Tracking Technologies

We use only essential cookies for authentication sessions. We do not use advertising cookies, analytics cookies, tracking pixels, fingerprinting, or cross-site tracking.

10. California Privacy Rights (CCPA/CPRA)

California residents have the right to know, delete, and opt out of sale of personal information. We do not sell your personal information. Contact privacy@scholarshipsuite.com to exercise your rights.

11. International Users (GDPR)

If you are in the EEA, UK, or Switzerland, we process your data based on consent, contract performance, and legitimate interests. You have additional rights to restrict processing, object to processing, and lodge complaints with your local data protection authority. Your data is processed in the United States.

12. Educational Records (FERPA)

Scholarship Suite is a direct-to-consumer service. We are not an educational institution, and the data you provide is not considered an “education record” under FERPA.

13. Do Not Track Signals

We do not track users across third-party websites and do not respond to DNT signals. We use only essential authentication cookies.

14. Changes to This Privacy Policy

We may update this policy from time to time. Material changes will be communicated by email and by posting an updated policy with a new date.

15. Contact Us

If you have questions about this Privacy Policy, please contact us at:
Scholarship Suite
Email: privacy@scholarshipsuite.com

This Privacy Policy was last updated on March 1, 2026.