Privacy Policy

1. Introduction

Welcome to GradIntel ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at gradintel-edu.com ("Service").

By using GradIntel, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

Quick Summary: We collect information you provide (resume, questionnaires) and use it solely to generate your personalized reports. We use AI services (GPT-5 & Claude) that do NOT train on your data. You can delete your data anytime.

2. Information We Collect

2.1 Personal Information You Provide

We collect information that you voluntarily provide to us when you:

Create an account: Email address, password (encrypted)
Upload your resume: Educational background, work experience, skills, achievements, professional information
Complete questionnaires: Career goals, motivations, personality assessments, program preferences, foundational questions
Contact us: Name, email address, message content, and any other information you choose to provide

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and usage patterns:

IP address, browser type and version, operating system
Pages you view, time spent on pages, navigation paths
The referring website (how you arrived at our site)
Device identifiers, screen resolution, timezone
Error logs and performance metrics

2.3 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our service and hold certain information. For detailed information about our use of cookies, please see our Cookie Policy.

3. How We Use Your Information

We use the information we collect for the following purposes:

Provide our services: Generate personalized reports, program recommendations, and interview preparation materials
AI Analysis: Process your resume and questionnaire responses using GPT-5 and Claude 3.5 Sonnet to create strategic insights
Improve our services: Analyze usage patterns to enhance our algorithms and user experience
Communicate with you: Send updates, respond to inquiries, and provide customer support
Security: Monitor for fraudulent activity and ensure the security of our platform
Legal compliance: Comply with legal obligations and protect our rights

4. AI Processing & Third-Party Services

Your resume and questionnaire responses are processed by third-party AI services to generate your personalized reports. We partner with industry-leading AI providers:

OpenAI GPT-5

Powers our narrative analysis and deep strategic insights

✓ Enterprise-grade security
✓ Does NOT train on your data
✓ GDPR & SOC 2 compliant

Anthropic Claude 3.5

Powers our strategic dashboard and program fit analysis

✓ Constitutional AI principles
✓ Zero data retention policy
✓ Privacy-first architecture

Stripe Payments

Securely processes all payment transactions

✓ PCI DSS Level 1 certified
✓ Bank-level encryption
✓ We never store card data

Important: These AI services do NOT use your data to train public AI models. They are bound by strict data processing agreements (DPAs), delete your data after processing is complete, and operate under enterprise-level security standards.

For more information, please review:
• OpenAI Enterprise Privacy
• Anthropic Privacy Policy
• Stripe Privacy Policy

6. Data Security

We implement comprehensive technical and organizational security measures to protect your personal information:

Technical Measures

• Encryption in transit: TLS 1.3 (latest standard)
• Encryption at rest: AES-256 bit encryption
• Password security: Bcrypt hashing with salt
• Firewall protection: Enterprise-grade WAF
• DDoS mitigation: Automated threat detection

Organizational Measures

• Access controls: Limited to authorized personnel
• Background checks: For all team members
• Security training: Regular updates and audits
• Incident response: 24/7 monitoring and alerts
• Compliance audits: Regular third-party reviews

Important Note: While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we continuously monitor and update our security practices to maintain the highest standards.

7. Data Retention

We retain your personal information for as long as necessary to provide you with our services and as described in this Privacy Policy:

Account Information: Retained until you delete your account
Reports & Analyses: Stored in your account until you delete them
Log Data: Typically retained for 90 days for security and troubleshooting
Backup Data: Deleted data may remain in backups for up to 30 days

You may delete your account and all associated data at any time from your dashboard settings. Upon deletion, your data will be permanently removed from our active systems within 30 days (excluding legal retention requirements).

8. Your Privacy Rights

Depending on your location and applicable laws (GDPR, CCPA, etc.), you may have the following rights regarding your personal information:

Right to Access

Request access to the personal information we hold about you, including what data we collect and how we use it

Right to Correction

Request correction of inaccurate or incomplete information

Right to Deletion

Request deletion of your personal information ("right to be forgotten")

Right to Data Portability

Request a copy of your data in a structured, machine-readable format (JSON/CSV)

Right to Object

Object to our processing of your personal information for certain purposes

Right to Restrict Processing

Request that we limit how we use your data in certain circumstances

Right to Withdraw Consent

Withdraw consent for data processing where consent was the legal basis

How to Exercise Your Rights

To exercise any of these rights, please contact us at: hello@gradintel-edu.com

We will respond to your request within 30 days.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States and other jurisdictions where our servers and service providers are located.

These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy, including:

Standard Contractual Clauses (SCCs) approved by the European Commission
Data Processing Agreements (DPAs) with all service providers
Adequacy decisions where applicable (e.g., EU-US Data Privacy Framework)
Encryption and security measures during all data transfers

10. Children's Privacy

Our services are not intended for individuals under the age of 16.

We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately so we can delete such information.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

We will notify you of any material changes by:

Posting the new Privacy Policy on this page
Updating the "Last updated" date at the top
Sending you an email notification (if you have an account)
Displaying a prominent notice on our website

Your continued use of the Service after any changes become effective constitutes acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Email: hello@gradintel-edu.com
Website: gradintel-edu.com
Response Time: Within 1-2 business days

We take your privacy seriously and are committed to addressing your concerns promptly and transparently.