Privacy Policy

How we collect, use, share and protect your personal information when you use Ralspin in the United States.

§ 01Who we are

Ralspin is a curated subscription service that helps families, young adults and schools discover summer camps, fellowships, research programs, certifications, apprenticeships, trades pathways and youth conferences, with deadline alerts and 1:1 consultation sessions.

The service is operated by Fezzo Consulting LLC, a Michigan limited liability company with its principal place of business in Royal Oak, Michigan, doing business as Ralspin ("Ralspin," "we," "us" or "our"). For the purposes of U.S. state privacy laws, we act as the "business" or "controller" of the personal information described in this policy.

§ 02Scope and updates

This policy applies to personal information we collect from individuals located in the United States through our website, mobile interfaces, SMS messages, email communications and consultations. If you access Ralspin from outside the United States, please refer to the Canadian or United Kingdom version of this policy as appropriate.

We may update this policy from time to time. When we make material changes we will post the revised policy with an updated "Last updated" date and, where required by law, give you advance notice.

§ 03What we collect

The personal information we collect depends on how you use Ralspin. We group it into the following categories:

Account information

When you create an account or sign up for a subscription tier, we collect your name, email address, mobile phone number, password (stored as a salted hash), the plan you select (Self-Starter, Household or Institution) and, for institutional accounts, your role and the name of the school or organization.

Match profile information

To deliver the matching service, we collect your zip code, the audience type you select (yourself, a child/teen, or students/school) and the opportunity categories you express interest in (summer camps, fellowships, research, certifications, trades, apprenticeships, conferences and pre-college). You may also choose to provide age or grade level, areas of academic interest, financial-aid preferences and accessibility needs.

Student profile information (family and school accounts)

If you are a parent or guardian using a Household plan, or a counselor using an Institution plan, you may add up to four student profiles (Household) or up to 500 student profiles (Institution). Student profiles may include first name or initials, grade level, age range, interest tags and saved opportunities. We treat student profile information as sensitive personal information and apply additional safeguards described in Section 10.

Payment information

Payment card numbers are collected and processed directly by our payment processor (such as Stripe). We do not store full payment card numbers on our servers. We receive a tokenized reference, the last four digits, the card brand, billing zip code and transaction history.

Communications

When you contact us by email, phone, in-product chat or during a consultation session, we keep a record of that communication, including the content, attachments and metadata necessary to follow up.

Usage and technical data

We automatically collect information about your interactions with the service, including the pages you view, the opportunities you save or skip, the searches you run, your IP address, browser type, device identifiers, operating system, language preference, time zone, referring URL, and approximate location derived from IP. We use first-party cookies and similar technologies; see our Cookie Policy for details.

Information from third parties

If you create an account using a third-party login (such as Google or Apple), we receive basic profile information that the provider is authorized to share. If your school or district refers you to us, we may receive your name, school affiliation and role.

§ 04How we use your information

We use personal information for the following business and commercial purposes:

• To provide the matching service: generate opportunity recommendations based on your zip code, interests and saved activity; surface relevant deadlines; tune the match engine over time.
• To send transactional and deadline-driven communications: SMS and email alerts at 14, 7 and 2 days before opportunity deadlines you've followed; account, billing and security notices.
• To deliver 1:1 consultations: schedule sessions, share notes, follow up with strategists and complete the engagement.
• To process payments and prevent fraud: through our payment processor and fraud-screening tools.
• To operate, maintain and improve the service: monitor performance, debug, conduct analytics on aggregated and de-identified usage data and develop new features.
• To send marketing communications where permitted by law and consistent with your preferences, such as our weekly newsletter dispatch.
• To comply with legal obligations and to enforce our Terms of Service.

§ 05How we share information

We share personal information only as described in this policy. Specifically:

Service providers and processors

We work with vendors who process personal information on our behalf under written contracts that restrict their use of the data, including hosting and infrastructure providers, payment processors, email service providers, SMS gateway providers, customer-support tools, analytics tools and our consultation scheduling platform.

Schools and institutional administrators

If your account is part of an Institution subscription (for example, your school district pays for your access), authorized administrators at that institution may see the student profiles, saved opportunities and aggregate engagement reports for accounts under their plan. Personal communications with our team are not shared with institutional administrators without your consent.

Legal and safety

We may disclose personal information if we believe in good faith that disclosure is necessary to comply with a lawful subpoena, court order or other legal process; to protect the safety of any person; to investigate or prevent fraud; or to enforce our Terms.

