Information We Collect
We are careful about the information we collect students. We only ask for information that is necessary to assist them finding, applying for and receiving scholarships. The information we collect is basic and non-sensitive. Here is a list of some of the information we collect:
- First and last name
- Year in school
- Grade Point Average (GPA)
- Contact information
- US citizenship status
- School attending
Who We Share the Information With
Nobody! We don't sell, share, rent, or show specific user information to anyone without the consent of our users.
How We Secure the Information
Even though we do not store sensitive information, we take security very seriously. We actively monitor the security of data on our website in three different areas. They cover where the data is stored, the ability of the code to prevent intrusion and the safety of the data as it moves through the internet.
Hardware (Server) security
All of the data is stored on Amazons Web Services in conjunction with Heroku's cloud application platform. Not only does this provide highly reliable services, but it is fast and easily scalable. They each maintain security with industry-recognized certifications and audits.
Software code vulnerability
Our team of senior developers have coded our application in Ruby on the Rails framework utilizing both inherent and proprietary security measures to prevent hacker intrusion. Our application has safeguards regarding session hijacking, Cross-Site Request Forgery (CSRF), redirection, injection, file uploads, admin security, mass assignment and user management.
Data transfer encryption
Any data being transferred between our system and users is encrypted over a secure 256-bit SSL connection. Our SSL certificate is issued by Starfield Technologies. This protects against unauthorized interception of data. It's the same level of data transfer security that your bank provides.