Privacy Policy

Vyzrly is a college admissions advisory platform operated by EthicQ ("we," "us," or "our"). Our website is vyzrly.com. This Privacy Policy explains how we collect, use, and protect information about you when you use our service.

Questions about this policy can be directed to [email protected].

Vyzrly is intended for students in grades 7 through 12. You must be at least 13 years old to create or use a Vyzrly account. Vyzrly is not directed to children under 13, and we do not permit users under 13 to register, even with parental or guardian consent.

Vyzrly does not knowingly collect information from children under 13. If we discover that an account belongs to a user under 13, we will immediately delete the account and all associated data.

Parents or guardians who believe a child under 13 has created an account may contact us at [email protected] to request immediate deletion. For students aged 13 to 17, we encourage parental or guardian involvement in the account's use, including the optional Observer feature described below.

Account information. When you sign in with Google, we receive your name, email address, and Google account ID. We do not receive your Google password.

Profile and intake data. Information you provide during the intake process: grade level, ZIP code, GPA, SAT scores, AP course count, extracurricular activities, awards, intended major, and any URLs or documents you submit for verification (LinkedIn profiles, GitHub repositories, research papers, etc.).

Usage data. Which tools you use, pages you visit, and general interaction patterns. We do not sell this data.

Analysis results. The advisory scores, roadmaps, activity reviews, and project blueprints generated by the platform are stored and associated with your account.

We use your information to:

• Authenticate your account via Google OAuth.
• Run our AI advisory analysis and generate personalized scores and recommendations.
• Store your profile and analysis history so you can return and track progress over time.
• Allow observers (parents or guardians) you invite to view a read-only summary of your profile.
• Send nudge notifications from observers you have authorized.
• Refine our proprietary algorithms and system operations. Any internal improvement is limited to tuning Vyzrly's own scoring logic, prompt configurations, evaluation thresholds, and system performance. It does not involve sharing your inputs with third parties for model training.

We do not use your data, and we do not permit the third-party AI infrastructure providers we use, to train any foundational or general-purpose AI model. Where we route inputs through third-party AI services to generate your analysis (for inference only), we do so under contractual data processing terms that prohibit the provider from using your inputs or outputs to train, improve, or fine-tune their underlying models. Your profile, intake data, and analysis results remain confidential to your account.

We do not use your information for advertising, and we do not sell your data to third parties.

Vyzrly uses third-party services to operate, including authentication providers, AI infrastructure, and cloud hosting. These services may receive limited data necessary to perform their function. Each service operates under its own privacy policy and data processing terms.

We do not share your personal information with third parties for advertising or marketing purposes. Data shared with service providers is limited to what is required to deliver the features you use.

Vyzrly's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we only use the Google account information we receive (your name, email address, and Google account ID) to authenticate you, create and maintain your Vyzrly account, and provide the advisory features you request. We do not sell, transfer, or use this information for advertising, credit assessment, or any purpose unrelated to the user-facing features of Vyzrly. We do not allow humans to read this data except where required for security, to comply with applicable law, or with your explicit consent.

Your profile and account data are retained as long as your account is active. Analysis results are retained in a rolling window: we keep your most recent 10 advisory analyses. Older analyses are automatically deleted from our systems when the 11th analysis is completed.

If you request account deletion, we will remove your profile, analysis history, and all associated data within 30 days.

Inactivity sunset. If your account is entirely inactive — meaning no logins and no analyses run — for a period of 24 consecutive months, your account and all associated data will be automatically and permanently deleted. We will make reasonable efforts to notify you at the email address on file before deletion, but deletion will proceed even if the notice cannot be delivered. Once an account is deleted under this clause, the data cannot be recovered.

You may grant observer access (typically a parent or guardian) to a read-only view of your advisory profile. Observers can view your scores, activity reviews, roadmap, and analysis history. They cannot edit your profile or run analyses on your behalf.

You can revoke observer access at any time from the Settings page. Revocation takes effect immediately.

Vyzrly uses browser session storage (not third-party cookies) to maintain your analysis state within a session. We use a session cookie issued by NextAuth.js to keep you signed in. This cookie is strictly necessary for the service to function and is not used for tracking.

You have the right to:

• Access the information we hold about you.
• Correct inaccurate profile information via the Profile page.
• Delete your account and associated data by contacting us at [email protected].
• Withdraw consent for observer access at any time via Settings.

Residents of U.S. states with comprehensive consumer privacy laws — including California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), and Washington (WPPA and the My Health My Data Act) — have specific statutory rights with respect to their personal information. These rights generally include:

• Right to know / access. Confirm whether we process your personal information and obtain the categories and specific pieces collected.
• Right to correct. Request that we correct inaccurate personal information.
• Right to delete. Request that we delete personal information we hold about you, subject to limited legal exceptions.
• Right to data portability. Receive a copy of your personal information in a portable, machine-readable format.
• Right to opt out of the sale or sharing of personal information, of targeted advertising, and of profiling that produces legal or similarly significant effects. Vyzrly does not sell personal information, does not engage in targeted advertising, and does not use profiling for legally significant decisions.
• Right to non-discrimination. We will not deny service, charge a different price, or provide a different level of quality because you exercise these rights.

Vyzrly honors these requests universally, regardless of the state in which you reside. To exercise any of these rights, contact us at [email protected]. We will verify your identity (typically by confirming control of the email address associated with your account) and respond within the timeframe required by applicable law (generally 45 days, with one permitted extension where reasonably necessary).

You may designate an authorized agent to make a request on your behalf. We may require written authorization from you and identity verification of the agent before honoring an agent-submitted request. If we deny a request, you have the right to appeal our decision; instructions will be included in our response.

We use HTTPS for all data in transit, and Cloudflare's infrastructure provides at-rest encryption. Authentication is handled entirely through Google OAuth. We never store passwords. Access to student data by observers requires an explicit invitation from the student.

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Vyzrly after changes constitutes acceptance of the updated policy. For material changes, we will make reasonable efforts to notify users via email.

For privacy questions, data requests, or to report a concern:

EthicQ
[EthicQ Physical Address, WA]
[email protected]

EthicQ is organized and operates under the laws of the State of Washington, United States. This Privacy Policy is governed by, and any disputes arising under it shall be resolved in accordance with, the laws of the State of Washington, without regard to its conflict-of-laws principles. Exclusive jurisdiction and venue for any such disputes lies in the state and federal courts located in King County, Washington, except where applicable law grants you a non-waivable right to bring claims in another forum.