College Produce Inc.

• Account information. When you sign up, our authentication provider (Clerk) collects your name and email address and creates your login. We store your name, email, and an account identifier.
• Billing information. Payments are processed by Stripe. We receive the billing status and identifiers needed to manage your subscription; we do not receive or store your full card number.
• Content you provide. The files you select or upload (documents, filings, and phone-captured photos) and the file names and labels derived from them.
• Workspace & invitations. Your workspace details and, if you invite others, the name and email of each invitee.
• Usage & diagnostics. Metadata about how the Service is used, such as counts of items generated, features used, and error information.
• Advertising & analytics data. Through the Meta (Facebook) Pixel, information about your visit (such as page views and sign-up completion) for conversion measurement.
• Feedback & support. Any feedback you submit and the contents of support requests you send us.

Most processing happens in your browser. Labels are derived from your files on your device, and your working session and history (including the source files) are stored locally in your browser (using IndexedDB and localStorage). That local data stays on your device and is not transmitted to us.

We do not keep a general server-side copy of your uploaded documents. Some features do send content off your device:

• AI label extraction. If you turn on an AI feature, the contents of the selected files are sent to third-party AI providers (currently Anthropic and Google) to analyze and return labels. This processing is transient; we do not store the files on our servers as part of it.
• Phone capture. If you pair a phone, the photos you take are uploaded to object storage, delivered to your desktop session, and then deleted; any remaining objects are removed by a short retention window.
• PDF rendering. The labels you approve are sent to our rendering service to produce your PDF, which is returned to you.
• Support attachments. Files attached to a support request are sent to us by email; we record only how many were attached.

AI features are off by default. Do not enable them for material you are not permitted to share with third-party processors.

We rely on the following third-party providers to operate the Service. Each processes information only as needed to provide its function.

We retain account, billing, and usage records for as long as your account is active and as needed to provide the Service and meet legal obligations. Phone-captured photos are deleted after delivery to your session or after a short retention window. Files processed by AI providers are not retained by us as part of that processing, and files stored locally in your browser remain on your device until you clear them.

You may request deletion of your account and associated records by contacting us at info@collegeproduce.com, subject to any retention required by law.

We use industry-standard safeguards to protect information under our control, including:

• Encryption in transit. Traffic between your browser and the Service is protected with HTTPS/TLS, and uploads to our object storage use encrypted (TLS) connections.
• Managed authentication. Sign-in is handled by our authentication provider (Clerk); we do not store your password.
• Payment isolation. Card details are entered directly into our payment processor (Stripe, a PCI-DSS Level 1 provider); we never receive or store your full card number.
• Access controls. Access to your data is restricted to authenticated members of the workspace that owns it.
• Data minimization. We do not keep a general server-side copy of your uploaded documents; transient uploads (such as phone photos) are held only briefly and then deleted.

As with any online service, no method of transmission or storage can be guaranteed completely secure; however, we continually work to protect your information using the measures described above.

Your responsibilities.

You are responsible for keeping your login credentials confidential, not sharing your account or seats, securing the devices and browsers where your local session data is stored, and using care about what you choose to share with third parties (including any AI providers you enable).

Extent of our responsibility.

We are not responsible for unauthorized access to, or loss of, your information that results from: (a) your disclosure, sharing, public posting, or other compromise of your login credentials, account, or payment details; (b) information you choose to share with third parties; or (c) circumstances outside our reasonable control, such as your own devices, networks, or third-party services. To the fullest extent permitted by law, our liability relating to data security is subject to the limitations set out in our Terms of Service.

If we become aware of a confirmed unauthorized acquisition of your data while in our control, we will notify you consistent with applicable law and our Terms of Service.

We use cookies and similar technologies that are necessary to run the Service, including to keep you signed in. We also use your browser's local storage (IndexedDB and localStorage) to save your working session, history, and preferences on your device. You can clear this data through your browser at any time.

We use the Meta (Facebook) Pixel to measure advertising and sign-up conversions. It records events such as page views and completed registrations and may set cookies from Meta. You can manage tracking through your browser and ad-preference settings.