Legal
Privacy Policy
Last updated: June 27, 2026
Your privacy matters. ScholarshipRight is built to help you find scholarships — not to harvest your data. This policy explains what we collect, why, and how we protect it. We keep it plain and readable because you deserve to understand what happens with your information.
Information we collect
- When you create an account, we collect your name, email address, and password (stored as a bcrypt hash — we never see your raw password).
- When you build your profile, we collect academic information you provide: degree level, field of study, GPA, research interests, target countries, language scores, and uploaded resume data.
- When you use our services, we automatically collect basic usage data: pages visited, features used, and session timestamps. This helps us improve matching accuracy.
How we use your information
- To provide scholarship matching: your academic profile is processed by our AI engine to score and rank scholarship awards by fit.
- To power Scholara: your profile data and match results are used by our AI advisor to draft essays, compare awards, and answer questions.
- To send you relevant notifications: deadline reminders for saved scholarships, weekly digest emails, and account-related communications.
- To improve our platform: aggregated, anonymized usage data helps us understand which features matter most and where students struggle.
Information we do NOT share
- We do not sell your personal data to third parties. Full stop.
- We do not share your profile, resume, or academic information with scholarship providers unless you explicitly apply through our platform.
- We do not use your data for advertising or ad targeting.
Third-party services
- Google OAuth: if you sign in with Google, we receive your name, email, and profile picture from Google. We do not access any other Google data.
- Email delivery: we use transactional email services to send you confirmations, reminders, and digests. Your email is shared only for this purpose.
- Analytics: we use privacy-focused analytics to understand usage patterns. No data is sold or shared with advertising networks.
Data security
- All data is transmitted over HTTPS/TLS encryption.
- Passwords are hashed with bcrypt — we never store or see your plaintext password.
- Session tokens are httpOnly cookies with secure flags, not accessible via JavaScript.
- We conduct regular security reviews and follow industry best practices for data protection.
Your rights
- Access: you can view and download your profile data at any time from your account settings.
- Deletion: you can delete your account and all associated data from your settings page. Deletion is permanent and processed within 30 days.
- Correction: you can update your profile, resume, and account information at any time.
- Portability: contact us to request a machine-readable export of your data.
Data retention
- We retain your account data for as long as your account is active.
- If you delete your account, all personal data is permanently removed within 30 days.
- Aggregated, anonymized usage statistics may be retained indefinitely for platform improvement.
Children's privacy
- ScholarshipRight is intended for students aged 16 and older. We do not knowingly collect data from children under 16.
- If we learn that we have collected data from a child under 16, we will delete it promptly.
Changes to this policy
- We may update this privacy policy from time to time. If we make material changes, we will notify you by email or through a prominent notice on our platform.
- The "Last updated" date at the top reflects the most recent revision.
Contact us
- If you have questions about this privacy policy or how we handle your data, contact us at privacy@scholarshipright.com or visit our contact page.