Privacy Policy

PrepToDone collects information you provide directly, as well as data generated through your use of the Service.

• Account data, for accounts made before sign-ups closed in September 2026: the profile entered there — GPA, test scores, activities, grade level, school list, and academic history.
• Usage data: pages visited, features used, session duration, interaction logs, and anything you choose to type into a feedback box on the site.
• Purchases without an account: for the Early Decision answer we collect the email address you give at checkout, the school list you enter, your SAT or ACT score, and the household income bracket you select. No account is created.
• Counselor accounts: a counselor's email address, the name and practice they choose to show on documents, sign-in records, and what they enter about each student — a label such as initials (not a name), an SAT or ACT score, a college list, an optional family income band, and the Early Decision result. Counselors are asked not to enter a student's name or contact details.
• Payment data: processed securely by Paddle. PrepToDone does not store card numbers.
• Outcome feedback: application results you voluntarily share with explicit consent.

We use the information we collect to provide, maintain, and improve the Service:

• Email account holders when a new admissions round opens — unless they turned our emails off — with a link that reopens their saved list and score.
• Issue and re-issue the Early Decision answer, and deliver its link to the email address you gave at checkout.
• Run the counselor workspace: make the documents a counselor asks for, email the counselor sign-in links and notices about their plan, and measure in aggregate, without anything that identifies a student, how accurate the documents were.
• Measure how accurate our answers were, from results you choose to share with us — only with your consent, and reported only in aggregate.
• Send the emails a purchase or a request needs: your document link, the reminder or results-week email you agreed to under a preview, and purchase and refund notices.
• Respond to support inquiries and user feedback.
• Comply with legal obligations.

We do not sell personal information, and we do not share it with advertising networks or data brokers.

We share data only with service providers that operate the Service on our behalf — hosting and database providers, a payment processor, an email delivery provider, and analytics providers. They process data only for the purposes we specify and may not use it for their own purposes. We never receive or store your card details; payment information is submitted directly to our payment processor.

We may also disclose information where required by law or valid legal process, or in connection with a merger or sale of assets.

We take data security seriously and implement industry-standard safeguards:

• All data is encrypted in transit using TLS/HTTPS.
• Data at rest is encrypted using Supabase-managed encryption.
• Access to production data is restricted to authorized personnel only.
• We conduct regular security reviews of our infrastructure.

You have control over your data and can exercise the following rights at any time:

• Access your data: request a copy of the personal data we hold about you.
• Correct your data: email hello@preptodone.com and we will correct inaccurate or incomplete information.
• Delete your account: email hello@preptodone.com from the address on the account, and we will delete the account and its data.
• Withdraw consent: opt out of anonymized data contribution at any time by emailing hello@preptodone.com.
• Data portability: email hello@preptodone.com to request your data in a machine-readable format.

If you bought without an account, write to us from the email address you used at checkout, or quote your document link or your Paddle receipt, and we will act on the same rights.

If a counselor made a document for you with PrepToDone, you can ask the counselor to remove your record, or write to us with the document link and we will delete the record and its documents.

To exercise any of these rights, contact us at hello@preptodone.com.

We use cookies to keep counselors signed in and to understand how the Service is used.

• Essential — keep a counselor signed in. The counselor workspace cannot work without them.
• First-party measurement — a random ID with no name or email in it (cookie: ptd_anon_id, kept for one year), so we can count how visitors move through the tool. If you buy, or leave your email under a preview, the ID is stored with that record. If you sign in to the counselor workspace, it is stored with your workspace activity.
• Analytics — Google Analytics 4 measures aggregate usage, such as which pages are viewed and how visitors arrive. Cookies: _ga, _ga_*.
• Session replay — Microsoft Clarity records interaction data such as clicks, scrolling, and cursor movement, so we can find parts of the Service that are unclear or broken. It is configured to mask text you enter, including email addresses and passwords. Cookies: _clck, _clsk.

We do not run advertising or remarketing on the Service.

You can clear or block cookies in your browser, and you may ask us to exclude your sessions from analytics by contacting us.

Analytics data is retained for up to 14 months. We keep account data until you ask us to delete the account. After you ask, we keep it for 30 days so that a deletion made in error can be undone — email hello@preptodone.com within that time — and then delete it. A backup copy is kept for 90 more days, only to recover from an error, and is then deleted.

For a purchase made without an account, we keep the email address you gave at checkout, and the document it unlocks, for at least 90 days from the purchase — the period in which the document can be re-issued — and until we have published in December how that season's answers scored. After that period we may replace the address in our records with a placeholder. The document stays readable at its link; once the address is gone we can no longer re-send the link by email, so keep the link.

Paddle, our Merchant of Record, keeps its own record of your purchase, including your email address, under its own privacy policy. Removing an address from our records does not remove it from Paddle's.

If you ask us to email you a link back to a preview of your list, we keep that email address and the list inputs you entered — the schools, your test score and the income bracket you chose — for up to 90 days, so we can send you the emails the note under the address field lists: at most a reminder before the deadline and one email in the week Early Decision results come out. After that we delete them. You can stop these emails at any time with the link in any of them; no account is created.

A counselor account and the student records in it are kept while the account is open. A student the counselor removes leaves their list at once, but the record is kept with the account so that document links already sent keep working. We delete a student's record and its documents within 30 days of a request from the counselor, the student or a parent, and a closed counselor account with all its records within 30 days of closing. Paddle keeps its own record of plan payments.

PrepToDone is operated from the Republic of Korea, and the account information you submit is stored in a database located there. Parts of the Service are delivered from servers in the United States, and some of our providers process data in the United States and Europe.

Your information may therefore be transferred to, stored in, and accessed from these locations, which may have data protection laws that differ from those of your own country.

Wherever you are located, you may request access to, correction of, or deletion of your personal information, or ask us to stop processing it. Contact us at the address in Section 10.

The Service is not directed to children under 13, and you must be at least 13 years old to create an account. We do not knowingly collect personal information from anyone under 13; if we learn that we have, we will delete it.

If you believe a child under 13 has provided us information, contact us at the address below.

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us at:

hello@preptodone.com