Privacy Policy

Welcome to Wayfinder. Wayfinder is an AI-powered career advisor platform operated by Virtuous Capital Foundation, a 501(c)(3) nonprofit organization. We are committed to protecting your privacy and ensuring you have a positive experience on our platform.

This Privacy Policy explains what information we collect, how we use it, how we protect it, and your rights regarding your data. By accessing and using Wayfinder, you agree to the terms of this Privacy Policy. If you do not agree with our practices, please do not use our platform.

1. Information We Collect

Account Information

When you create a Wayfinder account, we collect:

• Your full name
• Email address
• Password (stored as a secure hash, never in plain text)
• Account creation date

Profile Information

To provide you with personalized career advice, we collect:

• Age or date of birth
• Current grade level or educational status
• Academic interests and strengths
• Extracurricular activities and hobbies
• Career goals and aspirations
• Geographic location (optional)

Conversation Data

We collect and store:

• All messages you send to Wayfinder's AI advisor
• All responses from our AI advisor
• Timestamps of your conversations
• Topics and subjects discussed

Usage Data

We automatically collect information about how you use Wayfinder:

• Queries and questions you submit
• Features you use and their frequency
• Time spent on the platform
• Content you save or bookmark
• Pages you visit within Wayfinder

Technical Data

We collect technical information to improve our service:

• Browser type and version
• Device type and operating system
• Internet Protocol (IP) address
• Referring website URL
• Pages visited and time spent
• Cookies and similar tracking technologies

Payment Information (if applicable)

If you subscribe to a premium plan, we collect:

• Billing name and address
• Payment method information (processed securely by Stripe)
• Transaction history

Note: Credit card numbers are never stored on our servers. Payment processing is handled securely by Stripe, our payment processor.

2. How We Use Your Information

Providing Career Guidance

We use your profile information, interests, and goals to:

• Provide personalized career advice tailored to your situation
• Suggest relevant majors, careers, and educational paths
• Answer questions about specific careers and industries
• Help you plan your academic and professional journey

Improving Our Services

We use conversation data and usage analytics to:

• Understand how students interact with career planning
• Improve the quality and relevance of AI responses
• Identify gaps in our knowledge base
• Develop new features that better serve your needs
• Enhance the overall user experience

Account Management

We use your account information to:

• Create and maintain your account
• Authenticate your login
• Send you service-related notifications
• Process subscription payments (if applicable)
• Respond to your support requests

Research and Nonprofit Mission

As a 501(c)(3) nonprofit, we use anonymized and aggregated data to:

• Conduct research on career interests and trends among students
• Better understand barriers to career planning
• Identify underserved student populations
• Publish insights to benefit the broader education community

Communications

With your permission, we may send you:

• Updates about new features and improvements
• Educational content related to career planning
• Important service announcements

Legal Compliance

We may use your information when required by law or to protect our rights and the rights of other users.

3. Data Storage and Security

Where Your Data is Stored

Your data is securely stored on servers provided by Render, our hosting provider. These servers are located in secure data centers with industry-standard physical security measures.

Password Security

We take password security very seriously:

• Passwords are never stored in plain text
• We use industry-standard hashing algorithms to encrypt passwords
• Even our administrators cannot access your password
• If you forget your password, we provide a secure reset process

Data Encryption

We protect your data in multiple ways:

• In Transit: All data transmitted between your device and our servers is encrypted using SSL/TLS protocols (HTTPS)
• At Rest: Sensitive data stored on our servers is encrypted using industry-standard encryption methods

Conversation Data

Your conversation history with Wayfinder's AI advisor is stored securely on our servers. This data may be used to:

• Maintain continuity in your conversations across sessions
• Improve the AI model's ability to provide better advice
• Allow you to review past conversations and advice

Security Measures

We implement multiple security measures to protect your information:

• Regular security audits and penetration testing
• Firewalls and intrusion detection systems
• Access controls limiting who can view your data
• Regular software updates and security patches
• Employee training on data protection and privacy

4. Third-Party Services

Claude AI (Anthropic)

Important: Wayfinder uses Claude AI, developed by Anthropic, to power our career advisor. When you send messages to Wayfinder, your messages are transmitted to Anthropic's API servers for processing. By using Wayfinder, you understand and consent to this data sharing.

• Your conversation messages are sent to Anthropic's servers
• Anthropic may use your data according to their own privacy policy
• We recommend reviewing Anthropic's privacy policy: anthropic.com/privacy

Stripe (Payment Processing)

If you subscribe to a premium plan, payment processing is handled by Stripe, Inc.

