Legal

Privacy Policy

Effective Date: April 2, 2026  ·  Last Updated: April 2, 2026

CollegeLens does not sell your personal data to data brokers or third parties. Like most free platforms, we work with analytics providers, display lender advertisements, offer lender matching features, and operate affiliate partnerships. This policy explains exactly how your data is used so you can make informed choices.

Sections: 1 Introduction · 2 Categories of Information We Collect · 3 Sensitive Personal Information · 4 How We Use Your Information · 5 What We Do NOT Do · 6 How We Share Your Information · 7 Financial Aid Award Letter Data · 8 Cookies, Local Storage, and Tracking Technologies · 9 Data Security · 10 Data Retention · 11 Notice of Financial Incentive · 12 How to Exercise Your Privacy Rights · 13 Do Not Sell or Share My Personal Information · 15 Third-Party Links · 16 California Shine the Light · 17 Do Not Track · 18 Nevada Notice · 19 Children's Privacy · 20 Changes to This Policy · Contact Us

1

Introduction

CollegeLens ("we," "us," or "our") operates the college funding platform at collegelens.ai (the "Platform"). This Privacy Policy explains how we collect, use, share, and protect your information, and describes the rights available to you.

CollegeLens is a free educational tool. To sustain a free platform, we generate revenue through lender advertisements, lender matching features, and affiliate partnerships. This policy is transparent about those relationships. By using the Platform you agree to the practices described here. Questions? Email support@collegelens.ai.

2

Categories of Personal Information We Collect, How We Collect It, and Whether It Is Shared

The table below categorizes the personal information we collect, the manner in which we collect it, and how it is shared. These categories apply to all users regardless of state of residence.

CategoryExamples We CollectSourcePurposeShared With
IdentifiersEmail address, session ID, IP addressYou / AutomaticAccount management, security, analyticsInfrastructure & analytics providers
Personal Records (Financial)Award letter data: cost of attendance, grants, loans, expected family contributionVoluntary uploadGenerate funding plan analysisOCR service provider (AWS Textract)
Protected Classification CharacteristicsNone actively collectedN/AN/AN/A
Commercial InformationFunding goal, borrowing comfort, lender preferences, affiliate referral sourceYou / AutomaticPersonalization, lender matching, affiliate attributionLender partners (opt-in only), affiliate networks
Internet / Network ActivityPages visited, features used, clicks, time on page, navigation pathAutomaticAnalytics, platform improvementAnalytics providers
Geolocation DataApproximate location (state or country) inferred from device IP address — not precise GPSAutomaticCompliance, analytics, contextual adsAnalytics providers, advertising partners
Professional / Educational InformationIntended major, degree type, enrollment status, expected start term, expected graduation yearYouPlatform features, personalizationNot shared externally
InferencesEstimated funding gap, likely borrowing need, college funding profileDerived from your inputsPersonalized recommendationsNot shared externally
Sensitive Personal InformationLimited — see Section 3See Section 3See Section 3See Section 3

We collect only the information reasonably necessary to operate the Platform and provide the features you use. Award letter upload and profile completion are optional and user-initiated.

3

Sensitive Personal Information

Certain categories of personal information are classified as sensitive under applicable state privacy laws. The table below identifies each recognized category and states whether CollegeLens collects it.

Sensitive CategoryExamplesDoes CollegeLens Collect?Notes
Government-Issued ID NumbersSocial Security, driver license, state ID, passportNoWe do not request or store government ID numbers.
Financial Account CredentialsBank account numbers, debit/credit card numbers, access codesNoWe do not collect payment credentials. The Platform is free.
Precise GeolocationGPS coordinates, exact street addressNoOnly data about the location of your device, which may be imprecise (i.e., inferred from your device's IP address).
Citizenship or Immigration StatusCountry of citizenship, visa status, immigration documentationNoNot collected.
Racial or Ethnic OriginRace, ethnicity, national originNoNot collected.
Religious or Philosophical BeliefsReligion, faith, philosophical viewsNoNot collected.
Union MembershipLabor union affiliationNoNot collected.
Genetic DataDNA sequences, genetic test resultsNoNot collected.
Biometric DataFingerprints, facial recognition, voiceprintsNoNot collected.
Health InformationMedical records, conditions, prescriptionsNoNot collected.
Sex Life or Sexual OrientationSexual orientation, gender identityNoNot collected.
CommunicationsContents of mail, email, or texts not intended for usNoNot collected.
Commercial Information: Financial Aid & Award Letter DataCost of attendance, grants, loans, expected family contribution, funding gapYes — voluntarily uploadedProcessed only to generate your funding plan. Shared with our OCR service provider (AWS Textract) solely for extraction. See Section 7.
CollegeLens collects only one category that may be considered sensitive: financial aid and award letter data voluntarily uploaded by users. This data is processed in accordance with the protections described in Section 7 and is not shared externally except with the OCR service provider engaged to extract data from the uploaded documents.
4

