Privacy Policy

Last updated: March 2026. This policy is subject to legal review.

Introduction

CollegeJourney (“we,” “us,” or “our”) operates the website collegejourney.ai and the application at app.collegejourney.ai (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide

  • Account information: When you create an account, we collect your name, email address, and authentication credentials.
  • Profile data: Information you provide about your college journey, including academic interests, school preferences, and application details.
  • Communications: When you contact us via email at support@collegejourney.ai, we collect the content of your messages.

Information Collected Automatically

  • Analytics data: We use Google Analytics 4 (GA4) to collect anonymized usage data including pages visited, time spent, referral sources, and general geographic region (country-level).
  • Product analytics: We use PostHog to understand how users interact with our application, including feature usage and navigation patterns. PostHog data is stored via cookies.
  • Advertising data: We use Meta (Facebook) Pixel to measure the effectiveness of our advertising and deliver relevant ads.
  • Cookies and similar technologies: We use cookies for consent management (cj_consent, cj_geo), analytics, and session management. See our Cookie Policy for details.
  • Log data: Our servers automatically record information including your IP address, browser type, operating system, referring URLs, and timestamps.

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Personalize your college journey experience
  • Analyze usage patterns to improve our product
  • Communicate with you about updates, features, and support
  • Measure the effectiveness of our marketing efforts
  • Comply with legal obligations

Data Retention

  • Account data: Retained for the duration of your account and up to 30 days after deletion.
  • Analytics data (GA4): Retained for 14 months per Google’s standard retention policy.
  • PostHog data: Retained for 12 months.
  • Meta Pixel data: Subject to Meta’s data retention policies.
  • Server logs: Retained for 90 days.

Third-Party Sharing

We do not sell your personal information. We share data with the following third parties solely to operate and improve the Service:

Your Rights

For All Users

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your account and associated data
  • Opt out of analytics tracking via our cookie consent banner or by enabling Global Privacy Control (GPC) in your browser

GDPR Rights (EU/EEA/UK Residents)

If you are located in the European Union, European Economic Area, or United Kingdom, you additionally have the right to:

  • Data portability — receive your data in a structured, machine-readable format
  • Restrict processing of your data
  • Object to processing based on legitimate interests
  • Lodge a complaint with your local data protection authority

We process your data based on consent (for analytics/advertising cookies) and legitimate interest (for essential service operation).

CCPA Rights (California Residents)

If you are a California resident, you have the right to:

  • Know what personal information is collected, used, and shared
  • Delete personal information held by us
  • Opt out of the sale of personal information (we do not sell personal data)
  • Non-discrimination for exercising your privacy rights

Children’s Privacy

The Service is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS) and at rest, access controls, and regular security assessments.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last updated” date.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us: