🔒

Privacy Policy

Last updated: March 1, 2026
Summary: We collect the minimum data needed to run UniConnect. We never sell your data. We use Stripe for payments (we never see your card number). You can delete your account anytime.

1. Who We Are

UniConnect ("we," "our," "us") is an online marketplace that connects Indian students planning to study abroad with verified current university students for paid video consultations. Our website is uniconnect.ca.

For any privacy-related questions, contact us at: support@uniconnect.ca

2. Information We Collect

Account Information: When you sign up, we collect your name, email address, and authentication credentials (via Google OAuth or email/password through Supabase Auth). If you sign up as a consultant, we also collect your university, course, year of study, city of origin, and university email for verification.

Usage Data: We collect analytics data such as pages visited, features used, session duration, and device/browser type via PostHog. This helps us improve the product.

Session Data: When you have a video consultation, we record the session duration for billing purposes. Video calls are facilitated through Daily.co and are not recorded unless both parties consent.

Payment Data: Payments are processed through Stripe. We never store, see, or have access to your full credit card number, CVV, or bank account details. Stripe handles all sensitive payment information.

Chat/AI Data: Messages sent to our AI Advisor are processed by Anthropic's Claude API. We send conversation context to generate responses but do not permanently store chat transcripts beyond your active session.

SOP Content: If you use our SOP Reviewer, the text you paste is sent to the AI for analysis. We do not store or share your SOP content after the session ends.

Contact Form: When you submit our contact form, we collect your name, email, and message content to respond to your inquiry.

3. How We Use Your Information

We use your data to: provide and operate the UniConnect platform; match you with relevant student consultants; process payments and payouts; send transactional emails (session confirmations, payment receipts); improve our product based on usage patterns; respond to support inquiries; verify consultant identities; and detect and prevent fraud.

We do not use your data for: selling to third parties, targeted advertising, marketing to unrelated products, or building profiles for external use.

4. Third-Party Services

We use the following trusted third-party services to operate UniConnect:

SupabaseAuthentication, database, and file storage
StripePayment processing
Daily.coVideo call infrastructure
VercelWebsite hosting
Anthropic (Claude)AI Advisor and SOP Reviewer
ResendTransactional email delivery
PostHogProduct analytics (anonymized)
Google OAuthSign-in authentication

Each service has its own privacy policy. We encourage you to review them.

5. Data Retention

We retain your account data for as long as your account is active. Session records and payment history are retained for 7 years for tax and legal compliance. Analytics data is anonymized after 12 months. If you delete your account, we remove your personal data within 30 days, except where retention is required by law.

6. Data Security

We protect your data using: TLS/SSL encryption for all data in transit; encrypted database storage via Supabase; Stripe's PCI-DSS Level 1 compliant payment processing; secure authentication via OAuth 2.0 and bcrypt-hashed passwords; and row-level security policies on all database tables.

7. Your Rights

You have the right to: access all personal data we hold about you; correct inaccurate data; delete your account and associated data; export your data in a machine-readable format; withdraw consent for optional data processing; and lodge a complaint with a data protection authority.

To exercise any of these rights, email support@uniconnect.ca or use the Account Settings in your dashboard.

8. Cookies

We use essential cookies for authentication (keeping you logged in) and session management. We use PostHog for analytics which may set cookies. We do not use third-party advertising cookies.

9. Children's Privacy

UniConnect is intended for users aged 16 and above. We do not knowingly collect data from children under 16. If you believe a child has provided us personal information, please contact us immediately.

10. International Data Transfers

As we serve Indian students and use services hosted globally (Supabase in US/EU, Stripe in US, Vercel globally), your data may be transferred to and processed in countries outside India. We ensure all transfers are protected by appropriate safeguards.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email. The "Last updated" date at the top reflects the most recent revision.

Questions about our privacy practices?
We're happy to explain anything in more detail.
Contact Us