CollegeCareerFit Privacy Policy

CollegeCareerFit LLC, an Indiana limited liability company ("CollegeCareerFit," "we," "us," or "our"), provides a career and college-fit assessment tool for high school and early-college students. This Policy covers two separate places. Our public marketing website at collegecareerfit.com (the "Site") is where we describe the product and where our advertising is measured. The assessment application at app.collegecareerfit.com (the "App") is where a student actually answers questions and sees results. Together they are the "Service." This Policy explains what information we collect through each, how we use and share it, and the choices and rights you have.

The difference between the two matters, so we state it plainly up front: the Site carries an advertising pixel, because we advertise on Facebook and Instagram and need to know whether those ads work. The App carries no advertising pixels, no ad trackers, and no third-party analytics of any kind. Nothing a student does inside the assessment is visible to an advertising network. See Sections 2.2 and 3.

By using the Service, you agree to the collection and use of information as described here. If you are a parent or guardian setting up the Service for a student, or a school or organization sponsoring students, this Policy applies to you as well as to the student.

1. Who this Policy covers

The Service is used by a few different kinds of people, and this Policy applies to all of them:

• Students: the person taking the assessment and receiving career and college recommendations, typically a high school or early-college student.
• Parents and guardians: the adult who invites a student, pays for access, and may have read-only access to that student's results.
• Schools and sponsoring organizations: counselors, mentors, or grant-funded partner organizations that sponsor a group ("cohort") of students and may have read-only access to their results as part of that sponsorship.
• Site visitors: anyone browsing collegecareerfit.com before creating an account.

2. Information we collect

2.1 Information you or your family provide

• Account information. Email address, and a password if you create one (we don't see or store your plain-text password; it's handled by our authentication provider, Supabase). If you sign in with Google, we receive your name, email address, and profile photo from Google, and use it only to create and identify your account, never for advertising, and never shared onward except as described in this Policy.
• Assessment answers and results. Your responses to the RIASEC (Holland Code) career-interest questionnaire, and the career and college recommendations we generate from them.
• ZIP code. Used only to find colleges near you. We don't collect precise device location (like GPS coordinates).
• Saved items. Careers and colleges you bookmark for later.
• Invitation and relationship data. If a parent invites a student, we store the invite code, the parent's email, and the link between the parent's account and the student's results. If a school or sponsoring organization enrolls a cohort, we store which organization a student's profile is associated with.
• Messages you send us. If you contact us through our contact form or by email, we keep that correspondence so we can respond and so we have a record of any request.
• Payment information. Purchases are processed by Stripe, Inc. Stripe collects your payment card details directly. We never receive or store your full card number. We keep only a record that a payment was made, for which product, and a reference ID from Stripe.

2.2 Information we collect automatically

• Basic device and browser information. When you use the assessment, we record technical details (browser type, screen/viewport size, and whether cookies and local storage are available) solely to diagnose and fix problems like a student's progress not saving on a particular device or browser. We do not use this information for advertising or to track you across other websites.
• Security and abuse-prevention data. We use Cloudflare Turnstile, a CAPTCHA-style tool, to tell human visitors apart from bots when creating accounts. Turnstile processes limited technical signals (like browser and network characteristics) for this purpose only.
• Advertising measurement (on the Site only). We advertise CollegeCareerFit on Facebook and Instagram. To see whether those ads work, our marketing website includes the Meta advertising pixel, provided by Meta Platforms, Inc. It sets cookies and tells Meta when a visitor arrives from one of our ads and when they go on to start an account, so we can measure which ads bring people who are actually interested. Meta may also use this to show our ads to similar audiences. This pixel runs only on collegecareerfit.com. It is not present in the assessment application, and it never sees assessment answers, results, saved careers or colleges, or anything tied to a student's account.
• Product usage metrics. We track which features of the tool are used and where people get stuck, so we can improve the product. This is aggregate usage analysis, not individualized ad tracking, and it is never used for marketing or sold to anyone.

2.3 Information from others

If you were invited by a parent or enrolled through a school or sponsoring organization, we receive the information needed to set that up (such as an email address or an invite code) from that parent or organization, not from you directly.

3. What we don't do

• No ads and no ad trackers in the App. The assessment application at app.collegecareerfit.com shows no advertising and carries no advertising pixels and no third-party analytics. Our marketing website does use an advertising pixel to measure our Facebook and Instagram ads (Section 2.2), and that is the only place it runs.
• We never sell or rent personal information. There is no data-broker business here, and there never will be.
• We never use assessment data for advertising. Answers, results, saved careers and colleges, and anything else a student enters in the App are never given to an advertising network and are never used to target ads, on our Service or anywhere else. Advertising measurement is confined to visits to our marketing website, which happen before anyone has an account.

4. How we use information

We use the information above to: score your assessment and generate career and college recommendations; let you save and export your results; connect a parent's account to their invited student's results, and an organization's staff to their sponsored students' results, according to the permissions described in Section 5; prevent fraud and abuse (for example, with Turnstile); send you service email, like password resets, sign-up confirmations, and a notification to a parent when their student finishes the assessment; process payment for paid access; respond to support requests; and understand and improve how the Service is used.

5. How information is shared

5.1 With parents and guardians

When a parent invites a student, the parent gets read-only access to that student's results. This is a core part of how the Service works and is explained to the student as part of the invite flow.

5.2 With schools and sponsoring organizations

Some students join through a school, counselor, or a grant-funded sponsoring organization rather than a parent. In that case, staff at the sponsoring organization may have read-only access to that student's results, so they can review the results with the student. Access is limited to staff at the specific organization that sponsored the student, is controlled through role-based database permissions (not informal trust), and is disclosed to the student at the time they join. Where a parent is also involved, we encourage (and where practical, provide) notice to the parent as well.