How We Use Your Information

4.1 To Operate the Platform

  • Authenticate your session and save your funding plan across visits.
  • Analyze uploaded award letters and generate cost estimates, gap analyses, and repayment projections.
  • Pre-populate your funding plan with profile information you have provided.
  • Send transactional account communications (e.g., session verification).

4.2 To Improve the Platform

  • Understand usage patterns using data from third-party analytics tools.
  • Identify bugs, test new features, and optimize the user experience.

4.3 For Advertising and Lender Matching

  • Display lender advertisements relevant to your general funding situation (e.g., state of residence, degree type).
  • Facilitate opt-in lender matching features that connect you with relevant lenders based on information you voluntarily provide.

4.4 For Affiliate Attribution

  • Track affiliate referrals to measure partner effectiveness and calculate commissions.
  • Record click-through referrals when you navigate from CollegeLens to a partner site.

4.5 For Security and Legal Compliance

  • Detect and prevent fraud, abuse, and security threats.
  • Comply with applicable laws, regulations, and legal processes.
5

What We Do NOT Do With Your Information

We do NOT:

  • Sell your personal information to data brokers, marketing list companies, or any third party for their own direct marketing purposes. See the California "Shine the Light" notice in Section 16.
  • Share award letter documents or specific financial figures contained in them with lenders, advertisers, or affiliate partners without your explicit consent.
  • Automatically submit you to a lender matching feature — lender matching is always user opt-in.
  • Send unsolicited marketing or promotional emails unless you have explicitly opted in.
  • Allow advertising or affiliate partners to use your personal data for their own independent marketing purposes.
  • Discriminate against users who opt out of advertising, lender matching, or affiliate tracking.
6

How We Share Your Information

6.1 Service Providers

Trusted providers (cloud hosting, database, email delivery, OCR document processing) who act only on our instructions, are contractually prohibited from using your data for their own purposes, and receive only the data necessary to perform their services. If we send you commercial email, every commercial email will include an unsubscribe link, and you may opt out at any time by following the unsubscribe instructions in the email or by contacting support@collegelens.ai.

6.2 Analytics Providers

Third-party analytics platforms (e.g., Google Analytics, Mixpanel) may collect pages visited, device type, browser, general geographic location, and interaction data via cookies or similar technologies. We configure integrations to minimize personal data collection where possible (e.g., IP anonymization). We do not share your email address, award letter data, or financial plan details with analytics providers.

6.3 Lender Advertising and Matching Partners

Lender Advertisements:

  • Advertising partners may use cookies or tracking pixels to measure ad performance and serve relevant ads. We do not share your name, email, or award letter data with advertising partners.

Lender Matching (Opt-In Only):

  • If you choose a lender matching feature, you will be informed at the point of submission exactly what information is being shared and with whom.
  • Once shared, the lender's own privacy policy governs their use of your data. Review their policy before submitting.
Lender matching is always opt-in. You will never be automatically submitted to a lender without taking an affirmative action.

6.4 Affiliate Partners

We may share click identifiers, session identifiers, or referral source information with affiliate partners for commission tracking. We do not share your name, email, award letter data, or funding plan details as part of the affiliate relationship.

6.5 Legal Requirements and Safety

We may disclose information if required by law, court order, or legal process, or to protect the rights, property, or safety of CollegeLens, our users, or the public.

6.6 Business Transfers

In the event of a merger, acquisition, or asset sale, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.
7

Financial Aid Award Letter Data — Special Protections

When you upload financial aid award letters — which may include images, scanned documents, or non-searchable files (collectively, "Documents") — to our Platform, we use Optical Character Recognition (OCR) and intelligent document processing to convert those Documents into machine-readable text and extract specific data fields. This process is necessary and used solely to extract cost and financial aid data to provide you with your funding plan.

Types of Data Extracted

  • Identity Information: Names and signatures appearing on the award letter.
  • Financial Data: Cost of attendance, tuition and fees, room and board, grants, scholarships, federal and private loans, work-study amounts, expected family contribution (EFC) or Student Aid Index (SAI), and net cost figures.
  • Contact Details: Addresses, phone numbers, and email addresses found in the text.

