Privacy Policy

We collect the following categories of information:

We receive information directly from you when you create or update an account, apply as a provider, upload content, make or manage a booking, send a message, pay, submit a review, or contact support.

We also receive information from the customer or provider on the other side of a marketplace interaction, from Stripe concerning payments and connected-account readiness, from the U.S. Department of Education College Scorecard concerning schools, from the U.S. Census Bureau geocoder concerning address coordinates, and automatically from the device, browser, and infrastructure used to access the Platform.

We use personal information to:

• Create, authenticate, secure, and administer accounts.
• Verify provider age, student status, identity, and onboarding readiness.
• Display provider profiles, services, rates, availability, and reviews.
• Match customers and providers, calculate approximate distance, facilitate bookings, and share necessary job logistics.
• Authorize and process payments, provider transfers and payouts, refunds, invoices, disputes, fraud controls, and financial reconciliation.
• Deliver transactional emails and account, booking, payment, and safety notices.
• Operate messaging and scan messages and profile text for safety, prohibited contact information, abuse, and policy violations.
• Provide support, investigate reports, resolve disputes, enforce our agreements, and protect users, College Crew, and the public.
• Debug, maintain, secure, measure, and improve the Platform.
• Comply with legal, tax, accounting, reporting, and regulatory obligations and respond to lawful requests.

We do not sell personal information. We do not disclose personal information for cross-context behavioral advertising, and we do not currently use third-party advertising trackers.

We disclose information only as reasonably necessary for the purposes described in this Policy. Disclosure generally occurs through encrypted web requests and authenticated application programming interfaces, restricted service dashboards, time-limited private-file links, or the marketplace interfaces visible to the people involved in a booking.

We may also disclose information to professional advisers, insurers, auditors, tax preparers, and contractors subject to confidentiality and security obligations; to government authorities or other parties when required by law or reasonably necessary to protect rights, safety, and security; and in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of the business, subject to appropriate protections.

Approved provider profiles may publicly display the provider’s display or business name, profile and service photos, biography, provider type, general neighborhood, recognized school, school-organization information the provider chooses to add, offered services, rates or quote information, availability notes, completed-job counts, and ratings or reviews. Public review displays do not identify the customer or expose the underlying booking.

Blog posts and other content intentionally submitted for public publication are also public. Public information may be viewed, copied, indexed, or redistributed by search engines and other people outside College Crew. Do not include sensitive or unnecessary personal information in public fields.

We use essential cookies and similar browser storage for authentication, security, password recovery, administrator preview controls, remembering a selected booking origin, and dismissing certain account notices. The booking-origin cookie can contain an address and derived coordinates selected by the user and expires after approximately 30 days unless replaced or deleted earlier. Authentication cookies have durations controlled by our authentication provider and account activity.

College Crew does not currently use third-party advertising cookies, behavioral advertising pixels, or third-party marketing analytics. Browser "Do Not Track" signals are not standardized; because we do not currently use cross-site behavioral advertising, we do not change Platform behavior in response to those signals.

We retain information for as long as reasonably necessary to provide the Platform, maintain an account, complete bookings and payments, support users, resolve disputes, prevent fraud and abuse, enforce agreements, and satisfy legal, tax, accounting, insurance, and reporting obligations. Different records therefore have different retention periods.

Short-lived verification codes, payment drafts, session data, and operational leases expire or are cleaned up on shorter schedules. Account deletion removes the account and associated Platform records through our deletion workflow, but we or our service providers may retain limited transaction, legal-acceptance, dispute, fraud, backup, or security records when reasonably necessary or legally required. Information already made public or copied by another person may remain outside our control.

When information is no longer reasonably needed, we delete it, de-identify it, or securely isolate it until deletion is practicable.

We use administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, acquisition, destruction, use, modification, or disclosure. These practices include:

• HTTPS encryption for data transmitted to the Platform.
• Supabase database row-level security and role-based access controls that limit users to authorized records.
• Private storage for government-identification images, job photos, and chat attachments, with owner-restricted access or time-limited signed links.
• Restricted founder administration, server-only privileged credentials, environment-managed secrets, and audit records for sensitive booking and payment operations.
• Stripe-hosted handling of full card numbers, bank credentials, and provider payout onboarding so those credentials are not stored in College Crew’s database.
• Input validation, webhook signature verification, duplicate event protection, authentication controls, moderation, and operational monitoring.
• Service providers selected to support appropriate confidentiality, integrity, and security of the information they process for us.

No system can guarantee absolute security. Please use a unique password, protect your email account and devices, and notify us promptly through Support if you believe your account or information has been compromised.

You can review and update many account and provider-profile fields in the Platform. You can manage public profile content, message and booking information before submission, and certain browser cookies through your browser or Platform controls.

The account settings include an account-deletion workflow. Deleting an account can cancel active bookings and remove profile, message, review, and other associated Platform records, subject to the retention limitations above. You may also contact us to request access to, correction of, or deletion of personal information, or a portable copy where required by applicable law. We may need to verify your identity and may deny or limit a request where permitted by law, including to protect another person’s rights or preserve required financial, security, dispute, or legal records.

Depending on where you live, applicable law may provide additional rights, including rights to know, access, correct, delete, or obtain a copy of personal information and to opt out of certain sales, targeted advertising, or profiling. College Crew does not sell personal information or use it for cross-context behavioral advertising. We will not discriminate against you for exercising an applicable privacy right.

Submit a privacy request through our Support form and select the closest available account or payment category. State that your message is a privacy request and describe the request. An authorized agent may submit a request where allowed by law, but we may require proof of authority and direct identity confirmation from the account holder.

The Platform is a general-audience service intended for people who can arrange and pay for local services. It is not directed to children under 13, and we do not knowingly allow children under 13 to create accounts or directly submit personal information. Providers must be at least 18 years old.

An adult customer arranging babysitting, tutoring, youth sports coaching, or another service involving a minor may provide limited information about that minor when necessary for safety and performance of the service. The customer represents that they are authorized to provide that information. Do not submit a minor’s information unless it is necessary, and do not place highly sensitive information in public fields.

If you believe a child under 13 has directly provided personal information through the Platform, contact us through Support so we can investigate and delete it as appropriate.

College Crew is based in Illinois and the Platform is intended for use in the United States. We and our service providers may process information in the United States and other locations where they operate. Those locations may have privacy laws that differ from the laws where you live.

Third-party services have their own privacy policies and security practices. This Policy describes College Crew’s use of those services but does not replace the privacy notices those parties provide when they collect information directly, including Stripe’s notices during payment and connected-account onboarding.

We may update this Privacy Policy as the Platform, our practices, or legal requirements change. We will post the revised Policy on this page and update the effective date. If a change materially affects how we use or disclose personal information, we will provide additional notice when reasonably required, such as through the Platform or by email.

College Crew LLC is responsible for the personal information described in this Policy. For privacy questions, requests, or complaints, contact us through our public Feedback & Support form. Include "Privacy request" in your message and provide the email address associated with your account so we can respond and verify the request.