Privacy Policy

Last Updated: September 10, 2025

Iron Corp US Inc. (“Iron Corp”, “we”, “us”, “our”) is committed to protecting the privacy of the Site users. We want you to understand how we protect your personal information when we provide you with your results from customized searches for scholarships, college admissions and jobs. We will tell you what types of personal information that we collect, what may happen to that information, and your rights regarding your personal information.

Scope of This Privacy Policy

This privacy policy (“Privacy Policy“) applies to information we collect or use on the website operated by Iron Corp, Finaid.org (the “Site”).

Types of Information We Collect

Information We Collect Directly from You:

We collect information from you when you choose to provide it to us on the Site. This includes:

• Registration information, such as your name, date of birth, e-mail address, street address, phone number, gender, citizenship status, ethnicity, military status, educational history, and your username and password;
• Optional categories of information, if you choose to provide them, including career objectives, health information, hobbies, and other personal information, which we use to maximize the effectiveness of your scholarship college admissions and job searches on the Site; and
• Additional optional information for participation in surveys or contests, which is completely voluntary on your part, and you have the choice about whether to disclose the information necessary to participate in such events.

Information Automatically Collected From You By Iron Corp:

We also gather certain information automatically when you visit the Site. This information is passively collected, and Iron Corp uses it for internal purposes, including, but not limited to, testing, improving a user’s experience and disclosures to advertisers and content partners. Iron Corp only discloses aggregate passive information to advertisers and content partners, including unique visits to the Site and impression data. Passive information alone does not identify you to Iron Corp by name.

This information may include, without limitation, the following:

• Internet protocol (IP) address;
• Browser type and configuration;
• Device ID; and
• Your activity, including where you go on the Site, how you interact with any specific part of the Site and how long you stay on any specific part of the Site.

Collection of Information from Children

The Site is not intended for, nor do we knowingly collect information from, children under the age of 16. Iron Corp may collect information from children who are 16 if they are looking for information on scholarships or jobs.

How We Use Information

We use the information we collect to provide the services, respond to you, for marketing purposes, improve the Site and foster a positive user experience.

By registering with Iron Corp, managing your profile, or opting in when presented with choices, you have consented for us to use your information in the following ways:

To Provide You With Our Services, Which Includes:

• Creating an Iron Corp Site account for you;
• Helping you to search for scholarships, colleges and jobs;
• Enabling you to apply for scholarships and jobs; and
• Assisting you with contacting us and responding to you.

For Marketing, Which Includes:

• Providing personalized, targeted or location-based content, services and advertising from third parties on both the Site and on other websites with which we have a business relationship;
• Informing you of other products or services available from Iron Corp or our business partners;
• Sending you e-mails regarding updates to the Site, free informational newsletters, and notices relating to topics that may be of special interest to you, including financial aid, admissions tips, job opportunities and job advice; and
• Conducting surveys, promotions and contests and to publish the results thereof.

To Improve Our Services, Which Includes:

• Conducting analytics and generating internal reports about the use of the Site;
• Tracking which scholarships and jobs you search for, view, and apply to;
• Preventing and investigating malicious or fraudulent activity; and
• Enhancing your overall experience on the Site.

For Automated Decision Making: Information you supply will be used to help determine which scholarships you may be eligible for and to narrow the total number of scholarships in the Site’s database to those relevant to you.

How We Share Information

Information Shared with Third Party Service Providers

From time to time, Iron Corp may decide to use third parties to perform specific services, such as sending newsletters to the Site’s users. If Iron Corp engages a service provider, then some personal information may be shared with the service provider, but only to the extent and purpose necessary for the service provider to provide services on Iron Corp’s behalf.

Iron Corp uses third party service providers for the following types of tasks:

• Sales and marketing assistance;
• Analytics;
• Data visualizations;
• Customer service;
• Development and improvement of products and services; and
• System monitoring.

Sale of Information

Iron Corp will not knowingly sell, share, rent or otherwise transfer your information other than in accordance with the terms set forth in this Privacy Policy.

Iron Corp is able to offer its free services, in part, based on the willingness of the Site users to be contacted by colleges or our marketing partners. By agreeing, you acknowledge and agree that the information you supply may be sold to colleges and leading companies. In return, you’ll receive free information on college financing and admissions, offers and promotions designed for students, job opportunities and more.

