What We Collect

When you submit a review, we collect:

• Your email address — used only to confirm you're a real person. Not stored in connection with your published review if you post anonymously.
• Your student ID image (if you upload one) — stored securely and used only for verification. It is never shown publicly or shared with the school.
• Your review content — including the rating, written text, and tags you selected. This is the only information that may become publicly visible.
• Basic device/browser info — like your IP address and browser type, used solely to detect spam or abuse patterns.

What We Don't Collect

• We do not require you to create an account or log in.
• We do not track you across other websites.
• We do not use cookies for advertising.
• We do not collect your location beyond what you voluntarily share in your review.

---

How We Use Your Data

Your data is used for one purpose: verifying that each review comes from a real student, and preventing the same person from submitting multiple reviews for the same school. That's it.

We do not use your data for marketing, analytics profiling, or any commercial purpose. We do not run ads, so there is no ad targeting.

Who Can See Your Review

If you post anonymously, the public sees only your review text, rating, and tags — no name, no email, no school details from your ID. If you choose to post with your name, only the name you provide is shown.

School administrators cannot see who wrote a review. There is no mechanism on Saccho for a school to request reviewer identity.

Data Retention

Verification documents (student ID images) are deleted from our servers within 30 days of the review being approved or rejected. Email addresses used for verification are stored for 12 months solely to enforce the one-review-per-school policy, then deleted.

Your Rights

• You can request deletion of any review you submitted at any time by contacting us.
• You can request a copy of what data we hold about you.
• You can request that your verification data be deleted (note: this may remove the ability to verify your review).

To exercise any of these rights, contact us at privacy@saccho.com.

Changes to This Policy

If we make significant changes to this policy, we will display a notice on the Saccho homepage for at least 30 days before the change takes effect.