Privacy Policy

1. Who We Are

MyDegree ("we", "us", "our") is an education decision intelligence platform designed to help Indian students and their families make informed higher education decisions. This Privacy Policy describes how we collect, use, and protect your personal information.

2. Information We Collect

We collect the following types of information:

• Account information: Name and email address when you create an account.
• Profile preferences: Budget range, course interest, immigration goal, career goals, and priorities you provide during onboarding. We do not collect academic marks or sensitive documents.
• Usage data: Pages visited, features used, and interactions with the platform, collected through standard analytics tools.
• Contact messages: Name, email, and message content when you contact us via our contact form.
• Technical data: IP address, browser type, and device information collected automatically when you use our platform.

3. How We Use Your Information

We use your information to:

• Provide personalised university recommendations and decision intelligence based on your profile.
• Improve the accuracy and relevance of our recommendation engine.
• Send you updates about new features or universities relevant to your profile (you can opt out at any time).
• Respond to your enquiries and support requests.
• Analyse aggregate, anonymised usage patterns to improve the platform.

4. What We Do Not Do

We are committed to protecting your interests:

• We do not sell your personal data to any third party.
• We do not share your profile information with universities without your explicit consent.
• We do not earn referral commissions from universities — your data never influences a commercial outcome for us.
• We do not use your data to target you with advertising for other products or services.

5. Data Storage and Security

Your data is stored on secure cloud infrastructure (Neon serverless PostgreSQL, hosted on AWS). Passwords are hashed using bcrypt and are never stored in plain text. We use HTTPS for all data transmission. Access to user data is restricted to authorised administrators only.

6. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days. Anonymised, aggregated analytics data may be retained indefinitely.

7. Your Rights

You have the right to:

• Access a copy of the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Withdraw consent for communications at any time.

To exercise any of these rights, contact us via our contact form.

8. Cookies

We use essential cookies to maintain your login session. We do not use tracking cookies for advertising purposes. We may use privacy-respecting analytics tools (such as Vercel Analytics) that do not use cookies and do not collect personally identifiable information.

9. Third-Party Services

We use the following third-party services to operate the platform: Vercel (hosting), Railway (API hosting), Neon (database). Each operates under its own privacy policy. We do not integrate any advertising networks or social media tracking pixels.

10. Changes to This Policy

We may update this policy occasionally. Significant changes will be communicated via email to registered users. Continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related enquiries, please use our contact form. We aim to respond to all privacy requests within 5 business days.