Privacy Policy

This Privacy Policy explains how EdMission AI, Inc. (“EdMission,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects Personal Information when you use EdMission, including our website, applications, AI-powered features, tools, and related services (collectively, the “Service”).

1. Information We Collect

Account Information

When you sign in with Google, we may receive and store information such as:

• your email address;
• your name;
• your Google profile image;
• account and authentication identifiers;
• authentication provider information;
• account creation and login timestamps; and
• session and authentication information.

A Google/Supabase authentication account may be created before you complete EdMission’s age and country eligibility screening.

Profile and Admissions Information

Depending on the features you use, we may collect information including:

• country or region of residence;
• date of birth or age information;
• school, grade, and graduation year;
• citizenship or residency information relevant to admissions planning;
• GPA, coursework, testing, majors, and academic interests;
• activities, awards, leadership, research, and employment;
• college lists and preferences;
• essays and drafts;
• resumes and transcripts;
• questionnaire responses;
• goals and preferences; and
• other information you choose to provide.

AI Conversations and Inputs

When you use AI-powered features, we may process and store information such as:

• prompts and questions;
• chat messages and conversation context;
• essays and drafts;
• builder inputs;
• activities and awards;
• application-related information;
• relevant profile information; and
• AI-generated responses.

Uploaded Files

You may upload resumes, transcripts, or other documents.

EdMission may store the original uploaded file and information extracted or generated from that file.

Payment and Referral Information

Payments are processed by Stripe.

EdMission may receive and store information such as:

• transaction identifiers;
• payment status;
• amount paid;
• purchase date;
• refund or dispute status;
• paid-access or entitlement information; and
• recorded paid-feature usage relevant to administering purchases and refunds.

If you participate in our referral program, we may also store:

• referral links or codes;
• referring and referred users;
• associated orders;
• Stripe payment and refund identifiers;
• referral qualification dates;
• reward status;
• refund or dispute status; and
• information reasonably necessary to prevent duplicate rewards, fraud, or abuse.

A friend email entered only as part of a “how did you hear about us” or similar profile field is separate from the referral reward program unless expressly stated otherwise.

Usage and Technical Information

We may collect information including:

• AI and feature usage;
• model or feature used;
• usage amounts and processing information;
• account and profile change history related to security, fraud prevention, or abuse detection;
• IP address;
• browser and device information;
• approximate location;
• pages or screens visited;
• session information;
• request paths;
• cookie or analytics identifiers; and
• technical logs.

We currently use Google Analytics for general usage analytics.

We do not intentionally send student essays, chats, resumes, transcripts, school information, or application content to Google Analytics through custom analytics events.

2. How We Use Information

We may use Personal Information to:

• create and manage accounts;
• determine age and country eligibility;
• provide and personalize the Service;
• generate AI responses and recommendations;
• process uploaded documents;
• maintain profiles and application-planning information;
• provide paid features and manage usage allowances;
• administer paid access and evaluate refund eligibility;
• process purchases, refunds, disputes, and referral rewards;
• provide customer support;
• maintain security and prevent fraud or abuse;
• troubleshoot technical problems;
• conduct quality assurance and safety review;
• evaluate and improve features and Service performance;
• analyze Service usage;
• comply with legal, tax, accounting, and regulatory obligations; and
• establish, exercise, or defend legal claims.

3. Artificial Intelligence Providers

EdMission uses third-party artificial intelligence providers, including OpenAI, Google Gemini, and Anthropic.

Only information reasonably necessary for the applicable request or feature is sent to an AI provider. EdMission does not send an unrelated copy of your entire account or database.

OpenAI

EdMission uses OpenAI APIs for certain AI-generated responses, structured outputs, and embeddings.

Information sent to OpenAI may include:

• prompts and questions;
• recent conversation context;
• essays and drafts;
• activities and awards;
• profile information relevant to the request, such as GPA, testing, majors, or college lists;
• builder inputs; and
• search or retrieval queries.

OpenAI API data is not used to train OpenAI’s general models by default unless a customer affirmatively opts in.

Under EdMission’s current configuration, API data may be retained by OpenAI for abuse-monitoring, safety, or operational purposes for up to approximately 30 days, subject to applicable policies and legal requirements.

