Privacy Policy
The short version
- We collect what a family needs to plan a dancer's college applications, and we use it only to run ArtsCompass for you.
- We do not sell or share your personal information, and we do not show ads or use tracking cookies or analytics.
- Your family's information is visible to your family members, to your consultant and their practice, and to our own staff when it is needed to run and support the Service.
- A dancer under 18 uses ArtsCompass only through a family account a parent or guardian controls. No one under 13 may use it.
- You can ask to see, correct, export or delete your information at any time.
Contents
- Who we are and what this covers
- Information we collect
- How we use it
- Who can see your information
- Service providers
- AI features
- No selling, no ads, no tracking
- Other disclosures
- Children and teens
- How long we keep it
- Security
- Your rights and choices
- California privacy rights
- Browser storage
- Where information is processed
- Changes to this policy
- Contact
1. Who we are and what this covers
ArtsCompass is operated by Ypaty Labs ("we," "us"). This policy explains how we handle personal information when you use the ArtsCompass website and application (the "Service"). It is part of our Terms of Service. It does not cover the websites of schools or other third parties we link to.
Information we compile about colleges and dance programs, and the public professional information described in our Data Sources & Accuracy statement, is covered by that statement, which includes how an individual can ask us to correct or remove information about them.
2. Information we collect
2.1 Information you give us
| Category | Examples |
|---|---|
| Account | Name, email address, password (stored only as a secure hash by our authentication provider), your role (parent, dancer, consultant). |
| Dancer profile | Dancer's name, graduation year, high school and school type, GPA, test scores, a statement of objectives, email, phone, mailing address, application IDs such as a Common App ID. |
| Family contacts | Names, relationships, emails and phone numbers of parents or guardians you add. |
| Training and résumé | Studios and training history (including teachers' names), styles, hours, performances, roles, choreographers, competitions, awards, jobs and service. |
| Application plan | Schools on your list, application status and round, requirements, tasks, calendar events, audition choices and results, events you plan to attend and their expected cost. |
| Offers | Admission and scholarship offers, award amounts and terms, school contact names, and any offer letter you upload. |
| Essays and writing | Essay prompts, drafts and saved versions, comments (including from reviewers you invite), private notes, links to your own documents, brainstorm notes. |
| Files and media | Headshots, photos and documents you upload, and links to videos you host elsewhere (such as Vimeo or YouTube). We do not host video. |
| Notes | Notes you or your consultant write, including a consultant's meeting notes. |
| Communications | Messages you send us, feedback on help articles, and corrections you report. |
We do not ask for a dancer's date of birth, health or injury information, body measurements, Social Security number, or financial-aid or income information. Please do not put that kind of information in free-text notes.
2.2 Information collected automatically
- Activity records. When you sign in and open a family's workspace, we record the time, at most about once every 30 minutes, so consultants can see who is engaged and so we can support you. We keep a change log of who changed which record and when (it records field names and status changes, not your free text).
- Help searches. Searches in Help that find nothing, and your "was this helpful" feedback, so we can improve the articles.
- Technical data. Our hosting and database providers process your IP address, browser type and request logs to deliver and secure the Service.
We do not use advertising or analytics trackers, and we do not build profiles of you for marketing.
2.3 Information from others
Your consultant may enter information about your family and dancer when setting up or managing your workspace. If you connect Google Drive to import a document, we receive the text of the file you pick, using access limited to files you choose.
3. How we use it
- To provide the Service: build and show your plan, calendar, checklists, résumé, essays and documents.
- To share your family's workspace with the people you authorize (Section 4).
- To run AI features you choose to use (Section 6).
- To create and secure accounts, send sign-in and password-reset emails, and prevent fraud and abuse.
- To provide support, respond to requests, and send you notices about the Service or these policies.
- To maintain and improve the Service, including fixing errors and improving help content.
- To comply with law and enforce our Terms.
We do not use your family's information or your content to train AI models, and we do not use it to build the public program database.
4. Who can see your information
- Your family. The parent or guardian on the family account and the dancer can see the family's workspace. A dancer's essay drafts are visible to a parent only if the dancer shares them, or if the dancer does not have their own login.
- Your consultant and their practice. If a consultant manages your workspace, that consultant and authorized members of the consultant's practice can see and edit your family's information. Consultants are independent and agree to keep it confidential and use it only to serve you (see our Consultant Terms).
- People you invite. Anyone you send a review link can see the draft it points to until you turn the link off.
- Our staff. Our authorized personnel can access information when needed to operate, support, secure and fix the Service, and they are bound to keep it confidential.
Families never see which person said something in the expert commentary we summarize, and other families never see your family's information.
5. Service providers
We use these providers to run the Service. They process information on our behalf, under their own security and data protection commitments, and not for their own marketing.
| Provider | What it does | Information involved |
|---|---|---|
| Supabase | Database, sign-in, file storage, and sign-in and password-reset emails | All account, family and content information described above |
| Cloudflare | Website hosting, network security, and AI processing (Workers AI) | Requests and technical data; the content you send to an AI feature (Section 6) |
| Web fonts; Google Drive import, only if you connect it | IP address and browser data when fonts load; the document you choose to import | |
| jsDelivr | Delivers a software library the app runs | IP address and browser data |
| OpenStreetMap | Campus maps on program pages | IP address and browser data when a map loads (no account data) |
Links you add to videos or documents hosted elsewhere, such as YouTube, Vimeo or Google Docs, are governed by those services' own policies.
