Privacy Policy

Last updated: June 24, 2026

This Privacy Policy explains what Candor (operated by an individual sole proprietor) (“Candor”) collects, how we use it, and your choices. By using candoradmit.com you agree to this Policy.

Information we collect

• Account data: your email address and a securely hashed password.
• Profile data you enter: academic and applicant information you choose to provide — GPA, test scores, coursework/APs, intended major, state, extracurriculars, awards, demographic flags you opt to share (e.g., first‑generation, legacy, athlete), college preferences, and the schools you look at. You decide what to enter; you can leave fields blank.
• Payment data: if you subscribe, Stripe collects and processes your payment details. We receive a confirmation and limited billing metadata (e.g., that you paid, your email, subscription status) — we never see or store your full card number.
• Technical data: standard server logs (IP address, browser type, timestamps) and a session cookie that keeps you logged in. We use cookies only for login/session and basic site function, not third‑party advertising.

How we use it

To generate your admissions estimates and planning tools; to create and secure your account; to process subscriptions; to send transactional email (password resets, receipts, important notices); to maintain, debug, and improve the Service; and to comply with law. We do not sell your personal information, and we do not show third‑party ads.

Third parties we share with

• Stripe — payment processing (their privacy terms apply to card data).
• Resend / email and (fallback) Gmail SMTP — to deliver transactional email.
• Anthropic (Claude) — some Premium features generate written strategy using an AI model. When used, the relevant profile details needed for that feature may be sent to Anthropic’s API to produce your result. [FLAG: confirm whether Anthropic API requests are sent for any minor’s data and that this is acceptable under Anthropic’s terms for users under 18.]
• Railway — our hosting provider stores the application and database.
• Legal/safety — we may disclose information if required by law or to protect rights and safety.

Data retention

We keep your account and profile data while your account is active. If you delete your account or ask us to delete your data, we remove your personal data within a reasonable period, except where we must keep limited records (e.g., payment/tax records) to comply with law.

Your rights and choices

You can view and edit your profile at any time. You can request a copy of your data, ask us to correct it, or ask us to delete your account and data by emailing jasperthelazzer19@gmail.com. We honor verified requests.

California (CCPA/CPRA): California residents have the right to know what personal information we collect, to request deletion, to correct it, and to not be discriminated against for exercising these rights. We do not sell or “share” personal information for cross‑context behavioral advertising.

EU/UK (GDPR): if you are in the EEA or UK, you have rights to access, correct, delete, restrict, and port your data, and to object to certain processing. Our legal bases are your consent, performance of our contract with you, and our legitimate interest in operating the Service. [FLAG: Candor is US‑based; if you knowingly serve EU/UK minors you should confirm GDPR‑K age‑of‑consent handling, which ranges 13–16 by country.]

Children’s privacy

Candor is intended for students 13 and older. We do not knowingly collect personal information from children under 13. See Minors & Parents for how we handle teen data and parental requests. If you believe a child under 13 gave us data, email us and we will delete it.

Security

We use reasonable safeguards (hashed passwords, encrypted transport/HTTPS, access controls). No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

Changes

We may update this Policy; the “Last updated” date above reflects the latest version.

Questions about this policy? Email jasperthelazzer19@gmail.com.