Privacy policy
What we collect, why, who helps us run the site, and the choices you have.
Effective date: September 28, 2026 · Last updated: October 6, 2026
The short version
- We collect what you give us to run MByAy!, like your account email and the profile, skills, and portfolio you build in the career planner.
- We do not sell your information, and we don't share it with schools, employers, or advertisers.
- When you use an AI feature, the parts of your profile needed for that feature are sent to our AI provider, Anthropic, to create your results.
- Payments are handled by Stripe. We never see or store your card number.
- You can edit or delete your information at any time, and delete your whole account from the career planner.
- You must be 13 or older to create an account.
1. Who we are
MByAy! ("MByAy!," "we," "us") is an education and career-planning website founded by Laura Billingsley-Green. It helps people explore degrees, trades, and certifications, find schools, plan a career path, and find ways to pay for training. This policy covers the MByAy! website and career planner.
2. Information we collect
Information you give us
- Account information: your email address, your password (stored only in scrambled, "hashed" form by our login provider), and your confirmation that you are 13 or older.
- Career planner profile: your education level, field of study, completed courses, interests, city and state, willingness to relocate, work preferences, desired industries, goals, available time, training budget, and any other limits you choose to share.
- Accessibility needs (optional): if you choose to describe accessibility needs, we treat that information as sensitive. Only you can see it, and it is used only to suggest workable options for you.
- Skills and portfolio: the skills you list and the portfolio items you add, including descriptions, reflections, links, and files you upload (such as documents, images, or videos).
- Messages: your name, email, topic, and message when you use our contact form or email us.
- Coach applications: if you apply to coach with MByAy!, the information you send (such as your name, contact details, location, credentials, and experience). We use it only to review your application and contact you, keep it private, and delete it on request.
- "Notify me" sign-ups: your email, and your first name if you give it, when you ask to hear when a coaching service or guide becomes available. We use it only to tell you about that item.
- Subscription information: if you subscribe to Premium, your plan status and renewal date. Your payment details go directly to Stripe (see section 5).
- Access codes: if your school, college, or program gives you an access code, we record which code you used and when your Premium access ends. That organization can learn only how many students used its code, never your name, plan, or anything you saved.
Please don't include highly sensitive information you don't need to share, such as Social Security numbers, financial account numbers, or medical records, in your profile or portfolio.
Information created when you use the site
- Results we generate for you: career pathways, gap analyses, and portfolio feedback.
- Usage records: a record of which AI features you used and when, so we can apply plan limits and control costs.
- Technical information: like most websites, our hosting and service providers automatically receive basic technical information when you visit, such as your IP address, browser type, and the pages requested. We do not use advertising cookies.
3. How we use your information
- To create and secure your account, including confirming your email and resetting your password.
- To run the career planner: saving your profile, skills, and portfolio, calculating evidence levels, and showing your progress.
- To create AI-generated pathways, gap analyses, and feedback when you ask for them.
- To process Premium subscriptions and manage billing.
- To answer your messages and requests, including accessibility accommodations.
- To keep the site working, secure, and within reasonable use limits, and to fix problems.
- To comply with the law and protect the rights and safety of our users and MByAy!.
We do not sell your personal information, we do not share it for targeted advertising, and we do not use your information to make decisions about you that have legal or similarly significant effects. AI suggestions are guidance only.
4. AI features
Career pathways, gap analyses, and portfolio feedback are created using Claude, an AI model made by Anthropic. When you use one of these features, our server sends Anthropic the information needed for that feature. That may include your profile (including accessibility needs, if you entered them), skills, and portfolio descriptions, or a job posting you paste in. We do not send your email address or password.
Anthropic processes this information to generate your results and handles it under its commercial terms and privacy policy. AI results can be incomplete or wrong. Salary and job-demand figures are estimates, and no result guarantees admission, employment, or earnings.
5. Who we share it with
We share information only with the service providers that help us run MByAy!, and only as needed for them to do that work:
- Supabase: stores accounts, planner data, and uploaded files, sends account emails, and runs our server functions.
- Anthropic: provides the AI that powers pathways, gap analyses, and feedback (see section 4).
- Stripe: processes Premium payments and manages subscriptions. Stripe collects your payment details directly under its own privacy policy.
- Scheduling and digital download services: if you book coaching or buy a guide, our scheduling and store providers receive the details you enter there, such as your name, email address, and appointment time, and Stripe or the store's payment processor handles your payment.
