Privacy Policy

Last updated: July 16, 2026

Tasseled PBC ("Tasseled," "we," "us," or "our") builds infrastructure to help students find the most affordable path to their degree. We know that trust is the foundation of that work, and that the people who use our tools — many of them students and their families — deserve to understand exactly what we do with their information and, just as importantly, what we will never do with it.

This Privacy Policy explains how we collect, use, share, and protect personal information when you use our websites and applications, and the tools and features available through them (together, the "Services"). Please read it alongside our Terms and Conditions.

If you have questions about anything here, contact us at privacy@tasseled.com.

Our core privacy commitments

We want the most important promises at the top, in plain language, not buried in legal text:

We do not sell your personal information. Not students', not families', not anyone's. Not for money, and not for any other "valuable consideration."
We do not serve targeted or behavioral advertising, and we do not allow third parties to use your information to advertise to you.
We do not build commercial profiles of students or use student information for any purpose other than providing and improving the educational Services you came to us for.
We do not use the content of your plans, transcripts, or academic records to advertise, market, or sell anything to you.

These commitments apply to everyone who uses the Services, and we hold ourselves to them regardless of whether a particular law requires it.

What this policy covers — and what it doesn't

This policy covers the Services and the individuals who use them directly: students, families, advisors, and other direct users.

This policy does not govern services we provide to institutions under separate agreements. When colleges, universities, or other institutions engage us to help transfer student information system data during a merger, acquisition, or similar transition, that work is governed by separate written agreements with the institutions involved — including agreements addressing the Family Educational Rights and Privacy Act (FERPA). In that context, the institution controls the student records, and we act only as its service provider under its direction and its agreement. If you are a student whose records were handled as part of an institutional transition, the institution that maintains your education records — not this policy — governs how those records are used. Direct any questions to that institution.

Information we collect

We collect only what we need to provide the Services. Here is what that means in practice.

Information you provide when you create and use an account

Account information. When you create an account, we collect information such as your name, email address, and a password.
Plan information. To generate a personalized plan, we use the information you provide about your education background and goals — such as the degree, institution, and location you're interested in, and any coursework, credits, or academic history you choose to enter. Your plans are saved to your account so you can return to them.
Sharing and collaboration information. If you share a plan with an advisor, or an advisor shares one with you, we process the information needed to connect your accounts and let you collaborate on the same plan.
Communications. If you contact us for support or otherwise, we keep the information you provide so we can respond and improve the Services.

Information we collect automatically

We deliberately keep automatic data collection minimal and privacy-preserving.

Technical and usage data. We use privacy-preserving, cookie-free analytics to understand aggregate traffic and keep the Services reliable and secure. This measurement is derived from ordinary web requests (such as approximate, non-identifying information about the device or browser making a request) and is not used to identify or track individual visitors across sites. We do not use third-party advertising pixels, session-recording tools, or cross-site tracking.
Essential cookies. We use a limited number of cookies that are strictly necessary to operate the Services — for example, to keep you signed in and to protect against fraudulent account use. We do not use advertising cookies, and we do not use cookies to track you across other websites.

Information we do not collect

We do not knowingly collect personal information from children under 13. See "Students' and children's privacy" below.
We do not collect biometric information, and we do not use the Services to build advertising or marketing profiles.

How we use information

We use the information we collect to:

Create, save, and update your personalized degree and affordability plans;
Operate, maintain, secure, and improve the Services;
Enable the collaboration and sharing features you choose to use (such as working on a plan with an advisor);
Respond to your questions and provide support;
Send you service-related messages (for example, account, security, or important-change notices), and, where you have asked for them, informational updates that you can unsubscribe from at any time;
Produce aggregated or de-identified statistics, research, and reports that do not identify you — for example, statewide affordability and impact metrics;
Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms; and
Comply with our legal obligations and enforce our agreements.

We use student information solely to provide and improve the educational Services. We do not use it for advertising, marketing unrelated products, or building commercial profiles.

How we share information

We share personal information only in the limited circumstances below. We never sell it.

With service providers. We work with a small number of vendors that help us operate the Services — for example, cloud infrastructure and content delivery (including Cloudflare, which also provides our privacy-preserving analytics) and email delivery for account and support messages. These providers may process personal information only to perform services for us, under contracts that require them to protect it and prohibit them from using it for their own purposes.
At your direction. When you share a plan with an advisor or otherwise choose to share information through the Services, we share it as you've instructed. See "Plan sharing" below.
For legal and safety reasons. We may disclose information if we reasonably believe it's necessary to comply with a law, regulation, legal process, or governmental request; to enforce our Terms; or to protect the rights, property, or safety of our users, the public, or Tasseled.
In a business transfer. If Tasseled is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction. We will provide notice before any personal information becomes subject to a materially different privacy policy.

We do not share personal information with advertising networks, data brokers, or "business partners" for their own marketing.

