This Privacy Policy explains how Shiloh App LLC ("Shiloh," "we," "us," or "our") collects, uses, stores, and protects information in connection with the Shiloh platform at getshiloh.com (the "Service"). We collect only what is necessary to provide the Service.
This Privacy Policy applies to all visitors, students, and any educational institution that engages Shiloh on behalf of its students. Where Shiloh operates under a separate Data Processing Agreement (DPA) with an institution, the DPA governs in the event of any conflict with this Policy as it relates to that institution's students.
Please read this Policy alongside our Terms of Service at getshiloh.com/terms.
Account Information
When you sign in using Google OAuth or Microsoft OAuth, we receive your name and email address from the respective provider. We also store your account creation date and last login timestamp. We never see, handle, or store your password.
During your first login, Shiloh asks which school you attend. Your response is stored for internal institutional adoption tracking (for example, identifying Lone Star Community College students) and is never sold or shared with third parties.
Information You Provide or Generate
Payment Information
If you subscribe to Shiloh Premium, payment is processed by Stripe. Shiloh never sees or stores your card number or full payment details. We store only your Stripe customer ID and current subscription status (active, trialing, cancelled) to manage your access to premium features. Stripe's privacy policy governs how Stripe handles your payment data.
If you access Shiloh through an institutional license, your college pays a per-student fee (which may be recovered through a student technology fee). You are not billed directly by Shiloh.
Automatically Collected Information
Our servers log standard technical data including your IP address, browser type, pages visited within the Service, and timestamps, used solely to operate, secure, and improve the Service. We collect aggregate internal usage metrics (weekly active users, uploads, deadlines created) for an admin-only dashboard. This data is never sold or shared.
Cookies
Shiloh uses a single, strictly necessary session cookie to keep you signed in. We do not use cookies for advertising, behavioral tracking, or third-party analytics.
We do not use your information for advertising. We do not sell your information to any third party.
| Sub-processor | Function | Data Involved |
|---|---|---|
| Anthropic (Claude API) | AI syllabus parsing and extraction | Syllabus text or image content — the only third party that sees raw uploaded syllabus content |
| Stripe | Payment processing and subscription management | Payment details handled entirely by Stripe; Shiloh receives only customer ID and subscription status |
| SendGrid | Reminder and Daily Digest emails | Your email address and deadline/grade content included in those emails |
| Railway | Cloud hosting and PostgreSQL database | All stored account and usage data |
| Google / Microsoft | OAuth authentication only | Your name and email address |
We do not share your information with advertising networks or data brokers. We will notify you before adding any new sub-processor.
Shiloh stores user-generated academic data including class names, grading structures, deadlines, and syllabus files. While Shiloh is not itself an educational institution, we handle this data consistently with the Family Educational Rights and Privacy Act (FERPA).
When Shiloh enters a formal agreement with an institution to provide the Service to that institution's students, Shiloh acts as a "School Official" with a legitimate educational interest under FERPA's school official exception (34 CFR § 99.31(a)(1)). In that context, Shiloh's use of student data is limited to the purposes authorized under the applicable Data Processing Agreement. Institutions interested in a formal DPA may contact us at hello@getshiloh.com.
Some students who use Shiloh through a partner institution's dual-credit program may be under 18. For these users, we collect and use information only as described in this Policy, solely to provide the Service in connection with their coursework. A parent or legal guardian of a user under 18 may contact us at hello@getshiloh.com to review, correct, or request deletion of that user's information. We do not use any user's information for targeted advertising or behavioral marketing, regardless of age.
Shiloh is intended for college, university, and dual-credit students. You must be at least 13 years old to use the Service. We do not knowingly collect information from children under 13. If you believe a child under 13 has created an account, contact us at hello@getshiloh.com and we will delete the data promptly.
To exercise any of these rights, contact us at hello@getshiloh.com.
No method of storage or transmission is 100% secure. If you have concerns, contact us at hello@getshiloh.com.
We may update this Policy from time to time. For material changes, we will notify you via email at least 30 days before the changes take effect. Continued use of the Service after changes take effect constitutes acceptance of the updated Policy.
Shiloh App LLC
Email: hello@getshiloh.com
Website: getshiloh.com