Privacy Policy

1. Information We Collect

When you create an account or use our services, we may collect:

• Name, email address, and contact information
• Academic information (GPA, test scores, degree level)
• Educational background, nationality, and career goals
• Documents you create or upload (SOPs, cover letters, personal statements)
• University preferences and application tracking data
• Payment information (processed securely through Stripe — we do not store card details)

We also automatically collect device information (IP address, browser type), usage data (pages visited, features used), and analytics data via PostHog.

2. How We Use Your Information

We use the information we collect to:

• Provide Services: Match programs and scholarships, generate documents, provide strategy tools
• AI-Powered Features: Improve document quality and provide personalized recommendations
• Communication: Send scholarship alerts, deadline reminders, and platform updates via Customer.io
• Account Management: Maintain your account, process credit purchases, provide support
• Platform Improvement: Analyze usage patterns and develop new features
• Legal Compliance: Comply with applicable laws and protect against fraud

3. AI Processing and Document Handling

• Documents are encrypted during transmission and processing
• AI processing is used solely for providing services to you
• We maintain strict data handling agreements with AI service providers
• You retain full ownership of all documents you create

4. Information Sharing and Disclosure

We do not sell your personal information. We may share information with third-party service providers who help us operate the platform: Supabase (database and auth), OpenAI (AI processing), Stripe (payments), Customer.io (email), PostHog (analytics), and Vercel (hosting).

We may also share information when required by law, court order, or government request, or in connection with a merger or acquisition (with user notification).

5. Data Security

We implement comprehensive security measures to protect your information:

• Industry-standard encryption for data in transit and at rest
• Secure authentication via Supabase (SOC 2 compliant infrastructure)
• Row Level Security (RLS) on all database tables
• PCI DSS compliant payment processing via Stripe
• Regular security reviews and access controls

6. Your Privacy Rights

You have the right to access, correct, or delete your personal data; export your documents; unsubscribe from marketing emails at any time; and object to processing for marketing purposes.

7. Data Retention

• Account Data: Retained while your account is active and for 30 days after deletion
• Documents: Retained until you delete them or close your account
• Payment Records: Retained for 7 years for tax and legal compliance
• Analytics Data: Anonymized and retained for platform improvement
• Email Communications: Retained until you unsubscribe or delete your account

8. International Data Transfers

Abroaducate operates globally. Your information may be transferred to and processed in countries outside your residence, including the United States. We ensure appropriate safeguards are in place through Standard Contractual Clauses (SCCs) and adequacy decisions by relevant data protection authorities.

9. Cookies and Tracking

We use cookies for authentication sessions, security, and basic functionality. We also use PostHog for analytics (anonymized where possible). You can control cookies through your browser settings — disabling essential cookies may impact platform functionality.

10. Children's Privacy

Our services are intended for users 16 years and older. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. When we make material changes, we will update the "Last updated" date, notify you via email if you have an account, and post a notice on our platform.

12. Contact Us

For EU-related privacy inquiries, you may contact our designated representative at the same email address.