Business transfers

If we are involved in a merger, acquisition, financing, reorganization or sale of assets, personal information may be transferred as part of that transaction. We will provide notice and continue to honor this policy until any successor adopts a replacement.

With your direction

We share personal information with third parties at your direction, for example, when you choose to apply to an opportunity through an external link or send a referral to a friend.

§ 06Sale, share and targeted advertising

We do not sell personal information in exchange for money. We do not engage in "cross-context behavioral advertising" (sometimes called "sharing" under California law) as a routine practice. We use first-party analytics and limited advertising pixels only as necessary to measure the performance of our own marketing. If our practices change, we will update this policy and provide the appropriate opt-out mechanism described in Section 11.

We do not knowingly sell or share the personal information of any consumer under 16 years of age.

§ 07SMS deadline alerts

By providing a mobile number and opting in to text alerts, you consent to receive recurring autodialed text messages from Ralspin at the number you provide for purposes including deadline reminders, account notices and consultation confirmations. Message frequency varies based on the opportunities you follow. Message and data rates may apply. Consent to receive messages is not a condition of any purchase.

You can opt out at any time by replying STOP to any message; reply HELP for help. Carriers are not liable for delayed or undelivered messages. Mobile numbers and content of messages are not shared with third parties for marketing.

§ 08Data retention

We retain personal information for as long as your account is active and for the period reasonably necessary to provide the service. Specifically:

• Active account data is retained for the duration of your subscription.
• After cancellation, account and profile data is retained for up to 24 months to allow account reactivation, then deleted or de-identified.
• Billing records are retained for 7 years to comply with tax and accounting requirements.
• Communications and support records are retained for up to 3 years from the date of last contact.
• SMS opt-out records are retained indefinitely to honor your preference.

§ 09Security

We use administrative, technical and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration and destruction. These include encryption in transit (TLS), encryption at rest for sensitive fields, access controls, logging, regular vulnerability scanning and a documented incident response plan. No security measure is perfect; we encourage you to use a strong unique password and to notify us promptly of any suspected unauthorized access to your account.

§ 10Children's privacy

Ralspin is not directed to children under 13. We do not knowingly collect personal information directly from children under 13. Parents and guardians using a Household plan may create student profiles for their children that include limited information (first name or initials, grade level, age range, interests). This information is collected from the parent or guardian, not from the child, and is used solely to surface relevant opportunities for that child's family. Schools using an Institution plan may operate under their own student data agreements; we support compliance with the Family Educational Rights and Privacy Act (FERPA) and applicable state student-data privacy laws when acting as a "school official" under FERPA.

If you believe we have collected personal information from a child under 13 outside the permitted circumstances above, please contact us and we will delete it.

§ 11Your California rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), gives you the following rights with respect to personal information we have collected about you in the preceding 12 months:

Shine the Light. California Civil Code § 1798.83 permits California residents to request information about disclosures of personal information to third parties for direct-marketing purposes. We do not disclose personal information to third parties for their direct marketing.

§ 12Other state privacy rights

If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, New Jersey, Tennessee, New Hampshire, Minnesota, Maryland, Indiana, Kentucky, Rhode Island or another state with a comprehensive privacy law, you may have similar rights, which may include the right to access, correct, delete, port a copy of, and opt out of certain processing of your personal information. The categories and exercise mechanisms vary by state. To exercise any of these rights, follow the steps in Section 13.

We do not engage in profiling that produces legal or similarly significant effects, and we do not knowingly process the personal information of consumers we know to be under 13 for targeted advertising or sale.

§ 13How to exercise your rights

To submit a privacy rights request, email privacy@ralspin.com or call (248) 555-0100. We will:

1. Verify your identity by matching the information in your request against information we hold (typically your account email and a recent activity detail). We may request additional information for sensitive requests.
2. Respond within 45 days (with one 45-day extension where reasonably necessary).
3. Provide the response free of charge unless requests are manifestly unfounded or excessive.

If we deny your request, you may appeal by replying to our response email. We will respond to your appeal within 60 days.

§ 14Changes to this policy

We may update this policy from time to time. When we make material changes, we will revise the "Last updated" date at the top of the policy and, depending on the change, provide notice through the service, by email, or by other reasonable means. Your continued use of Ralspin after the effective date of the updated policy constitutes acceptance of the changes.

§ 15Contact us