Privacy Policy

The Stud Works ("The Stud Works," "we," "us," or "our") respects your privacy and is committed to protecting it. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. It applies to thestudworks.org, our related educational tools and services, and any future mobile applications or features that link to this Policy (collectively, the "Services"). By using the Services, you agree to the practices described here.

1. Scope of This Policy

This Policy applies to information we collect through the Services, including our website, account features, AI-powered and student-productivity tools, newsletters, contact forms, and paid subscriptions. It does not apply to third-party websites or services we do not control, even if they link to or from the Services.

2. Information We Collect

We collect information in three ways: information you provide directly, information collected automatically, and information from third parties.

2.1 Information you provide

• Account information. When you create an account, we collect details such as your name, email address, username, and password.
• Subscription information. If you purchase a premium plan, we collect the plan you select, billing cycle, and subscription status and history.
• Payment information. Payments are processed by our payment processor (Stripe). We do not collect or store your full card number; we may receive limited details such as the last four digits, card brand, expiration date, and billing postal code.
• Donations. If you make an optional donation, we collect the information needed to process and acknowledge it.
• Communications. When you contact us, submit a contact form, or request support, we collect the information you provide and our correspondence.
• Newsletter and email sign-ups. If you subscribe, we collect your email address and your subscription preferences.
• User content. Information you submit through the Services, including content posted to future community forums, mentor/student matching profiles, or event registrations.

2.2 Information collected automatically

• Device information. Device type, operating system, browser type, and settings.
• IP address and location. Your IP address and approximate, non-precise location derived from it.
• Log files. Server logs including pages viewed, access times, referring/exit pages, and error data.
• Usage data. How you interact with the Services, such as features used and content viewed.
• Cookies and similar technologies. See Section 3.

2.3 Information from third parties

We may receive information from service providers such as our payment processor and analytics providers, and, if you register or sign in through a third-party service in the future, from that service consistent with its settings.

3. Cookies and Tracking Technologies

We and our service providers use cookies, web beacons, and similar technologies to operate and secure the Services, remember your preferences, understand usage, and improve performance. Cookies we use generally fall into these categories:

• Strictly necessary — required for core functionality such as signing in and securing your session.
• Preference — remember choices like settings and saved progress.
• Analytics — help us understand how the Services are used (see Section 6).

You can control cookies through your browser settings and, where offered, our cookie controls. Blocking some cookies may affect how the Services function. We honor recognized opt-out signals (such as Global Privacy Control) where required by law.

4. How We Use Information

We use the information we collect to:

• Provide, maintain, and improve the Services and develop new features;
• Create and manage your account and authenticate you;
• Process subscriptions, payments, and optional donations, and send related confirmations and receipts;
• Operate AI-powered and productivity tools you choose to use;
• Send transactional messages and, with your consent where required, newsletters and marketing;
• Respond to your inquiries and provide customer support;
• Measure and analyze usage, trends, and performance;
• Protect the security and integrity of the Services, prevent fraud and abuse, and enforce our Terms; and
• Comply with legal obligations and exercise or defend legal claims.

5. How We Share Information

We do not sell your personal information for money. We share information only as described below:

• Service providers. With vendors who perform services on our behalf, such as payment processing (Stripe), analytics (Google Analytics), hosting, email delivery, and customer support, under contracts that limit their use of the information.
• Legal and safety. When we believe disclosure is required by law or legal process, or necessary to protect the rights, property, or safety of The Stud Works, our users, or the public.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.
• With your direction or consent. When you ask us to share information or otherwise consent.
• Aggregated or de-identified data. Information that cannot reasonably identify you may be shared for any lawful purpose.

6. Third-Party Services

The Services rely on trusted third parties that process certain information under their own privacy policies:

• Stripe — payment processing for subscriptions and donations. Card details are provided directly to Stripe and handled under Stripe's privacy policy.
• Google Analytics — measurement of website usage. You can opt out using the Google Analytics Opt-out Browser Add-on.

We may add or change providers over time and will update this Policy as appropriate.

7. Data Retention

We retain personal information for as long as needed to provide the Services and for legitimate business purposes, such as maintaining your account, complying with legal, tax, and accounting obligations, resolving disputes, and enforcing our agreements. When information is no longer needed, we delete or de-identify it. Retention periods vary by the type of data and the purpose for which it was collected.

8. Data Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

9. Your Rights and Choices

Depending on where you live, you may have rights to:

• Access the personal information we hold about you and request a copy;
• Correct inaccurate information;
• Delete your information, subject to legal exceptions;
• Opt out of marketing emails (use the unsubscribe link or contact us); and
• Object to or restrict certain processing.

To exercise a right, email hello@thestudworks.org. We will verify your request and respond as required by law. We will not discriminate against you for exercising your rights.

10. California and Other U.S. State Privacy Rights

This section provides additional disclosures for residents of California and other U.S. states with comprehensive privacy laws.

10.1 California (CCPA/CPRA)

In the prior 12 months we may have collected the following categories of personal information: identifiers (such as name, email, IP address); customer records and commercial information (such as subscription and transaction history); internet or network activity (such as usage and log data); approximate geolocation; and inferences. We collect this information for the purposes described in Section 4.

California residents have the right to know, access, correct, and delete their personal information, to opt out of the "sale" or "sharing" of personal information, and to limit the use of sensitive personal information, and the right not to receive discriminatory treatment for exercising these rights. We do not sell personal information for money. To the extent our use of analytics or similar technologies is considered "sharing" for cross-context behavioral advertising, you may opt out by adjusting cookie settings or using a recognized opt-out preference signal.

To exercise these rights, contact us at hello@thestudworks.org. You may use an authorized agent, and we may need to verify your identity before responding.

10.2 Other states

Residents of states such as Virginia, Colorado, Connecticut, Utah, and others may have similar rights to access, correct, delete, and obtain a portable copy of their personal data, and to opt out of targeted advertising and certain profiling. You may exercise these rights using the contact information above, and you may appeal a decision by replying to our response.

11. International Users

The Services are operated in the United States and intended for users in the United States. If you access the Services from outside the United States, you understand that your information will be processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Services, you consent to this transfer and processing.

12. Children's Privacy

The Services are intended for a general audience and are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected such information without verifiable parental consent, we will delete it. If you are between 13 and 18, you may use the Services only with the involvement and consent of a parent or guardian where required by law.

If we provide services to schools or educators, we handle student information in accordance with applicable laws, which may include FERPA, and at the direction of the school where required.

13. Email and Communications

We may send you transactional messages (such as account, billing, and security notices) that are necessary to provide the Services; these are not promotional and you cannot opt out of them while you have an account. Promotional emails include an unsubscribe link, and you can opt out at any time.

14. Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide additional notice as required by law. Your continued use of the Services after an update means you accept the revised Policy.

15. Contact Us

If you have questions about this Privacy Policy or our practices, contact us at:

• Email: hello@thestudworks.org
• Mail: [The Stud Works legal entity name, e.g., The Stud Works LLC], [Company mailing address]

This Privacy Policy is provided by [The Stud Works legal entity name, e.g., The Stud Works LLC], a United States-based company. Please review it together with our Terms of Service.