Google Gemini

EdMission uses paid Google Gemini API services for certain AI and document-processing features.

Gemini may receive request-specific information similar to the information described above when it is used to process a request.

For certain document-processing features, an uploaded PDF may be sent to the Gemini Files API.

Paid Gemini API data is not used to train Google’s general models.

EdMission currently keeps Gemini project logging disabled for the APIs it uses. Standard prompts and responses therefore are not retained in EdMission-accessible Gemini project logs.

Google may separately retain limited API data for abuse monitoring, safety, security, or legal purposes in accordance with its applicable policies. This provider-side processing is separate from EdMission’s project logging settings.

EdMission attempts to delete Gemini Files API copies after processing. Google also automatically deletes Files API uploads after approximately 48 hours.

Anthropic

EdMission may use Anthropic as a fallback AI provider.

If Anthropic is used, it may receive request-specific chat, essay, profile, activity, or other contextual information necessary to process the request.

EdMission does not currently send uploaded PDF files themselves to Anthropic.

Anthropic commercial API data is not used to train its general models by default.

Under EdMission’s current configuration, API inputs and outputs may generally be retained for up to approximately 30 days, subject to applicable safety, legal, and policy exceptions.

Third-party provider practices may change. We will update this Privacy Policy when a material change affects how Personal Information is processed.

4. Internal Access to User Content

Authorized EdMission administrators and engineers may access identifiable User Content when reasonably necessary for legitimate operational purposes, including:

• customer support;
• debugging;
• quality assurance;
• safety review;
• technical investigation;
• feature evaluation;
• fraud or abuse review; and
• product improvement.

This may include chats, essays, profile or application information, uploaded files, or extracted document information.

Access is intended to be limited to personnel who need it for legitimate operational purposes.

5. How We Share Information

We may share Personal Information with service providers that help us operate the Service, including providers of:

• artificial intelligence;
• authentication;
• cloud hosting and databases;
• file storage;
• analytics;
• payment processing;
• communications;
• security; and
• other technical infrastructure.

We may also disclose information:

• when required by law or legal process;
• when reasonably necessary to protect users, EdMission, or others;
• to investigate fraud, abuse, or security incidents;
• in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction; or
• at your direction or with your consent.

EdMission does not intentionally provide identifiable Personal Information to third-party AI providers for the purpose of training their general foundation models.

6. Uploaded Files

Original uploaded resumes, transcripts, or similar files may remain stored until you delete the associated task or delete your EdMission account.

Information extracted from uploaded files may be stored separately as part of your account.

Temporary processing copies may be deleted after processing.

If an uploaded file is sent to the Gemini Files API, EdMission attempts to delete the provider-side copy after processing. Google also automatically deletes Files API uploads after approximately 48 hours.

7. Payments, Refunds, and Referrals

We use transaction, paid-feature usage, and referral information to:

• provide paid access;
• administer purchases;
• evaluate refund eligibility;
• process refunds and disputes;
• apply referral discounts;
• determine referral eligibility;
• issue referral rewards;
• prevent duplicate rewards or refund abuse; and
• detect or investigate fraud or other abuse.

Relevant payment information may be processed by Stripe.

Certain transaction and referral records may be retained after account deletion where reasonably necessary for:

• accounting;
• tax compliance;
• fraud prevention;
• refund or chargeback processing;
• dispute resolution; or
• legal compliance.

8. Analytics and Technical Logs

EdMission uses Google Analytics to understand general usage of the Service.

Google Analytics may process information such as page visits, session information, cookie or device identifiers, browser information, and approximate location.

EdMission does not intentionally configure Google Analytics custom events to transmit student-generated application content such as essays, chats, resumes, transcripts, or application data.

EdMission also maintains technical server logs for security, reliability, debugging, and troubleshooting.

Production logging is designed to avoid intentionally recording raw prompts, email addresses, profile values, uploaded-document contents, or raw AI responses where those values are not necessary for technical operations.

Technical logs may include information such as:

• request identifiers;
• IP addresses;
• request paths;
• processing stages;
• provider or model used;
• processing time;
• error or failure codes;
• retry information; and
• stack traces.

