Privacy

UndergradVC runs this website. The site is hosted on Vercel. Accounts, the database, and uploaded files are stored in Supabase.

If you create an account, you sign up with a .edu email and a password. We store that email, the name you type, and whether you signed up as a student founder or as program faculty. Faculty signup can also include a job title and a school.

Sign-in is handled by Supabase. Supabase stores the password and sends the confirmation email. We keep a profile row tied to that account. A sign-in cookie keeps you logged in on this browser.

Accounts require a .edu address. We check that the address ends in .edu, and we ask you to confirm the inbox before you can publish a startup or open a school dashboard.

School and program pages are written from public pages on official school websites. Each listing links to those sources. We do not receive education records, class rosters, grades, or application files from schools.

Emails, Stripe ids, and billing details are never shown publicly. Someone browsing the site, or using the public database key, cannot read them.

We store the fields you fill in: name, headline, short bio, school, LinkedIn, GitHub, a portfolio link, a photo, and whether you are open to opportunities.

A profile that has a public web address is visible to anyone. The page shows your name, headline, bio, school, links, photo, and that you are open to opportunities if you turned that on. It also lists startups you have published. The page does not print your email. Only the account owner and UndergradVC admins can read the stored profile row.

If you use the founder studio, you can also add a graduation year, major, campus role, skills, and what you are looking for. You choose who can see the profile:

• Only your school. Classmates who signed in with a confirmed .edu email we matched to that school can open it. Matching uses the domain of the email and the school’s public website. We do not get a roster from the school.
• Public. Anyone on the web can open it.

A profile that was already public stays public until you change that setting. A new studio profile starts as school-only.

If you follow another founder, we store that pair. Follower counts show on the profile, and the follow list can be read without an account. If you save programs to compare, that list stays on your account and is not published.

We store the startup name, description, school, program if you pick one, your name, the .edu email on the account, any funding amount you enter, links, and files you upload (images or PDFs).

A published listing appears in the public directory. The page shows the startup and your name. The stored listing includes the .edu email on the account. That email is not on the public page, and the public database key cannot read it. Uploaded images and PDFs sit in a public file bucket, so anyone with the file link can open them. Profile photos work the same way.

If you can choose visibility for a campus startup, public means anyone, and your school means classmates at that school. Drafts stay on your account until you publish.

If you apply to a program, we store the startup you attach and the note you write. The director for that school can read the application. You can apply only to programs at the school matched from your .edu email.

If you add teammates, we store their names and any emails you type. Those emails are not shown on the public startup page. If you report a profile, startup, update, or application, we store your account and the reason so we can review it.

We store your name, email, role or title, school, the programs you say you manage, and any note you write. The claim form’s Campus Pulse checkbox starts unchecked. Check it only if you want the weekly email.

We review faculty signups and claims before a school dashboard opens. That review is a person on our side reading the .edu email and the claim. The school does not send us a confirmation from its records system.

A claimed school is tied to the account that claimed it. Public pages can show that a school is featured. They do not show who claimed it, a Stripe customer id, or a card number.

If you publish events, photos, updates, recruiting notes, or winner names from a school dashboard, published items appear on the public school and program pages. Drafts stay on the account until you publish. Photos are stored with our other uploads.

When email sending is turned on, we send mail through Resend:

• The weekly Campus Pulse digest, if you opt in. The claim-form box starts unchecked. A directory signup is sent only when you submit that form.
• A note when a startup you saved for a school we had not listed yet goes live.
• Messages we send to schools.

Account confirmation mail is sent by Supabase. This project can be set up so Supabase delivers that mail through Resend.

If you subscribe to Campus Pulse, we store the email, whether you signed up as a reader or a director, an optional school, and an unsubscribe token. Buying the $29 export also adds the checkout email to that list. Each digest has an unsubscribe link. Unsubscribing stops the mail and keeps the address on file, marked so we do not keep sending.

If we email a school, or someone replies, we keep the addresses, subject, and message so the thread stays in one place. Replies can arrive through Resend or be pasted into our inbox by us. We also keep names and emails that schools publish on their own websites, so we can write to the office listed there. We do not buy contact lists.

If you join an event interest list, we store the name and email you type for that event. That form does not send tickets.

The paid products are a one-time $29 download of the program dataset and monthly sponsor spots at $99, $249, or $499. You pay on a Stripe checkout page. The card number is entered on Stripe’s site. We do not receive or store the full card number.

We store the email Stripe sends back, the amount, the product, and Stripe’s customer, payment, and subscription ids. We also keep Stripe’s event record so we can tell a paid checkout from a repeat notice. Those emails, Stripe ids, and other billing details stay off public pages. The public database key cannot read them. The public sponsor card shows the company name, message, and logo you provide. It does not show the card, the email, or a Stripe id.

Sponsor checkout can include a company name, website, short message, and logo. The logo is stored in a public file bucket. Checkout can also charge for a featured listing when a Stripe price is configured. The same Stripe rules apply.

After a paid export, this browser gets a cookie that keeps the download unlocked for one year. The cookie is a signed “paid” mark. It does not contain your name or card.

We use Vercel Analytics to count page views. It does not set a cookie, and we do not use it for ads. We do not use Vercel Speed Insights, advertising pixels, or any other analytics tool.

Cookies we do set: the Supabase sign-in cookie, and the one-year export cookie after you pay for the download.

We use these companies to run the site:

• Vercel hosts the website and counts page views.
• Supabase stores accounts, the database, and uploaded files.
• Stripe processes payments.
• Resend sends email, and can receive replies.

We do not sell personal information. We do not share it with advertisers.

Verified student notes are not sold and are not exported. Program managers and the public see the label Verified student. A name or email is not shown. Summaries appear only after five approved notes.

We keep account and listing information while the account or the published page exists. We do not run an automatic deletion schedule. A Campus Pulse address stays on file after you unsubscribe, marked so the mail stops. The export cookie expires after one year. Stripe and the other companies keep their own copies under their own terms.

Email jakob@undergradvc.com from the address on the account, and say what you want changed or removed. We will update or delete the account, profile, startup, claim, digest entry, or message we hold. If a public directory line was copied from a school’s own website and it is wrong, we will correct that too.

There is no delete button in the product. Email is how you ask.

UndergradVC is for college students and for people who work at a school. It is not directed at children under 13. We do not knowingly collect information from them. If you believe a child under 13 has an account, email us and we will delete it.

We do not receive education records from schools. We are not connected to a student information system. A school does not send us grades, class lists, or application files.

Student profiles, startup pages, and program applications on this site are posted by the students themselves. A director page is posted by the person who claimed it, after we review the request.

Program listings in the directory are compiled from public pages on official school websites. The source is linked on the page.

Browse programs