Privacy Policy
In plain English. No legal tricks.
Last updated: January 31, 2026
The Short Version
We don't sell your data. We don't share it with schools unless you explicitly ask us to. We don't use it for targeted advertising. We don't store your transcripts after processing them. You can delete everything at any time. That's it. That's the policy.
Why This Matters
Most college search platforms make money by selling your information to schools, advertisers, and data brokers. They collect your GPA, test scores, interests, and contact info, then package it up and sell it to the highest bidder. You become the product.
GradFax is different because our business model is different. Our revenue comes from schools who want to provide verified, transparent information about themselves, not from harvesting your personal details. The moment we sell your data, we lose the trust that makes GradFax valuable in the first place.
What We Collect (And Why)
Email Address
When: If you sign up for our newsletter or create an account.
Why: To send you updates about new features, scholarship deadlines, and application season tips.
Stored: In our database (Supabase). You can unsubscribe or delete anytime.
Search Queries
When: Every time you search for schools.
Why: To return results and improve our matching quality over time.
Stored: Sent to OpenAI for processing. We do not store your raw search queries permanently. OpenAI's API does not use your data to train their models.
Profile Preferences
When: If you fill out the student profile quiz or set preferences.
Why: To personalize your search results and match scores.
Stored: On your device (localStorage) by default. If you create an account, it syncs to your account so you can access it from any device. Your preferences never leave your device unless you choose to create an account.
Saved Schools
When: When you save or compare schools.
Why: So you can come back to them later.
Stored: On your device (localStorage) by default. Syncs to your account if you sign in.
Transcript Uploads
When: If you use our transcript analysis feature.
Why: To analyze your academic history and provide course-by-course insights.
Stored: Processed and then discarded. We do not keep your transcript after analysis is complete. If you have an account, we store the analysis results (not the transcript itself) so you can reference them later.
Basic Analytics
When: When you visit any page.
Why: To understand which features people use so we can improve them.
Stored: Google Analytics collects page visits, device type, and general location (city level, not your address). You can opt out through your browser settings or by using an ad blocker.
Payment Information
When: If you purchase a premium transcript scan ($1).
Why: To process your payment.
Stored: Processed by Square. We never see, store, or have access to your full card number. Square handles all payment security.
What We Don't Do
Sell your data to anyone. Period.
Share your information with schools without your explicit opt-in consent.
Use your data for targeted advertising.
Store your transcripts after processing.
Track you across other websites.
Let schools pay to access your profile without your permission.
Use dark patterns or manipulative design to trick you into sharing more.
Future: Opt-In School Discovery
In the future, we plan to offer an optional feature where you can choose to make your profile visible to schools. Think of it as schools finding you instead of you finding them.
Here is how it will work:
- ✓You choose whether to opt in. It will never be automatic or default.
- ✓You control exactly what information is shared.
- ✓You can opt out at any time and your data is immediately removed.
- ✓Schools pay us for access to this feature. You never pay anything.
- ✓Opting in will never affect your search results or match scores.
This feature is not live yet. We will update this policy and notify you before it launches.
Your Rights
Delete Everything
Request deletion of all your data at any time. We will remove it within 30 days.
Export Your Data
Request a copy of everything we have about you in a readable format.
Opt Out of Analytics
Use an ad blocker or browser settings to prevent Google Analytics tracking.
Unsubscribe
Every email has an unsubscribe link. One click and you are done.
Correct Your Data
If we have something wrong, tell us and we will fix it.
Ask Questions
Email us anytime. We will explain exactly what we do and why.
For California Residents (CCPA)
Under the California Consumer Privacy Act, you have the right to know what personal information we collect, request its deletion, and opt out of its sale. Since we do not sell personal information, the "opt out of sale" right is already satisfied by default. You can exercise any of your rights by contacting us.
For EU/UK Residents (GDPR)
Under the General Data Protection Regulation, you have rights to access, rectify, erase, restrict processing, and port your data. Our lawful basis for processing is legitimate interest (providing the search service you requested) and consent (for email communications). You may withdraw consent at any time. Contact us to exercise any of these rights.
Cookies
We use essential cookies to make the site work (keeping you logged in, remembering preferences) and analytics cookies through Google Analytics to understand usage patterns. We do not use advertising cookies or tracking cookies. You can block all non-essential cookies in your browser settings without affecting site functionality.
Users Under 13
GradFax is designed for students aged 16 and older. We do not knowingly collect information from children under 13. If we learn we have collected data from a child under 13, we will delete it immediately. If you believe a child under 13 has provided us with personal information, please contact us.
Third-Party Services
We use the following third-party services. Each has their own privacy policy:
Contact Us
Questions about this policy? Want to exercise your data rights? Just want to know more?
privacy@gradfax.com
GradFax LLC | Wyoming, USA
Changes to This Policy
If we make meaningful changes to how we handle your data, we will update this page and, if you have an account, notify you by email before the changes take effect. We will never retroactively change how we use data you have already shared with us under a previous version of this policy.
This policy was written by humans for humans. No legal jargon generator was involved.
© 2026 GradFax LLC. All rights reserved.