Privacy Policy

Overview

• Students may browse through a participating school without creating an individual account.
• Student profiles, saved opportunities and private notes are not public.
• Opportunity providers receive aggregate engagement counts, not access to student accounts.
• Pathlumi does not sell personal information or display advertising.
• Pathlumi uses its own usage analytics and does not run third-party analytics scripts or advertising pixels.

School access

A participating school can provide a shared link that enables students to browse opportunities without entering a name, email address, student ID or grade level. School access does not require a student roster or create an individual student account.

Pathlumi records daily school-level totals for visits, session starts, opportunity views, application-link clicks and filter use. These school-level records do not contain individual visitor identifiers. Filter-use counts record the filter category, not the selected value or text entered in the search box. Separate listing analytics are described below.

Students who choose to create or sign in to an individual account are subject to the account data practices described in this policy.

Information collected

Account information

• Email address and authentication credentials managed by our authentication provider
• Display name and account type: student, provider or administrator
• Account creation and update timestamps

Student account information

• First name, grade level and expected graduation year
• City, state and ZIP code, with approximate coordinates based on the ZIP code
• Interests and preferences, including opportunity categories, format, cost, financial aid, time commitment and travel distance
• An optional description of the opportunities the student wants to explore
• Confirmation that the student is at least 13 years old
• Saved opportunities, status labels and private notes

Provider information

Provider accounts include the representative’s name and role, organization details and information submitted for verification. Organization names, websites, contact details, general locations, descriptions and logos may appear on public organization pages.

Communications and technical information

We collect information submitted through contact forms and reports. We also process technical request information to deliver the service, measure usage and prevent abuse. Our hosting and infrastructure providers may process request and security logs as part of operating the service.

Sensitive information

Pathlumi does not request Social Security or national identification numbers, payment card or bank details, medical records, government identification documents, street addresses or exact dates of birth. Do not include this information in profiles, notes, reports or messages.

Use of information

• Account services: authenticate users, maintain preferences and saved opportunities, and provide notifications.
• Opportunity recommendations: use preferences and filters to rank relevant opportunities.
• Safety and support: review organizations and listings, respond to inquiries, investigate reports and prevent misuse.
• Usage measurement: calculate engagement counts for listings and participating schools.

Information sharing and access

Other users and opportunity providers. Student profiles, saved lists and private notes are not displayed to other students or opportunity providers. Providers can view aggregate counts for their own listings, including views, saves and application-link clicks.

Pathlumi administrators. Authorized administrators have access to account and moderation information for service administration, support and safety investigations. Access to student information is restricted through application and database permissions.

Service providers. Hosting, database and authentication providers process information on our behalf to operate the service, subject to their applicable terms.

Legal obligations. We disclose information where required by law and notify the account holder unless prohibited from doing so.

External websites. Application links direct users to websites operated by other organizations. Information submitted on those websites is governed by their privacy policies.

Pathlumi does not sell personal information or share it with advertisers.

Analytics and cookies

Pathlumi records opportunity-page views and clicks on official application links. Each record includes the opportunity, a timestamp and a coded visitor identifier generated by hashing the IP address and browser user-agent information with a secret value. These analytics records do not store the raw IP address or user-agent string. For signed-in users, the event can also include the account identifier.

The coded identifier is used to limit duplicate counts and prevent abuse. It is pseudonymous: it can associate activity with the same identifier and should not be understood as a guarantee of anonymity.

• Authentication cookies maintain signed-in sessions.
• School-access cookies store the selected school identifier for up to 120 days.
• School filter cookies store selected interest and opportunity-category filters for the browser session to improve ranking. They do not contain search text, names or email addresses.

Pathlumi does not use advertising cookies, third-party tracking pixels or third-party analytics scripts. Users can clear cookies through their browser settings; this may require signing in again or reopening the school-access link.

Data retention

• Account and profile information is retained until the account is deleted.
• Saved opportunities and private notes are retained until removed by the user or deleted with the account.
• Our retention policy for listing analytics events is 24 months, after which only aggregate counts remain.
• Aggregate school usage totals are maintained separately from individual account records.
• Moderation records may be retained after account deletion, with the account reference removed, to maintain safety records.

For questions about retention or a specific deletion request, contact Pathlumi.

User choices

• Review and update information. Manage student preferences through the profile page.
• Manage notifications. Update optional email preferences in settings.
• Delete an account. Request deletion through settings or contact us using the account’s email address. Account deletion removes the student profile, saved opportunities and private notes.
• Request a copy of information. Contact us to request account information in a machine-readable format.

We may need to verify account ownership before fulfilling a request.

Users under 18

Student accounts are available to users aged 13 and older. Registration requires confirmation of this minimum age without collecting an exact date of birth. If we learn that an account belongs to a child under 13, we delete the account and its associated data.

A parent or guardian may contact us to request access to, correction of or deletion of a student’s information. We verify the request before providing access or making changes.

Policy updates and contact

We update this policy when our information practices change. Material changes affecting collection or sharing will be announced on the platform before taking effect. The date above identifies the most recent update.

For privacy questions or requests, use the contact form.