Privacy
Effective [EFFECTIVE DATE] · [COMPANY LEGAL NAME]
Draft template — not legal advice. This page describes how the Iter software is built to handle data, written to be accurate to the implementation. It is a starting point for your own policy and must be reviewed and completed with qualified legal counsel before you rely on it. Bracketed items are placeholders to fill in.
Who this covers
Iter is an academic and career coaching tool used by students, by counselors a student invites, and by schools or programs that provision access for their members. Some students may be minors, so we build for data minimization and explicit, student-held consent by default.
What we collect
- Account details: your email and a securely hashed password (we never store your password in readable form), your display name, and your role (student or counselor).
- Workspace content you create: your profile facts, target, route milestones, evidence records, saved reviews, and chat messages with the agent. You enter this; you can edit or delete it.
- Usage counts: per-day AI token totals used to enforce plan limits. These are numeric totals, not the content of your messages.
- Payment: if you subscribe, payment is handled by Stripe. We store a plan status and Stripe reference identifiers — not your card number.
What we deliberately do not keep
- Uploaded originals. When you upload an image or document, its text is extracted locally on the server and folded into that one request. The original file is not stored — only the extracted text, and only as part of your workspace records if the flow saves it.
- No sale of personal data. We do not sell or rent your data or use it for third-party advertising.
- No invented facts about you. The agent will not fabricate a grade, requirement, deadline, or acceptance chance; claims are tied to sources you can check.
Where processing happens
Core analysis (text metrics, OCR, evidence and route logic) runs locally on the Iter server without sending your workspace to a third-party model. If an operator configures an external language model, agent chat requests may be sent to that provider to generate replies; that is a deployment choice disclosed by whoever runs your instance.
How sharing works
- Counselors see a student only with that student's approval. Buying a school plan or being added to an organization does not open a student's workspace. A counselor gains read access to a student's Counselor Brief only after the student invites and approves them, and the student can revoke it at any time.
- Service providers. We use Stripe as our payment processor. [LIST ANY OTHER SUB-PROCESSORS, e.g. hosting, email, LLM provider].
- Schools. When a school provisions access, we act on the school's behalf for its members under a data processing agreement. [DESCRIBE YOUR SCHOOL DPA TERMS].
Minors, FERPA & COPPA
Where Iter is used by a school, student workspace content may constitute education records; we handle it on the school's behalf and do not use it for unrelated purposes or redisclose it. Where a user may be under 13, [DESCRIBE YOUR AGE-GATE AND PARENTAL / SCHOOL CONSENT MECHANISM]. See the project's COMPLIANCE.md for how the architecture maps to these regimes and what remains to be completed.
Keeping your data, and deleting it
Your workspace is retained while your account is active. Deleting your account removes your user record, sessions, subscription record, usage counters, counselor grants where you are the student, and organization memberships, and revokes counselor grants where you are the counselor. [STATE YOUR RETENTION PERIOD FOR ANY RESIDUAL BACKUPS AND HOW TO REQUEST DELETION].
Security
Passwords are salted and hashed, sessions are server-side and expire, and provisioning and billing actions are gated so no user can grant themselves a paid plan. No system is perfectly secure; [DESCRIBE YOUR INCIDENT-RESPONSE AND BREACH-NOTIFICATION PROCESS].
Your choices & contact
You can edit or delete your workspace content, cancel a subscription from the billing portal, and delete your account. For privacy requests, contact [PRIVACY CONTACT EMAIL]. We will update this page and its effective date when the software's data handling changes.