If you grant your permission to allow third parties to contact you, personal information about you, such as your name, gender, age, zip code, citizenship, educational history and other information collected during your visit to the Site, may be shared with colleges, universities, potential employers, recruiters/headhunters, data aggregators, marketers and other organizations. You may opt out of the sale of your data when you are first prompted, or by sending a request to legal@theironcorp.com.

Our use of tracking technologies may be considered a “sale” under California law. You can opt out of being tracked by these third parties by clicking the “Your Privacy Choices” link at the bottom of the Site and selecting your preferences, or by broadcasting the global privacy control signal. Read more about the use of tracking technologies in the Cookies and Online Advertising Section below.

Categories of Personal Information Sold in the Last twelve Months:

• Internet or other electronic network activity (e.g. “cookies” or other tracking tags); and
• Identifiers (e.g. name, mailing address, e-mail address, phone number)

Categories of Third Parties To Whom Information was Sold in the Last 12 Months:

• Advertising networks; and
• Merchant partners.

Information Shared with Business Partners

Regardless of your decision regarding the sharing of your personal information, Iron Corp may share broad aggregate demographic data and related usage information with Iron Corp’s business partners. When your personal information has been aggregated, it can no longer be attributed to a specific individual, meaning it is data that does not contain individual-level information that can be tied back to a specific individual.

Information Shared Per Legal Requirement

While Iron Corp strives to protect its users’ personal information, Iron Corp discloses personal information to third parties if legally required to do so, if a governmental entity requests Iron Corp to do so or if Iron Corp believes in good faith that such action is necessary to: (a) conform to legal requirements or comply with legal processes; (b) protect the rights or property of Iron Corp or affiliated companies; (c) prevent a crime or protect national security; or (d) protect the personal safety of users or the public.

Sharing of Information in the Event of a Business Change

Iron Corp may disclose and transfer personal information to a third party who acquires any or all of Iron Corp’s business units, whether such acquisition is by way of merger, consolidation or purchase of all or a substantial portion of Iron Corp’s assets or shares. In addition, in the event that Iron Corp becomes the subject of an insolvency proceeding, whether voluntary or involuntary, Iron Corp or its liquidator, administrator, receiver, or administrative receiver may sell, license or otherwise dispose of such information in a transaction approved by the court. You will be notified of the sale of all or a substantial portion of Iron Corp’s business to a third party by e-mail or through a prominent notice posted on the Site.

Cookies and Online Advertising

Cookies: Iron Corp and its partners use cookies on the Site to analyze trends, administer the Site, track user movements around the website, gather demographic information about the Site’s userbase, and choose which ads to display to users.

Iron Corp uses both session ID cookies and persistent cookies. A session ID cookie expires when you close your browser. A persistent cookie remains on your hard drive for an extended period of time. You can remove persistent cookies through your web browser’s settings.

We use the following specific types of cookies:

• Security: We use these cookies to secure your account.
• Preference: We use these cookies to store your preferences like language choice and display of scholarship and job search results.
• Analytics: We use these cookies to track traffic patterns so we can identify popular content and potential problems.
• Features: We use these cookies to track which scholarships that you search for, view, and apply to so we can show you more scholarships like those. We also use these cookies to split some users into test groups to test new features.
• Advertising: We use these cookies to collect information about you in order to show you advertising on the Site and other third party websites.

Iron Corp also allows other companies to display advertisements to you while you are using the Site. When this happens, these companies can view, edit or set their own cookies, just as if you had requested a web page from their site. The cookies placed by these third parties could remain on your computer after you leave the Site for up to twenty years unless you choose to delete them.

Pixels: Iron Corp uses pixels, including for example, to count users who have visited specific pages of the Site and to allow Iron Corp to place a cookie on a user’s computer. Iron Corp uses data collected from pixels to compile aggregate statistics about usage of the Site.

Advertising Opt-Out: The Site users can opt out of being contacted by advertising partners. If you would prefer to not receive personalized ads based on your browser or device usage, you may generally express your opt-out preference to no longer receive tailored advertisements. Please note that you will continue to see advertisements, but they will no longer be tailored to your interests.

