PRIVACY POLICY

Effective Date: July 14, 2025

1. INTRODUCTION

Path2Grade (“Company,” “we,” “us,” or “our”), a privately owned entity operating in the United States, is committed to protecting the privacy and security of personal information collected from users (“User,” “you,” or “your”) of our website located at Path2Grade.com (the “Website”). This Privacy Policy (“Policy”) describes how we collect, use, disclose, and protect your personal information in connection with your use of our Website and services.

This Policy applies to all information collected through our Website, including information collected through our tutoring and academic assistance services, customer support interactions, and any other services we may offer. By accessing or using our Website, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.

If you do not agree with the practices described in this Policy, you should not use our Website or services. This Policy should be read in conjunction with our Terms and Conditions, which govern your use of our Website and services.

We reserve the right to modify this Policy at any time, and any changes will be effective immediately upon posting on our Website. Your continued use of our Website after any modifications constitutes your acceptance of the revised Policy.

2. TYPES OF DATA WE COLLECT

2.1 Personal Information

We collect various types of personal information that you voluntarily provide to us when using our services. Contact information includes your full name, email address, phone number when voluntarily provided, and mailing address when voluntarily provided. We also collect academic information such as your educational institution, academic level including undergraduate or graduate status, subject matter or field of study, academic requirements and specifications, and assignment details and instructions.

Payment information is collected to process transactions and includes credit card or debit card information, billing address, transaction history and payment records, and currency preferences. Communication data encompasses messages sent through our contact forms, email correspondence, chat logs and support ticket information, and feedback and survey responses.

2.2 Automatically Collected Information

We automatically collect certain technical information when you visit our Website. This includes your Internet Protocol address, browser type and version, operating system, device type and identifiers, screen resolution and display settings, and language preferences.

Usage data is collected to understand how our Website is used and includes pages visited and time spent on each page, click-through rates and navigation patterns, search queries and keywords used, referral sources and exit pages, date and time of visits, and frequency and duration of visits. We also collect general location data based on your IP address, including country and region information and time zone settings.

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tracking technologies to collect information about your browsing behavior and preferences. This includes session cookies for website functionality, persistent cookies for user preferences, analytics cookies for website performance measurement, and advertising cookies for targeted marketing purposes.

3. HOW WE USE YOUR DATA

3.1 Primary Purposes

We use your personal information for service delivery purposes, which include providing tutoring and academic assistance services, matching you with appropriate academic experts, processing and fulfilling service requests, delivering completed work and materials, and managing service quality and customer satisfaction.

Account management functions involve creating and maintaining user accounts when applicable, authenticating user identity, managing user preferences and settings, and providing customer support and technical assistance. Payment processing encompasses processing payments and transactions, managing billing and invoicing, handling refund requests and processing, preventing fraudulent transactions, and maintaining financial records.

3.2 Communication Purposes

We use your information to communicate with you regarding service updates and confirmations, order status and delivery notifications, customer support responses, policy updates and important notices, and marketing communications with consent where required by applicable law.

3.3 Business Operations

We use collected data for legitimate business purposes including website analytics and performance monitoring, improving service quality and user experience, conducting market research and analysis, developing new services and features, ensuring compliance with legal obligations, and protecting against fraud and security threats.

3.4 Legal Compliance

We may use your information to comply with applicable laws and regulations, respond to legal requests and court orders, protect our legal rights and interests, investigate and prevent illegal activities, and enforce our Terms and Conditions.

4. HOW WE PROTECT YOUR INFORMATION

4.1 Security Measures

We implement comprehensive technical, administrative, and physical security measures to protect your personal information. Technical safeguards include Secure Socket Layer encryption for data transmission, advanced encryption standards for data storage, secure payment processing systems, regular security audits and vulnerability assessments, multi-factor authentication for administrative access, and automated backup systems with encryption.

Administrative controls encompass strict access controls and user permissions, employee background checks and confidentiality agreements, regular security training and awareness programs, incident response procedures and protocols, and comprehensive data handling policies and procedures.

Physical security measures include secure data centers with restricted access, environmental controls and monitoring systems, surveillance and alarm systems, and secure disposal of physical documents and storage media.

4.2 Data Breach Response

In the event of a data breach that may compromise your personal information, we will immediately investigate and contain the breach, notify affected users within seventy-two hours where required by law, cooperate with law enforcement and regulatory authorities, implement additional security measures to prevent future incidents, and provide regular updates on the investigation and remediation efforts.

4.3 Third-Party Security

We require all third-party service providers to maintain equivalent security standards and implement appropriate safeguards to protect your personal information in accordance with contractual obligations and industry best practices.