Use of Service Providers

To provide high-quality extraction, we utilize a third-party OCR service provider, Amazon Web Services (AWS) Textract. This provider acts as a data processor and is contractually prohibited from using your Documents for any purpose other than performing the extraction as instructed by us.

Data Training and Human Review

  • No Training: We do not use your uploaded Documents or the resulting extracted data to train internal machine learning models or those of our third-party providers without your explicit consent.
  • Human-in-the-Loop: In cases of low-confidence extraction, our support team may manually review fragments of the extracted text to ensure accuracy.

Retention and Security

  • Temporary Storage: Original Document files are retained only for the period reasonably necessary to perform extraction and confirm accuracy, after which they are deleted in accordance with our internal retention practices.
  • Encryption: All Documents are encrypted in transit and at rest using industry-standard encryption.
Award letter data is processed only to generate your funding plan and is subject to the protections described above.
  • Not shared with lenders, advertisers, affiliate partners, or analytics providers.
  • Not used to target you with ads or submit you to lender matching without your affirmative consent.
  • Deletable at any time: email support@collegelens.ai with subject "Delete My Award Letter Data."
  • Not used to assess your creditworthiness or facilitate any financial transaction without your explicit consent.
8

Cookies, Local Storage, and Tracking Technologies

8.1 First-Party Local Storage and Cookies

We use browser local storage to maintain your session state (plan progress, session ID) and minimal first-party cookies for session authentication and CSRF security. These are not accessible to third parties.

8.2 Third-Party Analytics Cookies

Analytics providers we use may set cookies to collect usage data as described in Section 6.2. Their practices are governed by their own privacy policies.

8.3 Advertising and Affiliate Tracking Cookies

Lender advertising partners and affiliate networks may use cookies, tracking pixels, or URL parameters to measure ad impressions, click-through rates, and affiliate referrals. These are governed by the placing party's privacy policy.

8.4 Your Cookie Choices

Manage or delete cookies through your browser settings. You may also use provider opt-out tools (e.g., Google Analytics Opt-out Add-on) or industry opt-out programs at optout.networkadvertising.org or youradchoices.com. Disabling certain features may affect Platform functionality.
9

Data Security

We use reasonable information security measures, including physical, administrative, and technical safeguards to secure your information. No electronic system is completely secure. If you believe your account has been compromised, contact support@collegelens.ai immediately.

10

Data Retention

We will keep the personal information we collect about you for as long as necessary to carry out the purposes set forth in this Privacy Policy or any other notice provided at the time of data collection, but no longer than as required or permitted under applicable law or our internal CollegeLens policy. We dispose of the personal information we collect in accordance with CollegeLens' retention policies and procedures.

  • You may request deletion at any time at support@collegelens.ai — processed within 30 days.
  • Analytics data is subject to each provider's retention policy.
  • Affiliate and ad interaction data is retained as long as needed to calculate and audit commissions.
  • Anonymized, aggregate, non-identifiable data may be retained indefinitely for platform improvement.
  • Data may be retained longer as required by law or to resolve disputes.
11

Notice of Financial Incentive

In the future, if we provide a financial incentive, we will provide you with the details, including how the incentive is related to your data, before you participate so that you may make an informed decision about whether and how to participate. In the event you decide to take advantage of a financial incentive, you will always have the right to withdraw from participation, and we will provide you with instructions on how to do so.

11.1 How to Opt Out or Withdraw Your Consent

  • Analytics tracking: Use browser settings or provider opt-out tools (see Section 8.4).
  • Lender matching: Simply do not use lender matching features — they are opt-in only.
  • Advertising cookies: Opt out via industry tools at optout.networkadvertising.org.
  • Affiliate tracking: Decline cookies in your browser or use browser privacy settings.
  • Delete your account: Email support@collegelens.ai.

Opting out of certain data uses may limit some Platform personalization but will not prevent you from using core tools (college comparison, award letter upload, or cost estimates).

12

How to Exercise Your Privacy Rights

Regardless of your state of residence, you can exercise privacy rights by contacting us using the methods below. We honor rights requests from all users.

12.1 How to Submit a Request

  • Email: Send to support@collegelens.ai with subject line "Privacy Request - [Request Type]"
  • Request types include: Access · Correction · Deletion · Opt-Out of Sale/Sharing · Limit Sensitive PI · Portability · Appeal

12.2 What to Include in Your Request

  • Your email address associated with your CollegeLens account.
  • The type of request (e.g., "I am requesting deletion of all my personal data").
  • A brief description of the specific information or action requested.

