Privacy policy

College Crusader operates this website and client portal. This policy explains how we handle information through our website, services and business communications. Contact us at [email protected] with privacy questions or requests.

We collect information you provide, including your name, email address, college or organization, inquiry details and communications with us. Inquiries are stored in our administration system and may be included in email notifications to our team.

For portal accounts, we maintain your name, email address, verification status, account identifiers, college membership, invitations, product access and saved resources. When you choose Google or Microsoft sign-in, we receive basic identity information supplied by that provider. We do not receive your provider password or request access to your mailbox, calendar, contacts or cloud documents. Passwords created directly with College Crusader are stored as password hashes.

We and our service providers may collect IP addresses, browser and device information, referring pages, cookie identifiers, website activity and information needed for security, authentication and service operation. Please do not submit student records, financial account details or other sensitive personal information through the public inquiry form.

We use information to provide services, respond to inquiries, manage customer relationships, authenticate accounts, deliver authorized resources, remember preferences and saved items, provide support and protect against misuse.

We also use information for analytics, advertising, campaign measurement, newsletters and other marketing communications, and related customer relationship management. These activities may involve our business systems and marketing providers outside the portal. Where required, we obtain consent or provide applicable choices before using information for these purposes.

Identity information received through Google or Microsoft sign-in is used for authentication, account administration and security, rather than advertising audiences or targeting. Service messages may include invitations, verification, password recovery and inquiry responses. Our current transactional email integration disables open and click tracking; other marketing tools may use their own measurement technologies.

We share information with providers that support hosting, website delivery, authentication, email, backup storage, analytics, advertising, customer relationship management and other business operations. Our website and portal infrastructure includes Hetzner, Cloudflare, Telnyx and, when selected for sign-in, Google or Microsoft. Providers process information for their services and may operate in other countries.

Analytics and advertising providers may receive browser identifiers, website activity and campaign information through cookies or similar technologies where enabled. This may constitute sharing or targeted advertising under applicable law. Contact us to exercise any applicable objection or opt-out rights.

Authorized team members and contractors may access information needed to support our customers. We may also disclose information when reasonably necessary to comply with law, protect rights or security, or support a business transfer. We do not make private portal documents publicly accessible through this policy.

Necessary cookies support sign-in, sessions and account security. Disabling them may prevent portal access. Sign-in sessions normally expire after seven days unless renewed. You can sign out, manage browser cookies and review connected identity providers through their account settings.

Analytics and advertising tools may use additional cookies or similar technologies where enabled. You can manage them through available site or provider controls and browser settings. Cookie settings do not remove records already held in our account or business systems. We honor choices and browser signals where required by applicable law.

Pages may embed YouTube or Vimeo content or link to other services. Those services may receive browser information and apply their own privacy practices. You can unsubscribe from marketing emails using the provided method or contact us at [email protected]. Account and service messages are handled separately from marketing preferences.

We retain information while needed for our services, customer relationships, legitimate business purposes, security, recordkeeping and legal obligations. The appropriate period depends on the information and its purpose. Account closure, session expiry or an expired verification link does not automatically remove all associated records. Backups are maintained separately and may retain information until those backup copies are retired; no fixed automatic deletion schedule is promised.

Email [email protected] to request access, correction, account closure, deletion or any applicable restriction or opt-out. Our team handles these requests and may ask for information to verify your identity and authority. We will consider applicable legal requirements and explain any necessary limitations, including records that must be retained or isolated backup copies. You may also have rights to portability or appeal under applicable law; contact us to ask about exercising them.

We use safeguards appropriate to the service, including access controls, secure website connections and encrypted off-server backups where configured. No system can guarantee absolute security. The portal is intended for authorized college personnel and contractors, rather than for collecting student records or providing services directly to children.

We may update this policy as our services or practices change. The effective date identifies the current version. Where required, we provide additional notice or obtain consent for material changes. For questions or requests, contact College Crusader at [email protected].