To opt out of interest-based advertising by participating companies in the following consumer choice mechanisms, please visit:

• Digital Advertising Alliance (DAA)’s self-regulatory opt-out page (https://optout.aboutads.info) and mobile application-based “AppChoices” download page (https://youradchoices.com/appchoices)
• Network Advertising Initiative (NAI)’s self-regulatory opt-out page (https://optout.networkadvertising.org).

To set an opt-out preference for a mobile device identifier (such as Apple’s IDFA or Android’s GAID), visit the device manufacturer’s current choice instructions page, or read more about sending signals to limit ad tracking for your operating system here: https://www.networkadvertising.org/mobile-choices.

Please note that these settings must be changed on each device (including each web browser on each device) for which you wish to opt out, and if you clear your cookies or if you use a different browser or device, you will need to renew your opt-out preferences.

Social Media Widgets

The Site includes social media features, such as the AddToAny button and the Facebook Comments plugin. Your interactions with these features are governed by the privacy policy of the company providing the specific feature.

Your Privacy Rights

Right to Know: You have the right to know whether Iron Corp has collected personal information from you. You may submit up to two access requests within a twelve-month period directing Iron Corp to disclose any of the following to you:

• The categories or specific pieces of personal information that Iron Corp has collected from you;
• The categories of sources from which Iron Corp has collected your information;
• The reasons why Iron Corp collects or sells personal information; and
• The categories of third parties with which Iron Corp shares personal information.

Right to Delete: You have the right to request that Iron Corp delete any of your personal information that Iron Corp has collected from you with certain exceptions. Iron Corp may refuse your deletion request if permitted by law. If we deny your deletion request, we will tell you why the request was denied. Additionally, if Iron Corp can verify your request and determine that no exception to deletion applies, we will direct any of the service providers that have received your personal data to delete your personal information from their records as well.

Right to Correct: You have the right to request amendments to your personal data if it is inaccurate or outdated in any way.

Right to Opt Out of Sharing of Your Data: You have the right to opt out of Iron Corp’s sharing of your personal information to third parties.

Right to Opt Out of Sale of Your Data: You have the right to opt out of Iron Corp’s sale, as defined by the California Consumer Privacy Act, of your personal information to third parties for marketing or advertising purposes.

Right to Non-Discrimination: Iron Corp will not discriminate against you for exercising your privacy rights.

Submitting a Request to Exercise Your Rights: You or your authorized agent may submit a request to access or delete your personal information or opt out of Iron Corp’s sale of your personal information by contacting us at legal@theironcorp.com. Iron Corp will verify your request using information associated with your account.

How You Can Access, Update or Delete Information: You can access or update your personal information at any time by logging into the Site and selecting “My Profile.” You may delete your account by selecting “Deactivate My Account” on the “Account Settings” page. Users who are experiencing problems with accessing, updating or deleting their information should contact us at legal@theironcorp.com, and we will try to resolve your problems and respond within a reasonable time.

Security

The security of your personal information is important to us. Iron Corp has security measures in place to help protect against the loss, misuse or unauthorized alteration of the information under our control. You are the only user authorized to update your profile, unless you give your password information to another party. Ultimately, you are responsible for keeping your username and password secret and secure.

Iron Corp helps protect personal information by using both online and offline security methods, including firewalls, passwords, restricted electronic access to your personal information, and restricted physical access to where your personal information is stored. Our staff members are trained to comply with our security procedures, and our security procedures are regularly reviewed and revised, if necessary, by the Legal Department at Iron Corp.

Data Retention

Iron Corp maintains all personal information for five years from last login and deletes all information after that period.

Acceptance of Terms/Changes to Privacy Policy

Your use of the Site indicates your acceptance of the terms of this Privacy Policy.

Iron Corp may update this Privacy Policy to reflect changes in its information practices. If we make material changes, we will notify you by e-mail (sent to the e-mail address specified in your account) where required, or by means of a notice on this Site prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices.

Contact Information

If, at any time, you have questions or concerns regarding this Privacy Policy, or if you are seeking to exercise any of your privacy rights, please contact us online at  legal@theironcorp.com or offline at: