1. Information We Collect

Information you provide directly:

• Account information: name, email address, and password (managed securely via our authentication provider, BetterAuth).
• User Content: documents, essays, personal statements, drafts, or other materials you submit for advisory or editing support, along with any personal or educational details you share with us (e.g., target programs, career goals, academic background).
• Payment information: when you make a purchase, payment is handled directly by Stripe. We receive confirmation of your purchase and limited billing details (such as name and transaction amount), but we do not store your full card number.
• Communications: messages you send us via our contact form, email, or support channels, which we send and receive through Resend.

Information collected automatically:

• Usage and analytics data: such as pages visited, time on site, browser type, device type, and general location (e.g., country/region), collected through analytics tools (e.g., Google Analytics) to help us understand how visitors use our site.
• Cookies and similar technologies: small files used to keep you logged in and to support analytics. You can control cookies through your browser settings, though disabling them may affect site functionality.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Services (e.g., reviewing your personal statement, preparing research, or translation work);
• Create and maintain your account and authenticate your login;
• Process payments and send purchase confirmations or receipts;
• Communicate with you about your account, purchases, or support requests;
• Understand site usage and improve our content and services through analytics;
• Comply with legal obligations and enforce our Terms of Use;
• Protect the security and integrity of our Services.

We do not sell your personal information, and we do not use ad-tracking tools.

3. How We Share Your Information

We share information only as needed to operate the Services, including with:

• Stripe: to process payments securely.
• Resend: to deliver account, transactional, and support emails.
• BetterAuth: to manage secure account authentication.
• Analytics providers: to receive aggregated or pseudonymized usage statistics.

These providers may only use your information to perform services on our behalf and are bound by their own privacy and security obligations. We may also disclose information if required by law, to protect our rights, or in connection with a business transfer (such as a merger or acquisition), in which case we will notify you.

We do not share your User Content (e.g., your personal statement drafts) with any third party except the service providers above, unless you ask us to (for example, if you request that we send materials on your behalf) or we are legally required to.

4. Data Retention

We retain your account information and User Content for as long as your account is active or as needed to provide the Services, and for a reasonable period afterward to comply with legal, accounting, or dispute-resolution needs. You may request deletion of your account and associated data at any time (see Section 6).

5. International Users

We are a US-based company, and many of our users connect with us from other countries, including Qatar and other parts of the Middle East. By using our Services, you understand that your information will be processed and stored in the United States (and by our third-party providers, which may store data in other countries), which may have different data protection laws than your home country.

If you are located in a jurisdiction with its own data protection law such as Qatar's Personal Data Privacy Protection Law, the EU/UK General Data Protection Regulation, or the California Consumer Privacy Act as we aim to honor the spirit of those rights (access, correction, deletion, and control over your data) as described in Section 6, regardless of where you're located.

6. Your Choices and Rights

Depending on where you live, you may have rights to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Delete your account and associated personal information;
• Object to or restrict certain uses of your data;
• Export a copy of your data.

To exercise any of these rights, contact us at contact@goldenclover.org. We will respond within a reasonable time and may need to verify your identity before fulfilling certain requests.

7. Children's Privacy

Our Services are not directed to children under 13. If you are between 13 and 18, you may only use the Services with the involvement and permission of a parent or legal guardian, consistent with our Terms of Use. If we learn we've collected personal information from a child under 13 without appropriate consent, we will delete it.

8. Data Security

We use reasonable administrative, technical, and organizational safeguards to protect your information, including relying on reputable providers (Stripe, Resend, BetterAuth) that maintain their own security standards. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will post the updated version here and update the effective date above. Material changes will be communicated by email or an in-product notice where appropriate.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your information, please reach out via our contact page or email us at contact@goldenclover.org.