- Network Solutions and WordPress: host the website.
- U.S. Department of Education (College Scorecard, via api.data.gov): when you look up schools, your browser requests school lists directly from this government service. It receives the state you selected and your IP address, but no account information.
- Google Fonts and jsDelivr: deliver the site's fonts, map outlines, and code libraries. Like any web request, they receive your IP address and browser information.
- Email service provider: if we use one to send account emails, it receives your email address for that purpose.
We may also share information if required by law or legal process, to protect someone's safety, or as part of a merger, sale, or transfer of MByAy!, in which case this policy would continue to apply to your information.
We never share your profile, skills, or portfolio with schools or employers. If we offer a feature in the future that lets you choose to share your portfolio, it will be off unless you turn it on.
6. Cookies and browser storage
MByAy! does not use advertising cookies, and we never use visit information for advertising.
We do not use third-party tracking.
Visit statistics (Cloudflare Web Analytics): we count visits and page views to learn which pages are helpful. This service does not use cookies and does not track you across other websites.
Visit statistics (Google Analytics): we use Google Analytics to understand how visitors use the site, such as which pages are viewed and whether people sign up. It uses first-party cookies. We turn off Google's advertising features and cross-device tracking, and we don't send your name, email, or planner entries. If your browser sends a Global Privacy Control or Do Not Track signal, Google Analytics doesn't load at all. You can also use Google's opt-out browser add-on.
We also store a small amount of information in your browser's local storage:
- Sign-in session: keeps you signed in to the career planner until you sign out.
- Accessibility options: remembers your choices for text size, color theme, contrast, font, and similar settings.
You can clear this information at any time in your browser settings. If you do, you'll be signed out and your accessibility options will reset. Because we don't sell or share information for advertising, there is nothing to opt out of for "Do Not Track" or Global Privacy Control signals, but we honor them as a request not to sell or share.
7. How long we keep it
- Account and planner data: until you delete it or delete your account. Deleting your account removes your profile, skills, portfolio, uploaded files, and results.
- Contact messages: as long as needed to respond and follow up, and generally no longer than two years.
- Billing records: Stripe keeps payment records as required for tax and accounting laws.
- Backups and logs: may keep copies for a short, limited time before they are automatically overwritten.
8. Security
We protect your information with encrypted connections (HTTPS), hashed passwords, database rules that let each person see only their own information, private file storage, and secret keys that are kept on our servers and never placed in the website itself. No method of storing or sending information is completely secure, so we can't guarantee absolute security. If we learn of a breach affecting your information, we will notify you as required by law.
9. Your choices and rights
- See and edit: view and change your profile, skills, and portfolio at any time in the career planner.
- Delete: delete individual items, or delete your whole account from the Profile step of the career planner. This also cancels any Premium subscription.
- Get a copy: contact us to request a copy of your information.
- Billing: manage or cancel Premium any time from Plans and billing in the career planner.
- Choose what to share: optional fields, such as accessibility needs and other limits, can be left blank.
Depending on where you live, you may have additional rights under state privacy laws, such as the right to know what we collect, to correct or delete it, to get a copy, and to opt out of sales or targeted advertising (we don't do either). To make a request, contact us using the information below. We'll verify your request by confirming it from the email address on your account, respond within the time required by law, and won't treat you differently for using your rights. You may use an authorized agent, and if we deny a request, you may contact us to appeal.
10. Children and teens
MByAy! is not intended for children under 13, and we do not knowingly collect personal information from them. Accounts require confirming you are 13 or older. If you believe a child under 13 has given us information, contact us and we will delete it. Teens are encouraged to explore the site with a parent, guardian, or school counselor.
11. Schools and student records
MByAy! is not a school and does not receive student education records from schools. If we partner with a school or program in the future, information received from that partner will be handled under a written agreement and applicable laws, including the Family Educational Rights and Privacy Act (FERPA).
12. Other websites
MByAy! links to schools, scholarship providers, government agencies, and other websites. Those sites have their own privacy policies, and we aren't responsible for how they handle your information.
13. Changes to this policy
We may update this policy as MByAy! grows. We'll change the "Last updated" date above, and if the changes are significant, we'll let account holders know by email or a notice on the site before they take effect.
14. Contact us
Questions, requests, or concerns about your privacy:
MByAy!
Attn: Privacy, Laura Billingsley-Green
Email: info@mbyay.com
™