Privacy Policy

GradPath ("we", "us", or "the Service") is a graduate-school application management tool operated by an individual developer. This policy explains what information we collect, how we use it, and the choices you have. By using GradPath, you agree to the practices described here.

We collect the following categories of information:

• Account information. When you sign up, our authentication provider collects your name and email address to create and secure your account.
• Application data. Information you enter about your graduate applications — university names, programs, countries, deadlines, tasks, and status.
• Documents you upload. Files you choose to upload, such as statements of purpose, CVs, and transcripts.
• Usage data. How you interact with features — pages visited, actions taken such as adding an application or saving a funding opportunity, and errors encountered — used to understand which parts of GradPath are useful and to keep the Service running reliably.
• Advertising measurement data. If you accept advertising cookies, your IP address and the pages you visit are shared with Meta so we can tell which adverts bring people to GradPath. This is off unless you accept it, and it never includes your applications, documents or anything else you enter into GradPath. See section 6.
• Payment information. If you subscribe to a paid plan, payment details are handled by our payment processor. We do not store your full card details on our servers.

We use your information to provide and improve the Service: to operate your account, store and display your applications and documents, generate AI-assisted feedback on documents you submit for review, process payments for paid plans, and communicate with you about your account.

When you choose to run an AI Review on a document, the text of that document is sent to our AI processing provider (Anthropic) to generate feedback. This happens only when you actively request a review. The feedback is guidance to help you improve your writing — it does not guarantee any admission outcome. We do not use your documents to train AI models.

We rely on trusted third parties to operate GradPath. Each processes data only as needed to provide their service:

• Clerk — account authentication and management.
• Supabase — database and secure file storage for your applications and documents.
• Anthropic — AI analysis of documents you submit for review.
• Flutterwave — payment processing for paid plans.
• Vercel — application hosting and delivery.
• PostHog — product analytics. Receives the usage data described above so we can see which features are used; it does not receive your documents, and it is not used for advertising.

Each of the above processes data on our instructions and for no purpose of its own. One further service does not work that way, and we list it separately because the distinction matters:

• Meta — advertising measurement, and only if you accept advertising cookies. Meta is an advertising network rather than a processor acting solely on our behalf, and it may use what it receives for its own purposes, including targeting adverts to you elsewhere. This is why we ask first rather than switching it on by default.

These providers may process and store data on servers located outside your country of residence.

We use two kinds of non-essential tracking, and they are not treated the same way:

• Product analytics run by default. They tell us which features people use so we can improve them, they are served through our own domain rather than a third-party ad domain, and they are never used to target advertising.
• Advertising cookies are off until you accept them. They let us attribute sign-ups to the adverts that produced them, which means sharing your IP address and the pages you visit with Meta.

Cookies that are strictly necessary — keeping you signed in, for example — are always set, because the Service cannot work without them.

Declining advertising cookies costs you nothing: every feature behaves identically either way.

We retain your information for as long as your account is active. You can delete individual applications and documents at any time. When you delete your account, your personal data and associated records are removed from our systems, subject to any retention our providers require for legal or operational reasons.

You have control over your data. From your account settings you can:

• Export your data — download a copy of your applications, tasks, documents, and reviews.
• Delete your account — permanently remove your account and associated data.
• Update your information — edit your profile and notification preferences.
• Change your advertising choice — accept or withdraw advertising cookies in section 6, whether or not you have an account.

If you have questions or requests regarding your data, contact us at the address below.

We take reasonable measures to protect your information, including encrypted connections and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

GradPath is intended for users pursuing graduate education and is not directed at children under 16. We do not knowingly collect personal information from children.

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Service after changes constitutes acceptance of the revised policy.

For any questions about this Privacy Policy or your data, contact us at adeyemioluwakorede8@gmail.com.