Privacy Policy

Last updated: July 13, 2026

Draft — pending legal review. This policy describes how the platform actually handles data today, but it has not been reviewed by counsel. Because the service involves minors, payments, and biometric-adjacent identity checks, it must be reviewed against COPPA, state child-labor and student-privacy law, and applicable data-protection law before public launch.

Who we are

Pathway to Success ("we") operates a marketplace that connects high-school students with paid local work, with a parent or legal guardian involved at every step. Contact: admin@pathwaytosucceed.com.

Information we collect

Account information — name, email address, role (student, guardian, job poster, school admin, or platform admin), and password (stored only as a salted hash).
Student academic records — the report card you upload. We extract only the grades needed to compute a GPA and determine eligibility. The file itself is stored encrypted.
School association — the school a student attends. Job matching is centered on the school, not the student's home address, which we do not collect or store.
Guardian relationship and consent — the guardian's email, their relationship to the student, and a record of consent being granted or revoked.
Job poster identity — identity verification is performed by Stripe Identity. We receive only a pass/fail result and basic profile details; we never receive or store your government ID images.
Payment information — handled entirely by Stripe. We store only Stripe identifiers (customer, payment-intent, connected-account IDs) and never see or store card numbers or bank credentials.
Location, at check-in only — when a student checks in to a job, a one-time location reading confirms they are at the job site. It is used for that check and is not stored on the student's profile or used for tracking.
Job activity — jobs applied to, assigned, completed, and earnings.
Device tokens — if you enable notifications, a push token for your device.

How we use information

To determine student eligibility (a 3.0 GPA minimum) and match students to nearby, age-appropriate jobs.
To obtain and record guardian consent, and to let a guardian pause their student's work at any time.
To verify job posters and keep unverified adults out of the marketplace.
To authorize and capture payment for completed work, and to pay wages to the guardian.
To operate safety features such as QR check-in and dispute review.
To send transactional messages (email verification, password reset, job notifications). We do not send marketing messages.

Wages are paid to the guardian

All earnings are paid to the guardian's connected payout account, never directly to the student. The guardian is the account holder of record for tax and compliance purposes.

Automated processing of report cards

We use an AI service (Anthropic's Claude) to read the grades on an uploaded report card. Low-confidence or ambiguous results are routed to a human administrator for review rather than being decided automatically. You may request a human review of any eligibility decision.

Who we share information with

We do not sell personal information. We share only what is necessary with service providers who process data on our behalf: Google Cloud (hosting and storage), Stripe (payments and identity verification), Anthropic (report-card extraction), Resend (transactional email), and Google Maps (geocoding job addresses). A job poster sees a student's first name, school, and standing — never their home address, contact details, or academic records.

Your choices and rights

A guardian may revoke consent or pause their student at any time, which immediately stops new job matching.
You may request access to, correction of, or deletion of your data by emailing us.
A student may delete an uploaded report card.
Notifications and location access can be declined; the app remains usable without them (check-in without location falls back to server-side verification).

Data retention and security

Data is encrypted in transit and at rest. Report cards and identity results are retained only as long as needed for eligibility and compliance, and deleted on request unless we are legally required to retain them. Access to administrative tools is restricted to invited administrators.

Children's privacy

The service is designed for high-school students working with a guardian's consent. We do not knowingly create student accounts without a linked guardian who has granted consent. If you believe a student is using the service without guardian consent, contact us and we will suspend the account.

Changes

We will post any changes to this policy on this page and update the date above.