Privacy Policy

We collect the following categories of information:

• Account and sign-in (SSO) information

  When you sign in with a single sign-on provider such as Google, we receive basic profile information like your name and email address to create and secure your account.

• Student academic profile data

  Information you provide to build a student profile — such as grades, test scores, course rigor, activities, and context. Student names are minimized and anonymized in our analysis: the modeling and simulation work on de-identified profile data, not on a named individual.

• Billing information

  If you subscribe, our payment processor (Stripe) collects and processes your payment details. We receive limited billing metadata (such as plan, status, and the last digits of a card) but do not store full card numbers.

• Usage and device information

  Standard technical data such as log data, device and browser type, and interactions with the Service, used to operate, secure, and improve it.

We use the information we collect to:

• Provide the Service — generate admission estimates, run simulations, and produce the analyses you request.
• Authenticate you, secure your account, and prevent fraud and abuse.
• Process subscriptions and payments through our payment processor.
• Maintain, troubleshoot, and improve our models and the Service (using minimized and anonymized profile data where possible).
• Communicate with you about your account, transactions, and material changes to the Service.
• Comply with legal obligations and enforce our Terms.

We do not sell your personal information for money, and we do not share it for cross-context behavioral advertising. We do not let third parties use your student profile data for their own marketing. We share information only with the service providers described below, or where required by law.

We rely on a small set of trusted sub-processors to operate the Service. They are permitted to use your information only to provide services to us:

• Stripe

  Payment processing for subscriptions and billing.

• Google

  Single sign-on (SSO) authentication when you choose to sign in with Google.

• Hosting and infrastructure providers

  Cloud hosting, storage, and supporting infrastructure used to run the Service.

We may also disclose information to comply with law, respond to lawful requests, protect our rights and the safety of others, or in connection with a corporate transaction such as a merger or acquisition.

We retain personal information for as long as your account is active or as needed to provide the Service, and thereafter only as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated personal information at any time by contacting us at privacy@stratadmit.com. We will delete or de-identify your information within a reasonable period, subject to limited exceptions permitted by law.

The account holder must be at least 18 years old, or the parent or legal guardian of the student whose information is provided. The Service is not directed to children under 13, and we do not knowingly collect personal information directly from children under 13. Any student information is provided and controlled by the adult account holder. If you believe a child under 13 has provided us information directly, contact us and we will take appropriate steps to delete it.

Depending on where you live, you may have rights regarding your personal information, including the rights to:

• Access — request a copy of the personal information we hold about you.
• Delete — request deletion of your personal information.
• Correct — request that we correct inaccurate personal information.
• Opt out — opt out of the sale or sharing of personal information (note: we do not sell or share your information as defined by these laws).
• Portability and other GDPR rights — including restriction of and objection to certain processing, and the right not to be discriminated against for exercising your rights.

To exercise any of these rights, contact us at privacy@stratadmit.com. We will verify your request and respond within the timeframe required by applicable law. You may also have the right to lodge a complaint with your local data protection authority. For users in the European Economic Area and the United Kingdom, our legal bases for processing include performance of our contract with you, your consent, our legitimate interests, and compliance with legal obligations.

We use reasonable administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice.

For any privacy questions or requests, contact us at privacy@stratadmit.com.