6. AI features
AI features run only when you use them.
- Essay coach. Sends the essay prompt and the draft or brainstorm notes you are working on. It does not send the dancer's name.
- Résumé assistant. Sends the résumé information it is formatting: the dancer's name, graduation year, school, GPA and test scores, objective, training and credits, and target schools. It does not send contact details or address.
These requests are processed by Cloudflare Workers AI using open-source language models, as our service provider. We do not use a logging gateway for these requests. We keep a record of each AI session with the essay or résumé it belongs to, so you can see its history; it is deleted with that essay or résumé. We do not use your content to train AI models.
Our separate research pipeline uses AI to read public school websites and other public sources. It does not receive any family's or dancer's personal information.
7. No selling, no ads, no tracking
We do not sell personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined in California law. We have not done so in the past 12 months. We do not show ads, and we do not disclose personal information to third parties for their direct marketing.
8. Other disclosures
We may disclose information: (a) if required by law, subpoena or court order, or to respond to lawful requests from public authorities; (b) to protect the rights, property or safety of our users, the public or us, including to report suspected child exploitation; (c) to enforce our Terms; and (d) to an affiliate or successor in connection with a reorganization, merger, acquisition, sale of assets, or the formation of a separate company to operate ArtsCompass. In that case this policy, or one at least as protective, will continue to apply to information collected under it.
9. Children and teens
- Under 13. The Service is not directed to children under 13, and we do not knowingly collect their personal information. If we learn that we have, we will delete it. If you believe a child under 13 has given us information, contact us.
- Ages 13 to 17. A dancer under 18 uses the Service only as part of a family account that a parent or legal guardian controls and has consented to. The parent or guardian can review the dancer's information, correct it, and ask us to delete it.
- Removing what a minor posted. A registered user under 18 may remove, or ask us to remove, content they posted to the Service, as provided by California Business and Professions Code Section 22581. Contact us to do so. Removal may not erase copies others have made, such as a reviewer's comment.
10. How long we keep it
- We keep account and family information while the account is active.
- When you delete something in the Service, it is removed from the active database. Essay drafts, AI session records, comments and uploaded files are deleted along with the family workspace when the workspace is deleted.
- When you ask us to close your account or delete your family's information, we delete it from our active systems within 30 days of confirming your request, and from backups on their normal cycle, which is no longer than 90 days.
- We may keep limited information longer where needed to comply with law, resolve disputes, or enforce our agreements, for example a record that you accepted these Terms. We may keep aggregated or de-identified information that cannot reasonably be linked to you.
11. Security
We protect information with encryption in transit, access controls that limit each account to the family information it is authorized to see, private file storage that is only reachable through short-lived links, and limited staff access. No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you as required by law. Keep your password private, and tell us right away if you think your account has been compromised.
12. Your rights and choices
Whatever state you live in, you can ask us to:
- access the personal information we hold about you or your dancer, or get a copy in a portable format;
- correct inaccurate information (you can edit most of it yourself in the Service);
- delete your information or your family's workspace; and
- remove a consultant's access to your family's workspace.
You can download a copy yourself at any time: download everything on your dancer's page gives you a zip of the records you can see in the Service, every file you uploaded, and a portfolio page you can keep. It leaves out our staff's internal notes, and a dancer's private essay text is in the dancer's own download only. For anything else, or a complete copy, email [email protected] from the address on your account. We may need to confirm your identity, and that you are the parent or guardian for requests about a dancer's information. We will respond within 45 days. We will not treat you differently for exercising these rights. You can also control essay sharing and review links directly in the Service.
13. California privacy rights
If you live in California, you have the right to know what personal information we collect, use and disclose; to access, correct and delete it; to opt out of its sale or sharing; to limit the use of sensitive personal information; and not to be discriminated against for using these rights. Because we do not sell or share personal information, and we use sensitive information (such as account login credentials) only to provide the Service, there is nothing to opt out of. You can make a request as described in Section 12, or through an authorized agent with your signed permission.
In the past 12 months, we collected the categories of information described in Section 2: identifiers (such as name and email); personal records (such as phone and address); education information (such as school, GPA and test scores); professional or training information (such as studios and performances); audio-visual information (photos and headshots); internet activity (activity records and help searches); and inferences limited to what the Service shows, such as which requirements are still missing. We collected them from you, your family members and your consultant, for the purposes in Section 3, and disclosed them only to the recipients in Sections 4 and 5.
Do Not Track and Global Privacy Control. We do not track you across websites, so we do not respond to Do Not Track signals differently. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of sale and sharing, which we already do not do.
Shine the Light. We do not disclose personal information to third parties for their own direct marketing.
14. Browser storage
We do not use cookies. The app stores two things in your browser's local storage: your sign-in session, so you stay signed in, and one display preference used by staff. Our providers may use strictly necessary cookies or similar technology for security, such as blocking malicious traffic.
15. Where information is processed
The Service is intended for users in the United States. Our providers may process information in the United States and in other countries where they operate. If you use the Service from outside the United States, you understand that your information will be transferred to and processed in the United States.
16. Changes to this policy
We may update this policy. If a change is material, we will tell you in advance by email or in the Service, and may ask you to accept it before continuing. The "Effective" date at the top shows when it last changed.
17. Contact
Privacy questions and requests: [email protected].