Privacy Policy

CollegeQuest (the "Service") is operated by ECOSYSHUB LLC ("we", "us", or "our"). We provide an AI-powered college application platform, a print studio for photo books and custom prints, and web-based photo album sharing tools.

This Privacy Policy explains what information we collect, how we use it, and the choices you have. If you have questions, contact us at raveendra@ecosyshub.com.

We collect the following categories of information when you use the Service:

• Account & profile information: name, email address, graduation year, role (student/parent/counselor/tutor), and profile details you choose to provide.
• College application data: colleges you save, applications you track, essays and documents you upload, deadlines, and notes you enter.
• Photos: images you upload directly, or import from Facebook, Instagram, or Google Photos via OAuth, for use in print designs, photo books, and web albums.
• Order & shipping details: customer name, email, shipping address, and product/variant selections when you place a print order.
• Usage data: pages viewed, features used, and device/browser information used to operate and improve the Service.

We use your information to:

• Provide, operate, and maintain the college planning and print studio features;
• Process and fulfill print orders, including production and shipping;
• Personalize recommendations, deadlines, and AI-generated guidance;
• Communicate with you about your account, orders, and updates;
• Secure, monitor, and improve the Service;
• Comply with legal obligations.

We never sell your personal data.

We rely on trusted third-party services to operate key features. These providers process your data only as needed to deliver their service and under their own privacy policies:

• Stripe — processes payments. Your card data is handled by Stripe; we do not store full card numbers.
• Printful — prints and ships physical products using the order details and print files you submit.
• Meta (Facebook & Instagram) APIs — used when you choose to import photos from Facebook or Instagram via OAuth.
• Google Photos API — used when you choose to import photos from Google Photos via OAuth.
• Base44 — hosts the application platform, database, and backend functions.

We do not share your data with any other third parties except as required by law or as described here.

When you connect Facebook, Instagram, or Google Photos, we use OAuth to request limited access to your photos. The access and refresh tokens we receive are stored securely and used only to import the photos you select.

• You can disconnect any social account at any time from your profile, which removes the stored token.
• You can also revoke our access directly in your Facebook/Google account settings.
• We never post to your social accounts on your behalf.

We retain your data for as long as your account is active, or as needed to provide the Service. Order records are retained as needed for accounting and legal requirements. Uploaded photos and designs are retained until you delete them or delete your account. When you request account deletion, we remove your data within 30 days (see our Data Deletion page).

Depending on your location, you may have the right to:

• Access the personal data we hold about you;
• Export a copy of your data;
• Correct inaccurate information;
• Delete your account and associated data;
• Opt out of certain data uses.

To exercise any of these rights, email raveendra@ecosyshub.com from your account email. See our Data Deletion Instructions page for details.

The Service is intended for students aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will take steps to delete it.

We may update this Privacy Policy from time to time. We will post the updated version here and revise the "Effective Date" above. For material changes, we will provide notice through the Service or by email. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.