DEV environment — test data only · payments are simulated

Privacy Policy

Plain-language summary: we use your information only to find and prepare scholarships. We never sell it, never show ads, and delete it within 30 days when you close your account.

Draft for legal review. Not in effect until a lawyer has reviewed it and the highlighted items are filled in.

Who we are

TasselKey helps high school students and their parents find scholarships they qualify for, check them on the official website, and prepare applications from the student's own writing. TasselKey is operated by [Company name] ("TasselKey", "we", "us").

Questions about privacy go to privacy@tasselkey.com or [Mailing address].

Students and parents

TasselKey is for U.S. high school students, usually juniors and seniors, and their parents or guardians. A parent or guardian creates the account for any student under 18 and agrees to this policy for them. We don't knowingly collect information from children under 13. If we learn we have, we delete it.

A student who is 18 or older can hold their own account. When a student in a family account turns 18, they can ask to take control of it and decide what a parent can see.

What we collect

WhatExamplesWhy
AccountParent and student names, email addresses, roleSign-in, reminders, support
Student profileSchool, grade, graduation year, GPA, test scores, class rank, activities, jobs, service hours, awards, intended major, colleges, state and countyMatching scholarships and checking eligibility
Documents you uploadTranscripts, test score reports, resumes, Common App exports, past essaysFilling in the profile and finding the student's stories
Optional questionsHousehold income range, heritage, first-generation status, citizenshipOnly to match awards that require them. Always optional; income is asked as a range, never an exact amount
WritingEssays, stories and drafts, and the edits you makeDrafting applications in the student's own words
PaymentAmount, date, plan, and a transaction reference from PaddleYour plan and receipts. We never see or store card numbers
Usage and devicePages visited, actions, browser, IP addressSecurity, fixing problems, improving the service

What we hide automatically. Before a document is read for anything else, we remove Social Security and other ID numbers, birth dates, street addresses and phone numbers. Please don't upload financial account numbers or medical records; we don't need them.

How we use it

  • To find and verify scholarships, check eligibility, and explain why the student qualifies.
  • To draft application answers only from stories the student wrote or told us, and to check drafts against each scholarship's rules.
  • To send deadlines, reminders and the Monday email to the student and parent.
  • To give support, keep accounts secure and prevent fraud.
  • To improve TasselKey, using information with names and contact details removed.
  • To meet legal obligations.

We do not sell or rent personal information, and we don't show ads. We don't use student information to market anyone else's products.

How we use AI

TasselKey uses AI to read documents, match scholarships and draft answers. A person always stays in charge:

  • The student and a parent review and approve every application. TasselKey never submits an application; you do, on the scholarship's own website.
  • Drafts only use the student's own experiences, and we flag scholarships that don't allow AI help.
  • Our AI providers process your information only to provide TasselKey and may not use it to train their models.
  • You can ask a person on our team to review any result, at support@tasselkey.com.

Who we share it with

We share information only with service providers that help us run TasselKey, under contracts that limit what they can do with it, and only as needed:

ProviderWhat they doWhat they receive
Microsoft Azure (United States)Hosting, database, file storage, and AI processing through Microsoft Foundry (Anthropic's Claude models)Account, profile, documents and writing, encrypted
PaddleCheckout, payment, sales tax and receipts. Paddle is the merchant of record for your purchaseName, email, billing details and payment information you give Paddle directly
Microsoft Azure Communication ServicesSending our emailsEmail addresses and message content
Search providers (Exa, Parallel, Nimble)Searching the web for scholarshipsSearch terms such as a state, major or activity. Never names, documents or contact details

We also share information when you ask us to (for example, with a counselor you invite), when the law requires it, to protect someone's safety, or as part of a merger or sale of the business, in which case this policy continues to apply. Scholarship providers only receive what you submit to them yourself.

Paddle's own privacy notice covers the payment details you give Paddle at checkout.

How long we keep it

We keep your information while your account is open. You can delete any uploaded document at any time. When you close your account, we delete your information within 30 days, except payment records we must keep for tax and accounting, and backups, which are overwritten on their normal cycle.

How we protect it

Information is encrypted in transit and at rest. Only team members who need it to help you can see it, access is logged, and staff accounts use multi-factor sign-in. Uploaded files are scanned for malware. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.

Your choices and rights

  • See, correct or download the information in your account.
  • Delete documents, answers or your whole account.
  • Stop marketing emails with the unsubscribe link. Emails about deadlines and your account continue while your account is open.
  • Parents can review, change or delete their child's information at any time.

Depending on your state, you may have more rights under state privacy law. Email privacy@tasselkey.com and we'll respond within 30 days. We may need to confirm your identity first. We won't treat you differently for using these rights.

Cookies

We use cookies needed to sign you in and keep your account secure, and privacy-friendly analytics to see which pages are used. We don't use advertising cookies or sell browsing data, and we honor Global Privacy Control signals.

Where information is stored

Your information is stored and processed in the United States.

Changes to this policy

If we make a material change, we'll email the account holder at least 30 days before it takes effect. Effective date: [Effective date].

Contact

privacy@tasselkey.com
[Company name]
[Mailing address]