5.3 With service providers

We use a small number of vendors to run the Service. Each is only permitted to use information to provide their service to us, not for their own purposes:

• Supabase: our database, authentication, and hosting provider for the app itself. Account data, assessment results, and saved items live here.
• Cloudflare: hosts our websites and provides Turnstile bot protection. If we enable Cloudflare Web Analytics, it is a cookie-free, non-tracking analytics tool.
• Meta Platforms: receives advertising-measurement data from our marketing website only, as described in Section 2.2. Meta receives nothing from the assessment application and is not given access to any student's answers or results.
• Resend: delivers our transactional email (password resets, sign-up confirmations, and the parent notification email when a student finishes their assessment), using Amazon SES to send. We do not use Resend for marketing email.
• Stripe: processes payments. See Section 2.1.

5.4 For legal reasons

We may disclose information if required by law, subpoena, or other legal process, or where we believe in good faith it's necessary to protect the safety of a student, our users, or the public, or to protect our legal rights.

5.5 Business transfers

If CollegeCareerFit is ever involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction. We will notify affected users before information becomes subject to a different privacy policy.

6. Data that powers recommendations (not personal data)

The career and college content we show you is drawn from public and licensed data sources: ZIP-code data from SimpleMaps, wage and outlook data from the U.S. Bureau of Labor Statistics and O*NET, and college data from the U.S. Department of Education's College Scorecard. These are reference datasets about careers and colleges in general; they are not data about you, and using them doesn't involve sharing your personal information with those sources.

7. Cookies and similar technologies

In the App, we use only a small number of essential cookies and browser storage: to keep you signed in (via Supabase authentication), and to support Cloudflare Turnstile's bot-protection check. There are no advertising cookies and no cross-site tracking cookies in the assessment.

On the Site, the Meta advertising pixel described in Section 2.2 sets its own cookies to measure our Facebook and Instagram ads. You can block these with your browser's cookie controls, your browser's tracking protection, or an ad blocker, and doing so has no effect on the assessment. We also honor the Global Privacy Control (GPC) signal on our marketing website, so if your browser sends GPC we will not load the advertising pixel for you.

If you disable cookies or local storage in your browser, parts of the App (like saving your progress) may not work.

8. Children's privacy

CollegeCareerFit is intended for high school and early-college students and is not directed to, or knowingly used to collect personal information from, children under 13, consistent with the Children's Online Privacy Protection Act (COPPA). If we learn that we've collected personal information from a child under 13 without the required parental consent, we will delete it. If you believe this has happened, contact us using the information in Section 12.

9. Students age 13 to 17

Because many of our users are minors, we've built parental and organizational visibility directly into the Service rather than treating it as an afterthought: a parent who invites a student can see that student's results, and a sponsoring school or organization can see the results of the students it sponsors. If you are under 18, an adult (a parent, guardian, or the sponsoring organization) is expected to be involved in setting up your access and reviewing this Policy with you.

10. Your privacy rights and choices

Regardless of where you live, you can ask us to:

• Access the personal information we hold about you or your student;
• Correct inaccurate information;
• Export your assessment results in a portable format;
• Delete your account and associated personal information, subject to what we need to keep for legitimate business or legal reasons (for example, payment records).

To make a request, use the contact form on our Privacy page or email us (Section 12). We'll acknowledge your request within one business day and fulfill it within 45 days. We have never sold personal information for money and we never will.

Opting out of advertising measurement. The Meta advertising pixel on our marketing website (Section 2.2) may count as "sharing" personal information for cross-context behavioral advertising under California law, even though no money changes hands and no assessment data is involved. We want to be straightforward about that rather than hide behind the fact that we are a small company. To opt out, you can do any of the following, and all of them work: send us a request through the contact form on our Privacy page; turn on Global Privacy Control in your browser, which we honor automatically; or block the pixel with your browser's tracking protection or an ad blocker. This applies only to visits to collegecareerfit.com. There is nothing to opt out of inside the assessment, because no advertising pixel runs there.

Every other right above is honored for all users, not only where a specific law requires it.

11. Data retention

• Account and results data is kept while your account is active, and for a reasonable period after you ask us to delete it, to complete the deletion and meet any legal obligations.
• Unclaimed invite codes and abandoned, never-completed anonymous sessions are deleted after 12 months of inactivity.
• Device/diagnostic logs collected to troubleshoot session problems (Section 2.2) are retained for up to 12 months and then deleted.

12. Data security

We use industry-standard measures to protect information, including encrypted connections (HTTPS/TLS) everywhere on the Service, database-level row security so a user's data is only reachable by that user (and, where applicable, their linked parent or sponsoring organization), and authentication handled by Supabase rather than storing passwords ourselves. No method of transmission or storage is 100% secure, but we work to protect your information and will notify affected users if we learn of a breach affecting their personal information, as required by law.

13. Where your information is processed

CollegeCareerFit is a U.S.-based service, built for U.S. high school and college students and U.S. colleges. Information is stored and processed in the United States. The Service is not intended for use outside the United States.

14. Changes to this Policy

We may update this Policy as the Service changes. We'll update the effective date at the top of this page, and for material changes, like a new way of sharing personal information, we'll take reasonable steps to let account holders know, such as by email or a notice on the Service, before the change takes effect.

15. Contact us

Questions, requests, or concerns about this Policy or your information can be sent through the contact form on our Privacy page, or by email to privacy@collegecareerfit.com. We usually reply within one business day.

CollegeCareerFit LLC is an Indiana limited liability company based in Indianapolis, Indiana.