Privacy Policy

Effective date: July 22, 2026

SHMACS ("we", "us") is a course-discovery and scheduling site for students, run by SHMACS LLC. This page explains what we collect, why, and what you can do about it.

1. What we collect

Account info. Your email address when you sign in (school tools use your school email; the college advisor uses the email you purchase with). We use it to send sign-in codes and to associate your access with you.
Chat conversations. When you use SHMACS chat while signed in, we log the conversation — with your email replaced by a hashed identifier and common patterns like email addresses and phone numbers scrubbed — to improve answers and keep the service running affordably. The scrub is a best effort, not a guarantee: don't type anything into chat you wouldn't want a staff member to read.
Uploads. If you upload a transcript or degree audit while signed in, its contents are stored with your chat so the assistant can use them. They are sensitive documents — upload only what you're comfortable with, and you can erase them any time with "Forget my uploaded data" in Settings.
Usage analytics. We collect analytics about how the site is used (pages, clicks, and session recordings that may include what you type into the site, excluding passwords) to fix problems and improve the product.
Payments. Handled entirely by Stripe. We never see or store your card number — we keep only your email and your pass's status.

2. Service providers

We use a small number of service providers to run SHMACS: a cloud hosting provider, Google (whose AI models power chat), Stripe (payments), and an analytics provider. Each receives only what it needs to do its job.

3. Retention

We keep logs and uploads for as long as they're useful for running and improving the service, and we delete them on request (below).

4. Access

Access to logs is limited to SHMACS staff for debugging, safety, and product improvement. We don't sell your data.

5. Your choices & deletion

Use "Forget my uploaded data" in Settings to erase uploaded documents and chat history from your browser and our cache.
Email hello@shmacs.org from the address you signed in with to request deletion of your data. We'll act on verified requests within 30 days.

6. Minors

SHMACS is intended for users 13 and older. If you're under 18, get a parent or guardian's permission before purchasing anything.

7. Cookies

We use cookies for signing you in and remembering preferences (like your last-visited school). We don't use third-party advertising cookies.

8. Changes

We'll update this page when our practices change and adjust the effective date above.

9. Contact

Questions or requests: hello@shmacs.org.