Privacy Policy (Vast Pathways LLC)

A. Information you provide

When you complete a quiz, form, or request information, you may provide:

• Name, email address, phone number
• City/state, postal code
• Interests and preferences (e.g., program/service interests, schedule preference, online/in-person preference, intended start timeframe)
• Any other information you choose to submit in free-text fields

B. Information collected automatically (technical data)

When you use the Site or Services, we (and our service providers) may collect:

• IP address, device identifiers, browser type, operating system
• Referring/exit pages, pages viewed, timestamps, clicks/interactions
• Approximate location derived from IP (e.g., city/state level)

C. Sensitive information

We do not intend to collect sensitive personal information (e.g., Social Security numbers, government IDs, financial account numbers, or detailed health/medical information). Please do not submit sensitive information through our quizzes or forms.

We use information to:

• Provide and operate the Services (including scoring, routing, and delivering results)
• Share your submission with the partner organization(s) you are requesting information from (for example, a school)
• Communicate with you about your request (for example, confirmations and support responses)
• Improve the Services (analytics, troubleshooting, testing, and performance)
• Prevent fraud, abuse, and security incidents
• Comply with legal obligations and enforce our agreements

A. With partner organizations (e.g., schools)

If you submit information through an embedded quiz or form on a partner's site, you are directing us to share your information with that partner so they can contact you and respond to your request.

B. With service providers

We use vendors to help operate the Services (e.g., hosting, analytics, databases, communications). They may access information only to perform services for us and are required to protect it.

C. Legal, safety, and business reasons

We may disclose information if we believe it is necessary to:

• comply with law, regulation, or legal process
• protect the rights, safety, and security of Vast Pathways, partners, users, or the public
• investigate and help prevent fraud or abuse

D. Business transfers

If we are involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to applicable requirements.

We may use cookies and similar technologies to:

• remember preferences
• understand usage and improve performance
• measure attribution (e.g., which pages or campaigns led to a submission)

You can control cookies through your browser settings. If you disable cookies, some features may not function properly.

When our quiz is embedded on a partner's website:

• that partner may collect information under its own privacy policy, and
• Vast Pathways collects and processes information submitted into the quiz to provide the Services and route the submission to the intended partner(s).

We retain information for as long as reasonably necessary to:

• provide the Services and support partners
• maintain records, reporting, and quality assurance
• comply with legal obligations
• resolve disputes and enforce agreements

Retention periods vary depending on the data type and purpose.

We use reasonable safeguards designed to protect information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Depending on how you interact with the Services, you may be able to:

• request access, correction, or deletion of your information (subject to legal and contractual limits)
• control cookies via browser settings

Important: If you submitted information to a school/partner and want to stop their communications, you may need to contact that organization directly.

The Services are not intended for children under 13, and we do not knowingly collect personal information from children under 13.

If you access the Services from outside the U.S., your information may be processed and stored in the United States or other locations where we or our service providers operate.

We may update this Privacy Policy from time to time. The "Last updated" date indicates when changes take effect.

Questions or requests about this Privacy Policy can be sent to: info@vastpathway.com

This section supplements the Privacy Policy for California residents and describes rights under the California Consumer Privacy Act, as amended by the CPRA ("CCPA/CPRA").

A) Categories of personal information collected

In the last 12 months, we may have collected the following categories (as defined by CCPA/CPRA):

• Identifiers: name, email address, phone number, IP address
• Internet/Network activity: interactions with our Site/Services, device and browser data
• Geolocation data (approximate): city/state inferred from IP address
• Other information you provide: interests and preferences submitted through quizzes/forms

B) Sources of personal information

• Directly from you (forms/quizzes)
• Automatically from your device/browser when you use the Site/Services
• From partner websites when you use an embedded quiz/form on their site (limited to the information you submit into the embedded experience)

C) Purposes for collection and use

We collect and use personal information for the purposes described above in this Privacy Policy, including providing and operating the Services, routing submissions to requested partners, communications, analytics/improvement, security, and legal compliance.

D) Disclosures of personal information

We may disclose personal information to:

• Partner organizations you request (such as schools)
• Service providers that help us operate the Services
• Government/law enforcement or other parties when required by law or to protect rights/safety
• Entities involved in a business transfer

E) Sale or sharing of personal information

We do not sell personal information. We also do not share personal information for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.

F) Sensitive personal information

We do not intentionally collect sensitive personal information as defined by the CCPA/CPRA. Please do not submit sensitive personal information through our forms/quizzes.

G) Your California privacy rights

Subject to certain exceptions, you may request to:

• Know/Access: request the categories and specific pieces of personal information we collected about you
• Delete: request deletion of personal information
• Correct: request correction of inaccurate personal information
• Non-discrimination: you will not be discriminated against for exercising your rights

H) How to submit a request

Email: info@vastpathway.com with the subject line "California Privacy Request" and include:

• your name and the email/phone you used in the quiz/form (so we can locate your record), and
• the right you want to exercise (access, delete, correct)

We will take reasonable steps to verify your request. You may use an authorized agent to submit a request on your behalf; we may ask for proof of authorization and verification of identity.

I) "Shine the Light" (California Civil Code §1798.83)

We do not disclose personal information to third parties for their own direct marketing purposes.