5. SHARING AND DISCLOSURE OF YOUR INFORMATION

5.1 Service Providers

We may share your personal information with trusted third-party service providers who assist us in operating our Website and delivering our services. Academic experts include qualified freelance experts who provide tutoring and academic assistance, independent contractors bound by confidentiality agreements, and subject matter specialists who require access to assignment details for service delivery.

Technology partners encompass web hosting and cloud computing providers, payment processing companies, email marketing and communication platforms, analytics and performance monitoring services, and customer support and help desk platforms. Professional services include legal counsel and law firms, accounting and financial advisory services, and business consultants and advisors when necessary for business operations.

5.2 Legal Requirements

We may disclose your personal information when required by law or when we believe in good faith that disclosure is necessary to comply with legal obligations, court orders, or regulatory requirements, protect and defend our rights, property, or safety, protect the rights, property, or safety of our users or the public, investigate and prevent fraud, security breaches, or illegal activities, and enforce our Terms and Conditions or other agreements.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity, subject to equivalent privacy protections and notification requirements under applicable law.

5.4 Consent-Based Sharing

We may share your information with third parties when you have provided explicit consent for such sharing or when sharing is necessary to fulfill your specific requests for services or information.

6. YOUR RIGHTS AND CHOICES

6.1 Access and Portability Rights

You have the right to request access to your personal information we maintain, obtain a copy of your personal information in a structured, machine-readable format, request information about how your data is processed and shared, and receive confirmation of whether we process your personal information.

6.2 Correction and Update Rights

You may request correction of inaccurate or incomplete personal information, update your contact information and preferences, modify your account settings and privacy preferences, and request updates to outdated or obsolete information maintained in our systems.

6.3 Deletion Rights

Subject to legal and contractual obligations, you may request deletion of your personal information from our systems, removal of your data from marketing communications, erasure of information no longer necessary for service provision, and account closure and data removal.

6.4 Restriction and Objection Rights

You have the right to object to processing your personal information for direct marketing purposes, request restriction of processing under certain circumstances, opt out of non-essential communications and marketing materials, and withdraw consent for processing where consent is the legal basis for data processing.

6.5 Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within thirty days and may require verification of your identity before processing your request to ensure the security and privacy of your personal information.

7. USE OF COOKIES AND ANALYTICS

7.1 Cookie Categories

Our Website uses essential cookies that are necessary for website functionality and navigation, enable core features such as security and network management, and cannot be disabled without affecting website performance. Analytics cookies collect information about website usage and performance, help us understand user behavior and improve our services, are provided by Google Analytics and similar services, and generate statistical reports on website traffic and engagement.

Preference cookies remember your settings and preferences, enhance user experience through personalization, and store language preferences and accessibility settings. Marketing cookies support advertising and promotional activities, enable targeted advertising based on user interests, measure advertising effectiveness and campaign performance, and are provided by Google Ads and other advertising platforms.

7.2 Cookie Management

You can manage your cookie preferences through browser settings and privacy controls, cookie consent management tools on our Website, third-party opt-out mechanisms and preference centers, and device-level advertising identifier controls.

7.3 Google Analytics

We use Google Analytics to analyze website traffic and user behavior. Google Analytics collects information anonymously and reports website trends without identifying individual visitors. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on available from Google.

7.4 Third-Party Analytics

We may use additional analytics services to improve our Website and services. These services may collect and process data according to their own privacy policies, and we encourage you to review those policies when applicable.

8. THIRD-PARTY LINKS AND SERVICES

8.1 External Links

Our Website may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit before providing any personal information.

8.2 Social Media Integration

Our Website may include social media features and widgets that are hosted by third parties. Your interactions with these features are governed by the privacy policies of the respective social media platforms, and we encourage you to review those policies.

8.3 Third-Party Services

We integrate various third-party services to enhance our Website functionality, including payment processors subject to their privacy policies, customer support platforms, marketing and advertising services, and security and fraud prevention tools.

8.4 Data Sharing with Third Parties

When we share data with third-party service providers, we ensure they maintain appropriate privacy and security standards through contractual agreements and regular monitoring of compliance with our data protection requirements.

9. DATA RETENTION AND DISPOSAL

9.1 Retention Periods

We retain your personal information for as long as necessary to deliver our services, but in no event longer than twelve months from the last interaction or service delivery, unless a longer retention period is required or permitted by law. This retention period applies to all categories of personal information collected through our Website and services.

