Privacy Policy

Last updated: November 29, 2025

At UniXT, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our platform.

1. Information We Collect

1.1 Information You Provide

  • Account Information: Name, email address, password, phone number
  • Profile Information: Date of birth, nationality, gender, profile photo
  • Academic Information: Educational history, transcripts, test scores, GPA
  • Application Documents: Passport, resume, personal statements, recommendation letters
  • Communication Data: Messages sent through our platform, support inquiries

1.2 Information Collected Automatically

  • Device Information: IP address, browser type, operating system
  • Usage Data: Pages visited, time spent, features used
  • Cookies: See our Cookie Policy section below

1.3 Third-Party Authentication

When you sign in with Google, we receive your name, email address, and profile picture from Google.

2. How We Use Your Information

We use your personal information for the following purposes:

  • Service Delivery: Process applications, manage your account, facilitate university admissions
  • Communication: Send updates, notifications, and respond to inquiries
  • Personalization: Recommend universities and programs based on your profile
  • Analytics: Improve our platform, understand user behavior, optimize features
  • Security: Detect fraud, prevent abuse, ensure platform security
  • Legal Compliance: Comply with legal obligations and enforce our terms

3. Data Sharing and Disclosure

We share your information only in the following circumstances:

  • Universities: Your application data is shared with universities you apply to
  • Service Providers: Cloud hosting (Railway, Vercel), email services, analytics tools
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In case of merger, acquisition, or sale of assets

We never sell your personal data to third parties.

4. Cookies and Tracking Technologies

4.1 What Are Cookies?

Cookies are small text files stored on your device that help us provide and improve our services.

4.2 Types of Cookies We Use

Essential Cookies (Always Active)

Required for authentication, security, and basic platform functionality.

Analytics Cookies (Optional)

Help us understand how users interact with our platform (Google Analytics).

Marketing Cookies (Optional)

Used to deliver personalized ads and measure campaign effectiveness.

4.3 Managing Cookies

You can control cookies through our cookie banner or your browser settings. Note that disabling essential cookies may affect platform functionality.

5. Your Rights (GDPR Compliance)

Under GDPR, you have the following rights:

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data ("right to be forgotten")
  • Right to Restrict Processing: Limit how we use your data
  • Right to Data Portability: Receive your data in a structured format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at support@unixt.io

6. Data Security

We implement industry-standard security measures:

  • Encryption in transit (HTTPS/TLS) and at rest
  • Secure authentication with JWT tokens
  • Regular security audits and updates
  • Access controls and role-based permissions
  • Secure cloud infrastructure (Railway, Vercel)

7. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations:

  • Active Accounts: Data retained while account is active
  • Deleted Accounts: Most data deleted within 30 days; some retained for legal compliance
  • Application Data: Retained for 7 years for audit purposes

8. International Data Transfers

Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place through:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions by the European Commission
  • Privacy Shield frameworks where applicable

9. Children's Privacy

Our platform is intended for users aged 16 and above. We do not knowingly collect data from children under 16. If you believe we have collected such data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our platform. Continued use after changes constitutes acceptance.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Email: support@unixt.io

Data Protection Officer: dpo@unixt.io