Privacy Policy

1. Information we collect

When you submit through IncomingU, we collect what you enter on the form: your full name, Instagram handle, bio/caption text, the photo(s) you upload, your answers to any additional questions your school has chosen to ask (for example, hometown, major, or hobbies), and your confirmation that you agree to our Terms of Service.

If your school charges a fee, payment is handled entirely by Stripe, our payment processor. We receive confirmation that a payment succeeded and Stripe's own transaction/payment identifiers; we do not receive or store your full card number.

We do not currently ask for or collect an email address, phone number, or home address as part of a Submission but Stripe may ask for this information during the payment process.

2. How we use it

• Manually review your Submission before it's posted,
• Post it, when approved, to your school's official Instagram account,
• Match a payment to the right Submission if you contact us for support, and
• Operate, secure, and improve this website.

3. Who we share it with

• Stripe processes payments for paid schools and, if applicable, links a payment to your Submission's internal ID and Instagram handle so we can match payments to the right person for support purposes.
• Supabasehosts our database and securely stores uploaded photos until they're reviewed.
• Vercel hosts this website.

We don't sell your information, and we don't share it with advertisers or data brokers.

4. How long we keep it

If a paid Submission's payment never completes (for example, an abandoned checkout), we automatically delete the Submission and its photos. Submissions that are reviewed (approved, rejected, or flagged) are kept on file for recordkeeping and support purposes. You can ask us to delete your Submission at any time before it's posted by contacting support@incomingu.com.

5. Photos before they're posted

Uploaded photos are stored privately and are not publicly viewable until a person at IncomingU actually posts them to Instagram. They're only accessible to IncomingU staff during review.

6. Children's privacy

IncomingU is meant for incoming and current college students, who are generally not children under 13, and we do not knowingly collect information from children under 13. If a submitter is under 18, our Terms of Service require permission from a parent or legal guardian. If you believe a child under 13 has submitted information to us, contact support@incomingu.com and we'll delete it.

7. Cookies and tracking

We don't currently use advertising cookies or third-party analytics/tracking scripts. Our hosting and payment providers may automatically log basic technical information (like IP address) for security and fraud prevention.

8. Your choices

You can ask us to remove a posted photo, or delete an unposted Submission, at any time by contacting support@incomingu.com.

9. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above.

10. Contact

Questions about this policy? Reach us at support@incomingu.com.