1. Introduction

DeadlineKeeper ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and services.

2. Information We Collect

Personal Information

Name and email address (required for account creation)
Phone number (optional, for SMS/WhatsApp notifications)
Profile information from Google or Microsoft if you use OAuth login

Application Data

College applications, deadlines, and related information you enter
Essays and documents you create or upload
Scholarship information and tracking data
Recommendation letter requests and status

Usage Data

Log data (IP address, browser type, pages visited)
Device information
Cookies and similar tracking technologies

3. How We Use Your Information

To provide and maintain our service
To send you deadline reminders and notifications
To provide AI-powered features (essay feedback, suggestions)
To sync with your calendar (Google Calendar, Apple Calendar)
To process payments and manage subscriptions
To improve our service and develop new features
To communicate with you about updates and support

4. Third-Party Services

We use the following third-party services:

OpenAI - For AI-powered essay feedback and voice assistant features
LemonSqueezy - For payment processing and subscription management
Twilio - For SMS and WhatsApp notifications
Google - For OAuth authentication and Calendar sync
Microsoft - For OAuth authentication
Resend - For email delivery

Each of these services has their own privacy policy governing their use of your data.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including encryption in transit (HTTPS) and at rest, secure password hashing, and regular security audits.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. You can request deletion of your account and associated data at any time by contacting us.

7. Your Rights

Depending on your location, you may have the following rights:

Access your personal data
Correct inaccurate data
Request deletion of your data
Export your data in a portable format
Opt-out of marketing communications

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion. We do not sell your personal information.

8. Children's Privacy

Our service is intended for high school students (typically ages 14-18) and their families. We do not knowingly collect personal information from children under 13 years of age. If you believe we have collected information from a child under 13, please contact us immediately.

9. FERPA Compliance (Educational Institutions)

When DeadlineKeeper is used by educational institutions, we comply with the Family Educational Rights and Privacy Act (FERPA), 20 U.S.C. § 1232g. Under FERPA:

We act as a "school official" with "legitimate educational interests" as defined by the institution's annual FERPA notification.
We use Student Data solely to provide the educational services described in our Data Processing Agreement.
We do not use Student Data for targeted advertising, profiling, or any non-educational purpose.
We do not sell, rent, or trade Student Data to any third party.
We support parental and eligible student rights to inspect, review, and request amendment of education records.
We limit access to Student Data to authorized personnel who require it to deliver the Service.
Third-party subprocessors who may access Student Data are listed on our Subprocessors page and are bound by equivalent data protection obligations.

Educational institutions may request a copy of our Data Processing Agreement or contact us at privacy@deadlinekeeper.app for FERPA-related inquiries.

10. Data Breach Notification

In the event of a data breach involving personal information or Student Data, we will:

Notify affected educational institutions within 72 hours of discovering the breach.
Notify affected individual users without undue delay.
Provide details including: the nature of the breach, categories of data affected, estimated number of individuals affected, remediation steps taken, and contact information for follow-up.
Cooperate with institutions and authorities in investigating and mitigating the breach.
Comply with applicable state breach notification laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: privacy@deadlinekeeper.app