Privacy Policy

Last updated: July 20, 2025

At Abroaducate, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our academic application platform.

1. Information We Collect

Personal Information

When you create an account or use our services, we may collect:

Name, email address, and contact information
Academic information (GPA, test scores, transcripts)
Educational background and career goals
Documents you create or upload (SOPs, cover letters, personal statements)
University preferences and application data
Payment information (processed securely through Stripe)

Automatically Collected Information

Device information (IP address, browser type, operating system)
Usage data (pages visited, features used, time spent)
Cookies and similar tracking technologies
Log data and analytics information

2. How We Use Your Information

We use the information we collect to:

Provide Services: Generate documents, match universities, provide recommendations
AI-Powered Features: Improve document quality, provide personalized feedback, analyze academic profiles
Communication: Send scholarship alerts, application reminders, and platform updates
Account Management: Maintain your account, process payments, provide customer support
Platform Improvement: Analyze usage patterns, develop new features, enhance user experience
Legal Compliance: Comply with applicable laws and protect against fraud

3. AI Processing and Document Handling

🤖 AI Processing

We use third-party AI services (including OpenAI) to power our document generation, review, and enhancement features. Your documents are processed securely and are not used to train AI models.

Documents are encrypted during transmission and processing
AI processing is used solely for providing services to you
We maintain strict data handling agreements with AI service providers
You retain full ownership of all documents you create

4. Information Sharing and Disclosure

We do not sell your personal information. We may share information in these limited circumstances:

Service Providers

Third-party vendors who help us provide our services (payment processing, email delivery, AI processing, analytics)

Legal Requirements

When required by law, court order, or government request

Business Transfers

In connection with mergers, acquisitions, or sale of assets (with user notification)

Consent

With your explicit consent for specific purposes

5. Data Security

We implement comprehensive security measures to protect your information:

Industry-standard encryption for data in transit and at rest
Secure authentication and access controls
Regular security audits and vulnerability assessments
SOC 2 compliant infrastructure (Supabase)
PCI DSS compliant payment processing (Stripe)
Regular security training for our team

6. Your Privacy Rights

Access & Portability

Request copies of your personal data and export your documents

Correction

Update or correct inaccurate personal information

Deletion

Request deletion of your account and associated data

Opt-Out

Unsubscribe from marketing communications at any time

Restrict Processing

Limit how we use your information in certain circumstances

Object

Object to processing for marketing or legitimate interests

How to Exercise Your Rights: Contact us at privacy@abroaducate.com or use the account settings in your dashboard.

7. Data Retention

Account Data: Retained while your account is active and for 30 days after deletion

Documents: Retained according to your plan's version history limits

Payment Records: Retained for 7 years for tax and legal compliance

Analytics Data: Anonymized and retained for platform improvement

Email Communications: Retained until you unsubscribe or delete your account

8. International Data Transfers

Abroaducate operates globally. Your information may be transferred to and processed in countries outside your residence, including the United States. We ensure appropriate safeguards are in place through:

Standard Contractual Clauses (SCCs) with service providers
Adequacy decisions by relevant data protection authorities
Certification schemes and codes of conduct

9. Cookies and Tracking

We use cookies and similar technologies for:

Essential: Authentication, security, basic functionality
Analytics: Understanding usage patterns and improving our platform
Preferences: Remembering your settings and customizations
Marketing: Providing relevant content and measuring campaign effectiveness

You can control cookies through your browser settings. Note that disabling certain cookies may impact platform functionality.

10. Children's Privacy

Our services are intended for users 16 years and older. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. When we make material changes, we will:

Update the "Last updated" date at the top of this policy
Notify you via email if you have an account
Post a notice on our platform
For significant changes, obtain your consent where required by law

12. Contact Us

Questions about this Privacy Policy?

Email: privacy@abroaducate.com

Support: support@abroaducate.com

Response Time: We aim to respond within 72 hours

Data Protection Officer: For EU-related privacy inquiries, you may contact our designated representative at dpo@abroaducate.com