• Stripe is PCI-DSS Level 1 certified
• Credit card information is never stored on Wayfinder's servers
• Stripe's Privacy Policy: stripe.com/privacy

Render (Hosting Provider)

Wayfinder's infrastructure is hosted by Render, which provides secure cloud hosting services.

• Render maintains industry-standard security and compliance standards
• Render's Privacy Policy: render.com/privacy

Google Fonts

We use Google Fonts to improve the visual presentation of Wayfinder. Google may collect limited technical data when you access our site. For more information: Google Privacy Policy

Third-Party Links

Wayfinder may contain links to external websites and resources. We are not responsible for the privacy practices of external websites. We encourage you to review their privacy policies before sharing your information.

5. Your Rights

Right to Access

You have the right to access the personal information we hold about you. You can:

• View your profile information by logging into your account
• Request a complete copy of your data by contacting us

Right to Correction

You can update or correct your profile information at any time by logging into your account or contacting us.

Right to Delete

You have the right to delete your account and all associated data. To delete your account:

• Log into your account and navigate to Settings
• Select "Delete Account"
• Confirm your decision
• Your data will be permanently deleted within 30 days

Right to Opt-Out

You can control how your data is used:

• Opt out of having your conversation data used to improve Wayfinder
• Opt out of promotional emails and communications
• Manage these preferences in your account settings

Right to Data Portability

You have the right to request your data in a portable format:

• Request an export of your profile information
• Request an export of your conversation history
• Data will be provided in a standard, machine-readable format

How to Exercise Your Rights

To exercise any of these rights, contact us at privacy@wayfinderai.org with your request and account details. We will respond within 30 days.

6. Children's Privacy (COPPA Compliance)

Age Requirements

Wayfinder is intended for users ages 13 and older. To use Wayfinder, you must be at least 13 years old.

Special Protections for Users Under 18

We provide special privacy protections for users under 18:

• We collect only the minimum information necessary to provide our service
• We do not sell or share your information with third parties (except as described in this policy)
• We do not use your information for targeted advertising
• Parents and guardians have the right to access, correct, and delete their child's information
• We use appropriate security measures to protect young users' data

Parental Access

If you are a parent or guardian of a Wayfinder user under 18, you have the right to:

• Access your child's account information
• Request deletion of your child's data
• Opt your child out of data usage for improvement
• Contact us with questions about your child's privacy

Parental Consent

For users under 13, we require verifiable parental consent. Parents should contact us at privacy@wayfinderai.org if:

• They wish to withdraw consent
• They want to access their child's information
• They want to delete their child's account

7. Data Retention

Active Accounts

As long as your account is active, we retain all your information:

• Account information (name, email, profile)
• Conversation history and career planning data
• Usage analytics and preferences

Deleted Accounts

When you delete your account:

• Your data is marked for deletion immediately
• Complete deletion occurs within 30 days
• Backups containing your data are deleted within 90 days
• Anonymized, aggregated data may be retained for research purposes

Conversation History

Your conversation history is retained to:

• Allow you to review past advice and recommendations
• Improve the AI's ability to provide better guidance
• Provide continuity across sessions

You can delete individual conversations or your entire conversation history at any time through your account settings.

Legal Retention

We may retain data longer than specified above if required by law or legal processes.

8. Changes to This Policy

Updates and Notifications

Wayfinder may update this Privacy Policy from time to time to reflect:

• Changes in our data practices
• New features or services
• Legal or regulatory requirements
• Industry best practices

How We Notify You

When we make material changes to this policy, we will:

• Update the "Last Updated" date at the bottom of this page
• Notify you via email to your registered email address
• Display a prominent notice on the Wayfinder platform
• Require your acceptance of the updated policy

Your Continued Use

Your continued use of Wayfinder after changes become effective constitutes your acceptance of the updated Privacy Policy. If you disagree with any changes, you may delete your account.

9. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Privacy Requests

When submitting a privacy request, please include:

• Your name and registered email address
• Your Wayfinder user ID (if applicable)
• A clear description of your request
• Any relevant account information

About Virtuous Capital Foundation

Virtuous Capital Foundation is a 501(c)(3) nonprofit organization dedicated to supporting career planning and educational advancement for pre-college and college students. We are committed to protecting your privacy while advancing our mission to provide equitable access to career guidance.