Privacy Policy

1. Who We Are

Bodhi, Inc. ("Bodhi", "we", "us") is a Delaware C-corporation operating a college-admissions counseling service at bodhiadmissions.com. This Privacy Policy explains what information we collect, how we use it, and the rights you have over it.

2. Information We Collect

We collect information in three ways:

Information you provide: name, email, phone, your child's academic records (GPA, SAT/ACT, transcripts, target schools, Common App credentials, essays), and any other documents you upload to your master file.
Information from your activity: session summaries, counselor notes, time-card activity, and notes the CEO records about your engagement.
Information collected automatically: page-visit logs (path, hashed IP, user agent, referrer) to improve the site; no third-party trackers; no advertising cookies.

3. How We Use Information

To deliver counseling services to your child.
To pair your child with the right counselor.
To help your counselor and the CEO maintain a complete record of progress.
To send invoices and engagement-related communications.
To improve our service operationally (aggregate metrics; never sold).

4. FERPA-Aligned Handling

While Bodhi is a private service and not a school subject to FERPA directly, we handle student educational records consistent with FERPA principles. We do not disclose student records to third parties without written consent from the parent (or the student, if 18+), except as required by law.

5. Common App & Account Credentials

If you choose to store Common App or other application-system credentials in your master file, those credentials are accessed only by your assigned counselor and the CEO, and only for the purpose of supporting your child's applications. We are migrating to encrypted-at-rest storage for credentials; in the interim, only enter credentials you are comfortable storing in standard cloud-database form. Contact the CEO if you'd prefer to share credentials by another channel.

6. Sharing & Disclosure

We do not sell or rent personal information. We share information only:

With your assigned Bodhi counselor (an independent 1099 contractor under confidentiality obligations).
With the Bodhi CEO and any administrative staff strictly as needed to operate the engagement.
With service providers (e.g. cloud hosting, email) under data-processing terms.
If required by law (court order, lawful subpoena).

7. Data Retention

We retain engagement records for the duration of your engagement plus seven years thereafter for legal, tax, and reference purposes. You may request earlier deletion of specific records by emailing the CEO; we will comply unless retention is legally required.

8. Your Rights

You can: (a) access the records we hold about your child via your parent portal; (b) request correction of inaccurate information; (c) request export of your data; (d) request deletion (subject to legal retention requirements). Email privacy@bodhiadmissions.com.

9. Children Under 13

Bodhi services are intended for high-school students (typically 14–18). We do not knowingly collect information from children under 13. If you believe we have done so, contact us immediately and we will delete the record.

10. California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete, and the right to opt out of any "sale" of personal information. We do not sell personal information. To exercise any CCPA right, email privacy@bodhiadmissions.com.

11. Security

We use TLS for all traffic, hashed passwords, server-side session tokens, and access controls on our admin portal. No system is impervious; we will notify affected families promptly if we discover a security incident.

12. Changes

We will update this Privacy Policy as practices evolve and notify active engagements of material changes by email at least 30 days in advance.

13. Contact

Privacy questions: privacy@bodhiadmissions.com.