Privacy Policy

This Privacy Policy explains how TransferMaps (“TransferMaps,” “we,” “us,” or “our”) collects, uses, and shares information when you use our website and services (the “Service”). By using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.

1. Information we collect

We collect only the information needed to operate the Service:

• Account information. When you register, we collect your name, email address, and a password. Passwords are never stored in plain text — they are hashed with bcrypt before storage. If you sign in with Google, we receive your name, email address, and profile image from Google instead of a password.
• Transfer plans. The home college, target schools, intended majors, and the semester-by-semester course plans you create.
• Academic records you choose to add. Course history (course codes, titles, units, grades, terms, and years) and AP exam scores that you enter manually or import from a transcript. This information is optional — the Service works without it.
• Technical information. Standard server logs and a session cookie used to keep you signed in. We do not use third-party advertising or tracking cookies.

2. How transcript uploads are handled

When you upload a transcript PDF, the file is processed in memory on our server only to extract a list of courses. The PDF file itself is not stored. After the text is parsed, only the course rows you review and choose to import are saved to your account. You can edit or delete any imported course at any time.

3. How we use your information

• To create and maintain your account and keep you signed in.
• To generate, save, and display your transfer plans and course recommendations.
• To match your coursework against articulation requirements.
• To operate, secure, debug, and improve the Service.
• To respond to your requests and communicate with you about the Service.

We do not sell your personal information, and we do not use your academic records for advertising.

4. Articulation data and ASSIST.org

Articulation and course information shown in the Service is derived from publicly available data, including ASSIST.org. This data is stored within our own systems; we do not transmit your personal information or academic records to ASSIST.org or to any college in order to display it. TransferMaps is not affiliated with ASSIST.org, the University of California, the California State University, or any institution.

5. Service providers

We rely on a small number of trusted providers to run the Service. They process data only on our behalf and only as needed:

• Vercel — application hosting and server infrastructure.
• Supabase — managed PostgreSQL database where your account and plan data are stored.
• Google — only if you choose to sign in with Google, for authentication.

6. Data security

We take reasonable measures to protect your information, including hashing passwords with bcrypt and serving the Service over encrypted HTTPS connections. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data retention and your choices

We keep your information for as long as your account is active. You can edit or delete your plans, imported courses, and AP scores at any time from within the Service. You may request deletion of your account and associated personal data by emailing us at rigamarollmedia@gmail.com. If you are a California resident, you may have additional rights under the CCPA/CPRA, including the right to access, delete, and know what personal information we hold; contact us to exercise these rights.

8. Children’s privacy

The Service is intended for users who are at least 13 years old. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

10. Contact us

Questions about this Privacy Policy or your data? Email us at rigamarollmedia@gmail.com.