Privacy Policy

Last updated: April 2026

What we collect

When you use Archway, we collect the student profile information you provide — grade level, GPA, intended major, state, activities, background, and goals. If you create an account, we also store your email address and password (hashed, never stored in plain text).

How we use it

Your profile data is used for one purpose: generating scholarship matches via our AI Scout. Each search sends your profile to Claude AI (by Anthropic) for analysis. We do not use your data for advertising, and we do not build marketing profiles from student information.

What we never do

• We never sell your data to third parties
• We never share student information with scholarship providers
• We never use your data for advertising or marketing purposes

What we keep when you use the Scout

When you run the AI Scout, we save a minimal record of each search so you can revisit your history and so we can improve match quality over time. Specifically, we keep:

• A summary of the query (grade level, major, state only — not your full profile text)
• The list of scholarship matches returned, with their fit scores and reasoning
• Model used and timestamp

Your full profile fields (activities, background, goals) are sent to the AI during each search but are not stored in our logs. Match records are tied to your account and deleted when you delete your account.

Third-party services

Archway uses Cloudflare for hosting and security, Anthropic's Claude AI for scholarship analysis, Stripe for future payment processing, and Umami for privacy-friendly, cookie-free analytics. Umami collects no personal data — only anonymous page view counts.

Data storage

Your data is stored on Cloudflare's D1 database infrastructure within the United States. Passwords are hashed using PBKDF2 with 100,000 iterations and SHA-256 (WebCrypto subtle, per-user random salt). We use HTTPS everywhere.

Your rights

You can request a full export or deletion of your data at any time by contacting us at the address below. Account deletion removes all student profiles, search history, and application data permanently.

Children's privacy

Archway is designed for high school students and their families. Accounts for students under 13 must be created by a parent or guardian. We comply with applicable children's privacy regulations.

Contact

Questions about privacy? Reach us at our contact page.