Privacy Policy

Last Updated: May 3, 2026

Raise Social, Inc. ("Raise", "we", "us", or "our") operates the openCampus campus assistant messaging service (the "Service"). This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use the Service, including through SMS/MMS messaging and our website located at https://opencampus.lol (the "Website"). Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

Personal information you may provide through the Service includes:

• Phone number (required for SMS/MMS messaging)
• Name and university affiliation (if provided during verification)
• Chat data. Messages, questions, and prompts you send to the Service ("Inputs"), including any personal details you voluntarily include in your queries (e.g., dietary restrictions, class schedule, location preferences).
• Communications data. Our exchanges with you when you contact us through the Service or otherwise.

We do not collect sensitive personal data such as racial origin, religious beliefs, political views, or sexual orientation.

1.2 Information Collected Automatically

We, our service providers, and our business partners may automatically log information about you and your device, including:

• Device data. Operating system type and version, browser type, screen resolution, device type, IP address, language settings, and general location information such as city or state.
• Online activity data. Pages viewed, time spent on pages, navigation paths, access times, and duration of access.

2. Tracking Technologies

We may use the following technologies:

• Cookies. Small text files stored on your device that allow us to remember preferences and understand usage patterns.
• Local storage. Browser-based storage technologies that can store data locally on your device.
• Analytics tools. We may use analytics providers such as Vercel Analytics to understand how users interact with the Service.

3. How We Use Your Information

We may use your personal information for the following purposes:

• Service delivery. To provide the Service, process your queries, generate responses about campus resources (dining, gym, study spaces, library, events), and deliver relevant information.
• Service improvement. To analyze usage patterns, improve response quality, and develop new capabilities.
• Personalization. To tailor responses and event recommendations to your context and preferences.
• Communications. To respond to your feedback, questions, or support requests.
• Compliance and protection. To comply with applicable laws, protect rights, privacy, safety, or property, and prevent fraudulent or harmful activity.

4. How We Share Your Information

We may share your information with the following parties:

• AI service providers. We share your Inputs with Anthropic (Claude API) to generate Responses. These providers process your data according to their own privacy policies.
• Messaging providers. We use third-party messaging services to deliver SMS/MMS messages to you.
• Hosting and infrastructure providers. Third parties that provide hosting, deployment, and infrastructure services (such as Vercel and Supabase).
• Legal requirements. Law enforcement, government authorities, and private parties as we believe necessary to comply with legal obligations or protect rights, privacy, safety, or property.
• Business transfers. In connection with actual or prospective business transactions, your information may be transferred to relevant third parties.

We do not sell your personal information. We do not share your data for interest-based advertising purposes.

5. Google User Data

If you choose to connect your Google Calendar to the Service, openCampus accesses certain data from your Google Account through Google's API. This section describes that access, how we use the data, and your control over it.

5.1 What We Access

When you connect your Google Calendar, you grant openCampus access to:

• Your primary email address (userinfo.email scope), used solely to confirm which Google Account you connected.
• Events on your primary calendar (calendar.events scope), used to read your upcoming events for the purpose of sending you reminders via iMessage, and to add events to your calendar when you explicitly ask us to.

We do not request access to any other Google service, including Gmail, Drive, Contacts, Photos, or Tasks. We do not access calendars other than your primary calendar.

5.2 How We Use Your Google Data

• Daily reminders. Each weekday morning, we read your primary calendar's events for that day and send you a summary via iMessage.
• Saving events to your calendar. When you ask openCampus to add a campus event to your calendar, we create a new calendar event on your primary calendar with that event's details.

openCampus's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.

5.3 What We Do Not Do With Your Google Data

• We do not sell or transfer your Google data to third parties for any purpose.
• We do not use your Google data to serve advertisements.
• We do not use your Google data to train artificial intelligence or machine learning models.
• We do not allow humans to read your Google data, except (i) with your explicit consent, (ii) where necessary for security purposes such as investigating abuse, (iii) to comply with applicable law, or (iv) where the data has been aggregated and anonymized for internal operations.

5.4 Storage and Retention

We do not store the contents of your calendar events on our servers. Each time we generate a daily reminder, we fetch the day's events fresh from Google and discard them after sending. The only Google-related data we persist is:

• Your refresh token, encrypted at rest with AES-256-GCM, used to authenticate subsequent requests to Google on your behalf.
• Your Google email address and account ID, used to identify your connection.
• An audit log of events openCampus added to your calendar (the calendar event ID and the timestamp of the addition), used to prevent duplicate additions of the same event.

When you disconnect your Google Calendar, we revoke the access token with Google and delete the encrypted refresh token from our database. The audit log of previously added events is preserved for security and accountability purposes only.

5.5 Revoking Access

You can disconnect your Google Calendar from openCampus at any time:

• Send "disconnect calendar" to openCampus via iMessage.
• Or, visit your Google Account connections page and remove openCampus.

Either method takes effect immediately. After disconnection, openCampus will not be able to read or write to your calendar.

6. Data Retention

We retain your information for as long as your Account is active or as needed to provide you the Service. When you delete your Account or unsubscribe, we will delete or anonymize your personal information within a reasonable timeframe, except where we are required to retain it by law.

7. Data Security

We employ technical and organizational safeguards designed to protect the personal information we process. However, no internet transmission or electronic storage method is completely secure, and we cannot guarantee absolute security.

8. Your Rights and Choices

• Opt out of messaging. Text "STOP" to any message you receive from the Service to unsubscribe at any time.
• Access and deletion. You may request access to, correction of, or deletion of your personal information by contacting us at help@opencampus.lol.
• Cookies. Most browsers let you remove or reject cookies. Disabling cookies may affect the Service's functionality.
• Do Not Track. We currently do not respond to "Do Not Track" signals.

8.1 California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. As noted above, we do not sell your personal information.

9. Children's Privacy

The Service is not intended for use by anyone under the age of eighteen (18). We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

10. Third-Party Links

The Service may contain links to third-party websites and services (such as Columbia University library systems, LibCal, and dining hall pages). These links are not an endorsement of, or representation that we are affiliated with, any third party. We do not control these services and are not responsible for their privacy practices.

11. International Data Transfer

We are based in the United States and use service providers that may operate in other countries. Your personal information may be transferred to the United States or other locations where privacy laws may differ from those in your jurisdiction.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this page. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Raise Social, Inc.
Email: help@opencampus.lol