Plan sharing

Our tools are built for collaboration — a student working on the same plan with an advisor, a counselor, or a family member. Here is how sharing works:

Plan sharing happens between accounts. When you share a plan with a specific person, that person can view (and, where enabled, collaborate on) the plan you shared with them.
You can stop sharing a plan or disconnect a shared account through your account settings where available, or by contacting us at privacy@tasseled.com.
If the Services ever allow you to create a shareable link to a plan, anyone who has that link may be able to view the plan — so only send such a link to people you intend to see it.

Students' and children's privacy

Protecting students is central to what we do.

13-and-over floor for self-registration. The Services are intended for users age 13 and older. Students create their own accounts; we do not knowingly allow children under 13 to register, and we do not knowingly collect personal information from anyone under 13. If we learn that we have collected personal information from a child under 13 without appropriate authorization, we will delete it promptly.
School-directed access. Where a school or district authorizes and directs a student's use of the Services, that use may be governed by an agreement with the school. If a school ever provides student information to us or asks us to enable access for younger students, we will handle that information under the school's direction and applicable law, not for any commercial purpose.
Our promises about student data. Consistent with student-privacy laws across the states where we operate, we commit that we will not sell student personal information; will not use or disclose it for targeted advertising; will not use it to build a profile of a student except in furtherance of the student's own educational purposes; will use it only to provide and improve the Services; will maintain reasonable security to protect it; and will delete it at the request of the student or an authorizing school, subject to legal retention obligations.
Parents and guardians. If you believe a child under 13 has provided us personal information, or if you are a parent or guardian with questions about your student's information, contact us at privacy@tasseled.com and we will help.

How long we keep information and how to delete it

While your account is active, we keep your account and plan information so the Services work for you and your plans are there when you return.
When you close your account or ask us to delete your information, we will delete or de-identify your personal information within a reasonable period, except where we're legally required to retain certain information, need it to resolve disputes or enforce our agreements, or must keep limited records for security and fraud-prevention purposes.
We retain aggregated or de-identified information (which does not identify you) for internal analytics and to improve the Services.

To delete your account or your information, use your account settings where available, or contact us at privacy@tasseled.com.

How we protect information

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal information appropriate to its sensitivity — including access controls, encryption of information in transit, and limiting access to those who need it to operate the Services. No method of transmission or storage is perfectly secure, but we work continuously to protect your information.

If we experience a data breach affecting your personal information, we will notify affected users and any authorities as required by applicable law, and — for information handled on behalf of a school or institution — we will notify that institution in accordance with our agreement with it.

Your privacy rights and choices

Depending on where you live, you may have specific rights regarding your personal information under state law. We extend these core choices to all of our users regardless of location:

Access the personal information we hold about you and how we use it;
Correct inaccurate personal information;
Delete your personal information;
Obtain a portable copy of information you provided to us; and
Opt out of any sale of personal information, targeted advertising, or profiling — which is straightforward for us, because we don't do any of those things.

How to exercise your rights. Contact us at privacy@tasseled.com (or use your account settings, where available). We will verify your request — usually by confirming control of your account — and respond within the timeframe required by applicable law. You may authorize someone to make a request on your behalf; we may need to verify their authority. We will not discriminate against you for exercising any of these rights. If we decline all or part of your request, we will explain why, and you may appeal our decision by replying to our response or writing to privacy@tasseled.com; we will review your appeal and respond as required by applicable law.

Opt-out preference signals. Some browsers can send opt-out preference signals such as the Global Privacy Control (GPC). Because we do not sell personal information and do not use it for targeted advertising, there is no sale or sharing for such signals to opt you out of. Likewise, because we do not track our users over time across third-party websites, we do not respond to browser "Do Not Track" signals.

State-specific rights. Residents of certain states — including California and the growing number of states with comprehensive privacy laws — may have additional rights and specific ways to exercise them. If you are a California resident, you may request the categories and specific pieces of personal information we've collected, the sources and purposes of collection, and the categories of third parties with whom we share it; you have the rights to delete and correct your information; and you have the right not to be discriminated against for exercising these rights. Because we do not sell or "share" personal information for cross-context behavioral advertising as those terms are defined under California law, no opt-out of sale or sharing is necessary. Residents of other states with comprehensive privacy laws have comparable rights and may exercise them the same way. To make any request, contact us at privacy@tasseled.com.

Links to other websites

The Services may link to websites we don't operate, including the sites of colleges, universities, and government agencies. We aren't responsible for the privacy practices of those sites, and we encourage you to read their policies.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you by email or through a prominent notice in the Services before the change takes effect. Please review this policy periodically.

Contact us

If you have any questions, requests, or concerns about this Privacy Policy or your personal information, contact us:

Email: privacy@tasseled.com

Tasseled PBC is a Delaware public benefit corporation with its principal place of business in Florida, United States.