Privacy Policy

1. Overview

Professor Scraper is operated by Hammer Creative LLC. This Privacy Policy explains how we collect, use, and share information when you create an account and use the Service. By using the Service you agree to the practices described here.

2. Information We Collect

We collect the following:

• Account information. Your name, email address, and the enterprise account you belong to, created when you register or are invited to a team.
• Faculty and university data. Names, titles, departments, course and enrollment information, and contact details for university faculty, compiled from publicly available sources and served to authorized enterprise accounts.
• Email campaign data. When you build a campaign, we store the recipients you select, the message content and templates you create, and per-recipient send, delivery, reply, and bounce status.
• Connected mailbox data. If you connect a Microsoft Outlook mailbox, we store the mailbox address and an encrypted authorization token used to send and read mail on your behalf (see Section 4).
• Billing information. Subscription tier and payment status. Card payments are processed by our payment provider; we do not store full card numbers.
• Usage information. Basic logs and analytics about how the Service is used, for security and product improvement.

3. How We Use Information

We use the information to operate and secure the Service: to authenticate you, provide access to unlocked faculty data, send and track the email campaigns you create, process billing, provide support, and improve the product. We do not sell your personal information.

4. Your Connected Outlook Mailbox

Email campaigns are sent from a Microsoft Outlook mailbox that you explicitly connect. When you connect a mailbox, you grant the Service permission, through Microsoft's OAuth consent flow, to send mail as you and to read and write mail in your mailbox. We use these permissions solely to:

• send the campaign messages you have created and approved;
• read replies and bounce notifications to those messages so we can show you responses and outcomes; and
• create in-thread replies that you choose to send.

The authorization (refresh) token that enables this is encrypted at rest. We do not read, index, or use mail unrelated to your campaigns, and we do not sell or share mailbox contents. You can disconnect your mailbox at any time from your account settings, which revokes our stored token; you may also revoke access from your Microsoft account at any time.

5. How We Share Information

We share information only with service providers that help us run the Service, and only as needed to provide it:

• Microsoft. To send and read campaign email through your connected mailbox via the Microsoft Graph API.
• Payment processing. To handle subscriptions and billing.
• Cloud hosting and infrastructure. To host the application, database, and supporting services.

We may also disclose information if required by law or to protect the rights, safety, or security of our users or the Service. We do not sell personal information to third parties.

6. Data Retention

We retain account, campaign, and related data for as long as your account is active or as needed to provide the Service. Connected mailbox tokens are retained until you disconnect the mailbox or close your account. We may retain certain records as required for legal, accounting, or security purposes.

7. Security

We use industry-standard measures to protect your information, including encryption of sensitive credentials at rest and access controls that restrict data to authorized users within your enterprise. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Choices and Rights

You may access and update your account information, disconnect a connected mailbox, and request deletion of your account and associated data by contacting us. Depending on your location, you may have additional rights over your personal information under applicable law.

9. Faculty and Third-Party Data

The faculty information served through the Service is gathered from publicly available sources. If you are a faculty member and would like your information reviewed or removed, please contact us at the address below and we will respond promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version here and update the date above. Material changes will be communicated to registered users by email.

11. Contact

If you have questions about this Privacy Policy or your data, please contact us at support@profscraper.com.