No advertisers. No data brokers. No schools. No test-prep companies. No analytics resellers. No exceptions for marketing or profit.
The only data we ever send outside Acceptly is what's needed to help students achieve their goals — specifically, your messages and a small profile snapshot are sent to AI services (Anthropic today) so the advisors can respond with real, context-aware guidance. That's it.
If we ever change this — if we ever consider any other data sharing — we will email every registered user before it takes effect and you can delete your account first. The full breakdown below describes exactly what we collect, why, and how to ask us to delete it.
Acceptly is a college planning workbench for high school juniors and seniors. This page describes what data we collect, what we do with it, and how to ask us to delete it.
We share only with vendors that operate our product on our behalf:
We do not sell your data, share it with advertisers, or share it with college admissions offices or test-prep companies.
We keep your account and workbench data as long as your account exists. If you delete your account, your data is removed from active databases within 30 days. Backup snapshots may retain data for up to 90 additional days before automatic deletion.
Account self-service for export and deletion is coming soon. Until then, email Bobby@growwithaiguy.com with the email you signed up with and we'll handle either request within 48 hours, no questions asked.
Acceptly is built for users aged roughly 14-18 — minors in the eyes of most privacy regimes. We're not subject to COPPA (which covers under-13) but we follow COPPA-style data minimization: collect only what we need, never run behavioral ads, never sell data, give a clear path to deletion. We have not completed formal reviews under California CPRA, Illinois SOPPA, Texas SCOPE Act, Colorado, or Connecticut privacy laws yet; that review is on our near-term roadmap.
We use one cookie: the Cognito session token that keeps you logged in. We do not use third-party tracking pixels, analytics tags, or advertising cookies.
Your data is encrypted in transit (HTTPS) and at rest (AWS-managed encryption). Your password is hashed and never stored in plain text. We follow standard AWS security best practices: least-privilege IAM, no public database endpoints, all secrets in encrypted parameter store.
If we change anything material about how we handle your data, we'll email registered users at least 14 days before the change takes effect. The "Last updated" date at the top of this page reflects the most recent revision.
Questions, concerns, or specific requests: Bobby@growwithaiguy.com.
← Back to Acceptly