This Privacy Policy explains how CampusCompassAI collects, uses, shares, and safeguards information. We are committed to Canadian privacy principles (e.g., PIPEDA) and student-friendly practices.

1) What we collect

a) Account & basic profile

• Email (or anonymous ID via Firebase Auth), display name (optional), grade level, interests (optional).

b) Planning data you provide

• Courses, marks (optional), target programs/schools, planning notes, uploaded text for feedback only (e.g., your draft paragraphs).

c) Usage & device data

• Log events, pages/actions, device/browser type, approximate region (from IP), crash reports. We use Firebase Analytics/Crashlytics/Performance.

d) Cookies & local storage

• Session state (e.g., dismissed banners), authentication tokens, preference flags.

e) Limited derived data

• On-track checks, gap flags, and “action plan” results computed from your inputs and public requirements we ingest with citations.

Please do not submit sensitive personal information (e.g., SIN, medical information). We do not intentionally collect such data.

2) How we use data

• Provide and improve the service (plan generation, requirement lookups, citations).
• Enforce academic-integrity gates and safety rules.
• Security, fraud, and abuse prevention (rate limiting, anomaly detection).
• Analytics to understand feature use and improve UX (aggregated).
• Communicate service updates and respond to support requests.

We do not sell your personal information.

3) AI/LLM processing

• We use AI models to provide planning and feedback, not ghostwriting.
• We instruct models to cite sources and abstain when unsure.
• We disable provider training on your prompts/outputs where supported and do not allow providers to use your data for advertising.
• We filter prompts that request prohibited uses (e.g., essay generation).

4) Data sharing

We may share data with:

• Service providers (Firebase/Google Cloud, hosting, error tracking, AI model APIs) under confidentiality and data-processing terms.
• School/counsellor accounts only if you explicitly join an organization workspace or share a plan.
• Legal/compliance when required by law, to protect safety, rights, or security.
• Business transfers in the event of a merger/acquisition (with notice).

We do not share your personal content with universities, OUAC, or advertisers.

5) International transfers

Our providers (e.g., Firebase/Google) may store or process data in Canada, the United States, or other countries. We take steps to protect your data consistent with this policy when it is transferred.

6) Retention

• Account and planner data: retained while your account is active.
• You may delete your account or request deletion of planner data at any time (see “Your rights”).
• Backups and logs are deleted on rolling schedules.

7) Security

We use Firebase security rules, encryption in transit/at rest, least-privilege access, and monitoring. No system is perfectly secure; promptly contact us if you suspect an issue.

8) Your choices & rights

• Access/Correct/Delete: Request a copy, correction, or deletion of your data.
• Export: Request an export of your plan data (JSON or CSV).
• Consent: You can withdraw consent and close your account at any time.
• Marketing: Opt out of non-essential emails.

For requests, contact contactus@bayesianaisolutionsconsultingpartners.com. We may verify your identity.

9) Children & students

Our service is designed for high-school students and families. If you are under 16, use the service with a parent/guardian’s consent. Schools/counsellors are responsible for obtaining necessary consents when provisioning student accounts.

10) Third-party links

We link to official university/college pages. We are not responsible for their privacy practices. Review their policies.

11) Changes to this policy

We may update this policy to reflect changes to the service or law. We will post the new Effective Date and, for material changes, provide reasonable notice.

12) Contact

Privacy questions or requests: contactus@bayesianaisolutionsconsultingpartners.com