Privacy Policy
The short version
- You can explore a fictional demo without an account. To build your own plan you sign in with your email and a password, with an emailed link and code, or with Google, and your plan is saved to our database so you can open it on any device.
- A copy of your plan is also kept in your browser so the app works offline.
- AI features send only what you ask them to work on (a draft, a transcript, a question or a program name) to an AI provider so it can answer.
- We don't sell your information, show ads, or share it with universities or OUAC.
- You can export your plan, and you can ask us to delete your account and data at any time.
1. Who we are
Offerly is a planning tool for Canadian university applications, operated as "Offerly" ("we", "us"). Offerly is independent and is not affiliated with OUAC or any university. We are responsible for the personal information described in this policy. Questions go to the contact in section 12.
This policy follows Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA).
2. What we collect
If you only use the demo
The demo uses a fictional student and stays in your browser. We don't receive it.
If you create an account
| Information | Why we need it |
|---|---|
| Email address and password. If you choose a password, it is stored only as a one-way hash by our sign-in provider; we can't read it. If you sign in with an emailed link and code instead, there is no password. | To create and secure your account and, when you use them, send sign-in emails. |
| Google sign-in details (your email and basic profile) if you choose "Continue with Google". | To sign you in without a password of your own. We don't receive your Google password. |
| Your plan: everything you enter in Offerly, which can include your name, school, city, graduation year, courses and marks, activities, awards, stories, essay drafts and the programs you track. | To save your work and sync it between your devices. |
| Technical data: IP address, browser type, and request times in server logs; a short-lived count of recent AI requests per user or IP address. | To keep the service running, fix errors, and prevent abuse and runaway costs. |
What we don't do
We don't use advertising cookies or trackers. Offerly stores a small amount of data in your browser (your plan, your sign-in session, your sync state and display preferences) because the app needs it to work. We don't currently run analytics. If we add privacy-friendly analytics, we'll update this page first.
3. How we use it
- To provide Offerly: calculating averages, checking prerequisites, tracking deadlines and saving your plan.
- To run the AI features you choose to use (see the next section).
- To secure the service, prevent abuse and fix problems.
- To email you a sign-in link and code when you ask for one. We don't send marketing email.
- To meet legal obligations.
We rely on your consent, which you give by creating an account or using a feature, and you can withdraw it at any time (see section 7).
4. AI features
Offerly uses an AI service provided by Anthropic for these features. They run only when you use them. Activity review, transcript reading and question splitting are limited to Pro accounts; program research is open to every signed-in student:
- Essay bank: your supplemental drafts are stored in your plan like the rest of your information. They are never sent to the AI or scored by it.
- Activity review (Pro): your activity entries and goals are sent to the AI to suggest improvements.
- Transcript upload: the photo or PDF you choose is shrunk in your browser, sent to the AI to read the courses and marks, and then discarded by us. We never store the image. You review every row before anything is added to your plan.
- Supplemental question import: the text you paste is sent to the AI to split it into separate questions.
- University search: the program or school name you type is sent to the AI, which searches the public web for admission requirements. This feature is available to every signed-in student.
Our server passes these requests to Anthropic and returns the answer. We don't keep a copy of AI inputs or outputs beyond what you save in your plan. Anthropic processes the content under its own terms and privacy policy, which we don't control. Don't upload documents that belong to someone else, and leave out information you don't want processed, such as a health number or home address that might appear on a transcript. AI output can be wrong; check anything important against the school's official pages.
5. Who else handles your information
We don't sell personal information or give it to universities, OUAC, advertisers or data brokers. We use a small number of service providers who process data on our behalf:
| Provider | What they do |
|---|---|
| Vercel | Hosts the website and the server functions. Sees request data such as IP addresses. |
| Supabase | Provides sign-in and the database that stores account data and saved plans. |
| Anthropic | Provides the AI that handles the features in section 4. |
| Provides "Continue with Google" sign-in if you use it, and serves the fonts the site displays (which means your browser contacts Google to load them). | |
| Email delivery provider | Sends sign-in emails (link and code) when you use that option. |
We may disclose information if the law requires it, or to protect the rights, safety or security of our users or the service. If Offerly is ever transferred to another organization, your information would move with it and this policy would continue to apply until you were told of any change.
6. How long we keep it
- Account and plan: until you delete your account or ask us to.
- Transcript images and AI inputs: not stored by us.
- Server logs and rate-limit counters: kept only as long as needed for security and troubleshooting, in line with our hosting providers' standard retention.
- Backups: deleted data may remain in provider backups for a limited time before it is overwritten.
7. Your choices and rights
You can ask to see the personal information we hold about you, correct it, delete it, or withdraw your consent. To make the process simple:
- Export: use Export or back up in the app to download your plan.
- Edit: change or remove anything directly in the app.
- Delete your account and all saved data: email us from the address on your account. We'll confirm your identity, delete your account and plan, and reply when it's done, normally within 30 days.
- Local-only data: clear your browser's site data for Offerly.
If you're unhappy with how we've handled your information, contact us first. You can also complain to the Office of the Privacy Commissioner of Canada.
8. Students under 18
Offerly is built for high school students, so many of our users are minors. If you're under 16, please ask a parent or guardian before creating an account or uploading documents. Offerly is not intended for children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has an account, contact us and we'll delete it. Parents and guardians can contact us to review or delete a minor's information.
9. Security
Connections to Offerly are encrypted. Saved plans are protected by database access rules so each signed-in student can read and change only their own record, and passwords are stored only as one-way hashes by our sign-in provider. We may not verify that an email address belongs to you when you sign up with a password. No system is perfectly secure. Use a strong password you don't use anywhere else, keep your email account secure, and don't share your account. If a breach creates a real risk of significant harm to you, we will notify you and the Privacy Commissioner as required by law.
10. Where data is processed
Our providers operate data centres in several countries, including the United States. Your information may therefore be processed outside Canada and may be accessible to courts and authorities in those countries under their laws.
11. Changes to this policy
We'll update this page when our practices change and revise the date at the top. For significant changes we'll also tell signed-in users in the app or by email before they take effect.
12. Contact
Privacy questions, access or deletion requests: 1livingschr2@gmail.com