9. Data Retention

We retain Personal Information only for as long as reasonably necessary to provide the Service and for the purposes described in this Privacy Policy.

Account and Student Data

Profile information, application data, chats, essays, activities, awards, and similar account-linked information may remain in active systems while your account is active.

Uploaded Files

Original uploaded files may remain until the associated task or account is deleted.

Extracted Information

Structured information extracted from documents may remain as part of your account until the related information or account is deleted.

Payment and Referral Records

Certain transaction and referral information may be retained longer where reasonably necessary for accounting, tax, fraud-prevention, refund, dispute, or legal purposes.

Backups

EdMission currently creates routine production database backups approximately once per day and retains recent backups for up to 7 days.

If Personal Information is deleted from active systems, a copy may temporarily remain in a routine backup until that backup expires through the normal retention cycle.

Third-Party Providers

Information processed by third-party service providers may remain temporarily according to their own applicable retention practices, including the AI-provider practices described above.

10. Account Deletion

You may delete your EdMission account through the account-deletion functionality provided by the Service.

When an account deletion request is successfully processed, applicable account-linked Personal Information is removed from active systems, including:

• profile and application data;
• activity and award information;
• AI conversation history;
• uploaded-task data and associated files;
• applicable cached user content; and
• authentication information.

If an associated stored file cannot be successfully deleted, EdMission does not represent the deletion as successfully completed and retains the information necessary to retry the deletion.

Certain public or community content may remain in a de-identified or disconnected form. For example, a forum post or response may remain while its association with your account is removed.

Certain transaction, accounting, tax, fraud-prevention, refund, dispute, security, or legal records may also be retained where reasonably necessary or legally required.

Deleted information may remain temporarily in routine database backups for up to 7 days.

Deleting your account does not automatically create a right to a refund.

11. Age and Country Eligibility

EdMission Public Beta is available only in selected countries and regions.

We use your country or region of residence and date of birth to determine whether you meet the applicable eligibility requirements.

If you do not meet the applicable minimum age requirement or the Public Beta is not available where you live, EdMission may prevent you from completing onboarding or accessing student features.

Because Google authentication occurs before EdMission’s eligibility screening is completed, limited authentication information such as your email address, name, profile image, and account identifier may be created or stored before eligibility is determined.

Users who are not eligible are not permitted to proceed to student profile, application, document-upload, or AI features.

EdMission may retain limited eligibility information as reasonably necessary to enforce these restrictions and prevent immediate circumvention of an age or country eligibility decision.

12. Cookies and Similar Technologies

EdMission and its service providers may use cookies, local storage, and similar technologies for:

• authentication;
• security;
• Service functionality;
• analytics; and
• user preferences.

Some technologies may be necessary for the Service to function.

13. International Data Processing

EdMission AI, Inc. is a United States company.

Personal Information may be transferred to and processed in the United States and other countries where EdMission or its service providers operate.

Those countries may have data-protection laws that differ from the laws where you live.

Where applicable law requires additional protections for international transfers, EdMission will use appropriate safeguards.

14. Security

EdMission uses administrative, technical, and organizational measures intended to protect Personal Information against unauthorized access, loss, misuse, or alteration.

No online system can guarantee absolute security.

You are responsible for maintaining the security of your own account and authentication credentials.

15. Your Privacy Rights

Depending on where you live, applicable law may provide rights concerning your Personal Information.

These may include rights to:

• request access to certain Personal Information;
• request correction of inaccurate information;
• request deletion;
• object to or restrict certain processing;
• request a portable copy of certain information;
• withdraw consent where processing is based on consent; or
• exercise other rights provided by applicable law.

These rights may be subject to legal exceptions.

We may need to verify your identity before completing certain requests.

Privacy requests may be sent to:

[email protected]

16. Changes to This Privacy Policy

We may update this Privacy Policy as EdMission, our technology, service providers, business practices, or legal requirements change.

When we update this Privacy Policy, we will update the applicable effective date or version.

If a change materially affects how Personal Information is collected, used, or disclosed, we will provide additional notice or obtain consent where required by applicable law.

17. Contact

Questions or requests concerning this Privacy Policy or EdMission’s privacy practices may be sent to:

EdMission AI, Inc.

Email: [email protected]