12.3 Verification

We will verify your identity before processing your request to protect against unauthorized access. For most requests, verification consists of confirming that the email address matches the one in our records. We will not require you to create an account solely to submit a request, and we will not charge a fee unless requests are manifestly unfounded or excessive.

12.4 Response Timelines

Request TypeInitial ResponseMax ExtensionNotes
Right to Access / Know45 days+45 daysWe will notify you if we need an extension.
Right to Deletion45 days+45 daysSome data may be retained as required by law.
Right to Correction45 days+45 daysWe will confirm corrections were made.
Right to Portability45 days+45 daysProvided in a portable, machine-readable format.
Opt-Out of Sale / Sharing15 business daysNoneEffective as soon as practicable.
Limit Sensitive PI (CA)15 business daysNoneEffective as soon as practicable.
Appeal of Denied Request45 days+60 daysWe will explain our decision in writing.

12.5 Right to Appeal

If we deny or do not fully respond to your request, you have the right to appeal our decision by emailing support@collegelens.ai with subject line "Privacy Rights Appeal." We will respond within 45 days (extendable by 60 additional days for complex cases). If your appeal is denied, where regulatory permissible by your state, you may contact your state Attorney General's office.

12.6 Authorized Agents — How Do I Submit a Request Using an Authorized Agent?

In some states, you may have an authorized agent exercise some of your rights for you. If you would like an authorized agent to exercise those rights, they may submit requests using the same email address. We require documentation demonstrating your agent's authority to submit requests on your behalf.
13

Do Not Sell or Share My Personal Information

CollegeLens does not sell your personal information to data brokers. You may still opt out of advertising, affiliate tracking, and similar sharing signals by using the Manage Cookie Preferences control in the site footer or by emailing support@collegelens.ai.

13.1 Your Privacy Rights

  • Right to Know: Know what categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties with whom it is shared.
  • Right to Access: Obtain a copy of the specific personal information we have collected about you in the prior 12 months.
  • Right to Delete: Request deletion of your personal information, subject to certain exceptions.
  • Right to Correct: Request correction of inaccurate personal information.
  • Right to Opt Out of Sale / Sharing: Opt out of the sale of your personal information and the sharing of your personal information for cross-context behavioral advertising. Use the "Do Not Sell or Share My Personal Information" link on our website or email us.
  • Right to Limit Use of Sensitive PI: Limit our use and disclosure of sensitive personal information to what is necessary to perform the services you request.
  • Right to Data Portability: Receive your personal information in a portable, machine-readable format.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.
  • Right to Appeal: Appeal our decision if we deny your request.
  • Opt-Out of Automated Decision Making: Where applicable under your state's law, you may opt out of certain automated decision-making processes.

Use subject line "Privacy Request" when emailing us.

15

Third-Party Links and Partner Sites

The Platform contains links to third-party websites including lender sites, affiliate partner destinations, the U.S. Department of Education, colleges, and informational resources. When you click through to a third-party site, that site's own privacy policy governs how your information is handled. We are not responsible for third-party privacy practices. We encourage you to review the privacy policy of any external site before providing personal information.

16

Notice to California Residents (California's “Shine the Light” Law)

We do not share your personal information with third parties who we know or have reason to know may use your personal information for direct marketing purposes as contemplated by California's "Shine the Light" law (Civil Code Section § 1798.83).

17

Managing “Do Not Track”

As required by the California Online Privacy Protection Act (CalOPPA), our systems are currently able to recognize browser "Do Not Track" signals.

18

Notice to Nevada Residents

We do not exchange your personal information for monetary consideration with anyone who will license or sell your personal information to third parties.

19

Children's Privacy

This website is not directed towards or designed for use by children under the age of 16. This website and the information contained on it is specifically designed for individuals at least 16 years of age. If you are under the age of 16, you must not access this website or perform any of the actions on it, except through the involvement of a parent or legal guardian as described in our Terms of Use.

We do not knowingly collect, use, store, or share personal information from children under the age of 16 without parental consent. If you know or have reason to believe that we have collected data from anyone under the age of 16 without such consent, please contact us using the contact details provided for removal of that data.

20

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, commercial relationships, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page and notify you via email (if provided) or a prominent Platform notice. Continued use after changes constitutes acceptance of the updated policy.

Contact Us

For privacy questions, requests, appeals, or opt-out requests:

CollegeLens - Privacy Officer

Email: support@collegelens.ai

Subject Line: "Privacy Request - [Request Type]"

Website: collegelens.ai

By using CollegeLens, you acknowledge that you have read and understood this Privacy Policy, including how your information is used to sustain the free Platform.