9.2 Secure Disposal

When personal information is no longer needed, we securely dispose of it using industry-standard methods, including secure deletion of electronic data, physical destruction of paper documents, degaussing or destruction of storage media, and obtaining certificates of destruction for sensitive materials when applicable.

9.3 Legal Hold Obligations

We may retain information longer than specified periods when required for legal proceedings, investigations, or regulatory compliance, but will limit such retention to the minimum period necessary to fulfill legal obligations.

10. GDPR COMPLIANCE

10.1 Applicability

While our primary operations are in the United States, we recognize that some users may be subject to the European Union General Data Protection Regulation. This section addresses GDPR requirements for applicable users accessing our services from the European Economic Area.

10.2 Legal Basis for Processing

Our legal bases for processing personal information under GDPR include consent where you have provided explicit consent for specific processing activities, contract where processing is necessary for the performance of our services, legitimate interest where we have legitimate business interests that do not override your rights, and legal obligation where processing is required by applicable law.

10.3 GDPR Rights

If you are subject to GDPR, you have additional rights, including the right to data portability, the right to object to automated decision-making, the right to lodge complaints with supervisory authorities, and the enhanced right to erasure commonly known as the “right to be forgotten.”

10.4 Data Protection Officer

For GDPR-related inquiries, you may contact our designated representative at [email protected], who will coordinate responses to your requests and ensure compliance with applicable European data protection requirements.

10.5 International Data Transfers

When we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place, including adequacy decisions, standard contractual clauses, or other approved mechanisms recognized under GDPR.

11. US PRIVACY POLICY SUPPLEMENT

11.1 State Privacy Laws

We comply with applicable state privacy laws, including the California Consumer Privacy Act, Virginia Consumer Data Protection Act, and other state-specific privacy regulations that may apply to our operations and user relationships.

11.2 California Residents

California residents have specific rights under the CCPA, including the right to know what personal information is collected and how it is used, right to delete personal information subject to certain exceptions, right to opt out of the sale of personal information, and right to non-discrimination for exercising privacy rights.

11.3 Sale of Personal Information

We do not sell personal information as defined by applicable privacy laws. We may share information with service providers and partners as described in this Policy for legitimate business purposes and service delivery.

11.4 Sensitive Personal Information

We may collect sensitive personal information as necessary for service provision. You have the right to limit the use and disclosure of sensitive personal information where required by applicable state privacy laws.

11.5 Minor’s Privacy

We do not knowingly collect personal information from individuals under eighteen years of age. If we become aware that we have collected such information, we will take steps to delete it promptly in accordance with applicable law.

12. JURISDICTION AND APPLICABLE LAW

12.1 Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the United States, without regard to conflict of law principles that might otherwise apply.

12.2 Jurisdiction

Any disputes arising from or relating to this Privacy Policy shall be resolved according to the laws of the United States in the appropriate courts having jurisdiction over the matter.

12.3 International Users

If you are accessing our Website from outside the United States, you acknowledge that your information will be transferred to, processed, and stored in the United States, where privacy laws may differ from those in your jurisdiction.

12.4 Regulatory Compliance

We strive to comply with applicable privacy laws and regulations in all jurisdictions where we operate or provide services, while maintaining our primary compliance framework under United States law.

13. UPDATES TO THE PRIVACY POLICY

13.1 Right to Modify

We reserve the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our practices, services, legal requirements, or other factors that may affect our data processing activities.

13.2 Notification of Changes

We will not provide specific notification of changes to this Privacy Policy. Users are responsible for periodically reviewing this Policy to stay informed of any updates or modifications that may affect their rights or our data processing practices.

13.3 Effective Date of Changes

Any modifications to this Privacy Policy will become effective immediately upon posting on our Website, unless otherwise specified. Your continued use of our Website after any changes constitutes acceptance of the revised Policy.

13.4 Material Changes

In the event of material changes that significantly affect how we collect, use, or share your personal information, we may provide additional notice through email or prominent website notifications to ensure users are aware of important modifications.

14. CONTACT US

14.1 Privacy Inquiries

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at [email protected]. We are committed to addressing your privacy-related inquiries in a timely and comprehensive manner.

14.2 Response Timeline

We will respond to privacy-related inquiries within thirty days of receipt. Complex requests may require additional time, and we will notify you if an extension is necessary to properly address your inquiry.

14.3 Identity Verification

For security purposes, we may require verification of your identity before responding to requests regarding your personal information to protect against unauthorized access to your data.

14.4 Complaint Resolution

If you are not satisfied with our response to your privacy inquiry, you may have the right to lodge a complaint with the appropriate data protection authority in your jurisdiction.