Privacy policy

Ivyward runs university applications for you with AI agents. This page explains what we collect, why, and what control you have. We don't sell your data, and we don't use it to advertise to you.

What we keep

• Your account: your email address and sign-in records.
• Your profile: what you tell the interviewer, what we read from documents you upload (CV, transcripts, certificates), and answers you give to portal questions.
• Your applications: shortlisted programs, essays and drafts, the packets you approve and sign, and a log of everything the agents do for you.
• Portal logins the agents create for you, encrypted at rest. You can see them under Portal logins.
• Emails between you and schools, when you connect Gmail.

Gmail

If you connect Gmail, the agents use it to send emails you've approved and to read messages from schools and application portals (replies, verification codes, logins a portal emails you). We keep only the messages that relate to your applications. We don't read unrelated mail for any other purpose, and Google user data is never used to train AI models or for advertising. You can disconnect Gmail in Settings at any time, which revokes our access.

We connect to Gmail through Composio, an integration service. When you connect, Google asks you to allow Composio, which holds the Gmail access on Ivyward's behalf and passes our requests to Google. Messages the agents read or send pass through Composio to reach us. Composio acts only on Ivyward's instructions for your account and doesn't use your mail for anything else. Disconnecting Gmail in Settings removes that connection.

How the agents use your data

Your profile, documents and messages are sent to our AI provider (Anthropic) to research programs, draft essays, fill application forms and read school replies. The provider processes this data to answer our requests and does not use it to train its models.

When the agents submit an application, they enter your answers on the school's own portal. When you open the live browser, screenshots of the portal are stored briefly to show them to you and deleted when the session ends. What you type there goes to the portal and isn't kept. The Chrome extension, if you install it, acts only on application portals and on Ivyward itself.

What we never take

• Card or bank details: you pay application fees on the school's site yourself.
• Government ID numbers: the agents never fill passport or national ID fields.

Where it's stored

Data is stored with our hosting and database providers (Vercel and Supabase) and is encrypted in transit. Our email providers handle only the messages they carry: Resend sends Ivyward's own emails, and Composio carries the Gmail connection. Portal passwords are additionally encrypted with our own keys.

Your control

• Edit your profile and documents at any time, and delete any document you uploaded.
• Pause every agent at once from your home page.
• Ask us to export or delete your account and everything in it.

Contact

Questions about your data? Write to us from the email address on your account.