Privacy Policy
Privacy Policy
Complete information about how your personal data is used and protected on the Unigrad.org platform.
1. General Information
The Unigrad.org platform pays special attention to protecting users personal data. This privacy policy provides detailed information about how your data is collected, used, and stored.
2. Data We Collect
We collect the following data:
• First name and last name
• Email address
• Phone number
• Profile picture (if provided)
• Educational history and academic information
• IP address and browser information
• Platform usage statistics
• First name and last name
• Email address
• Phone number
• Profile picture (if provided)
• Educational history and academic information
• IP address and browser information
• Platform usage statistics
3. The Consultant CRM: Telegram, documents and AI
This part applies only if you are working with an EduWise consultant through our Consultant CRM. If you use unigrad.org on your own, none of it happens.
What we read. With your agreement, your consultant connects the Telegram group the two of you share. We then store the messages in that group — the text, the sender's name and the time — and the files sent in it, including passports, transcripts, certificates and bank letters. Only the groups your consultant has linked are stored. We never have your Telegram password.
What we do with it. An AI service reads those messages and files to keep your file up to date: the programmes you are applying to, the stage you have reached, the deadlines you have been given, and the facts you have told your consultant — including money, health and family circumstances where you mentioned them. Your consultant sees everything it writes and can correct it.
Who processes it. The AI service is DeepSeek (api.deepseek.com), which operates from China. Your messages, the record built from them and images of your documents are sent to it. Nothing is removed or masked before it is sent. Inside EduWise your file is read by your own consultant and by the agency's administrators; every time an administrator opens it, that is recorded.
How long we keep it. While your file is open, and for 24 months after your consultant closes it. After that the messages, the documents, the record and the files on our server are deleted.
Deleting it sooner. Ask your consultant, or write to us using the address in the last section. We delete the stored messages, the documents taken from them, the record built from them and the files on our disk. One line stays in our internal log recording that the deletion happened.
If you are under 18. Your parent or guardian has to agree before any of this starts, and your consultant records that the agreement came from them.
What we read. With your agreement, your consultant connects the Telegram group the two of you share. We then store the messages in that group — the text, the sender's name and the time — and the files sent in it, including passports, transcripts, certificates and bank letters. Only the groups your consultant has linked are stored. We never have your Telegram password.
What we do with it. An AI service reads those messages and files to keep your file up to date: the programmes you are applying to, the stage you have reached, the deadlines you have been given, and the facts you have told your consultant — including money, health and family circumstances where you mentioned them. Your consultant sees everything it writes and can correct it.
Who processes it. The AI service is DeepSeek (api.deepseek.com), which operates from China. Your messages, the record built from them and images of your documents are sent to it. Nothing is removed or masked before it is sent. Inside EduWise your file is read by your own consultant and by the agency's administrators; every time an administrator opens it, that is recorded.
How long we keep it. While your file is open, and for 24 months after your consultant closes it. After that the messages, the documents, the record and the files on our server are deleted.
Deleting it sooner. Ask your consultant, or write to us using the address in the last section. We delete the stored messages, the documents taken from them, the record built from them and the files on our disk. One line stays in our internal log recording that the deletion happened.
If you are under 18. Your parent or guardian has to agree before any of this starts, and your consultant records that the agreement came from them.
4. Authentication via Google OAuth
You can sign in using your Google account. In this case, the following data is obtained from Google:
• First name (given_name)
• Last name (family_name)
• Email address
• Profile picture (picture)
• Google user identifier
This data is used only to create and authenticate your account. When signing in via Google, your password is not stored with us.
• First name (given_name)
• Last name (family_name)
• Email address
• Profile picture (picture)
• Google user identifier
This data is used only to create and authenticate your account. When signing in via Google, your password is not stored with us.
5. Purposes of Data Usage
Your data is used for the following purposes:
• Creating and managing personal profiles
• Providing educational services
• Processing university applications
• Improving our services and creating personalized experiences
• Technical support and assistance
• Ensuring security and preventing fraud
• Complying with legal requirements
• Creating and managing personal profiles
• Providing educational services
• Processing university applications
• Improving our services and creating personalized experiences
• Technical support and assistance
• Ensuring security and preventing fraud
• Complying with legal requirements
6. Profile Picture and Visual Data
Your profile picture (obtained from Google or uploaded directly) is displayed on your profile and may be visible to other users participating in your activity on the platform. You have the right to change or delete your profile picture at any time.
7. Data Security
We apply modern security measures to protect your data:
• Data transmission via SSL encryption
• Storage on secure servers and databases
• Limited access rights and authentication systems
• Regular security audits and updates
• Password storage in encrypted form
• Data transmission via SSL encryption
• Storage on secure servers and databases
• Limited access rights and authentication systems
• Regular security audits and updates
• Password storage in encrypted form
8. Sharing Data with Third Parties
Your data may be shared with third parties only in the following cases:
• When submitting university applications (only with your consent)
• For legal requirements (court orders, government agency requests)
• To our service provider partners (only for service provision and based on confidentiality agreements)
We never sell your data to third parties for commercial purposes.
• When submitting university applications (only with your consent)
• For legal requirements (court orders, government agency requests)
• To our service provider partners (only for service provision and based on confidentiality agreements)
We never sell your data to third parties for commercial purposes.
9. Cookies and Tracking Technologies
Our platform uses cookies and similar technologies:
• For session management
• To improve user experience
• To collect platform usage statistics
• To ensure security
You can manage cookies in your browser settings.
• For session management
• To improve user experience
• To collect platform usage statistics
• To ensure security
You can manage cookies in your browser settings.
10. User Rights
You have the following rights:
• View and edit your personal data
• Download your data
• Request data deletion
• Change or delete your profile picture
• Disconnect Google OAuth connection
• Opt out of marketing communications
• Ask questions about the privacy policy
If you are a candidate in the Consultant CRM, "request data deletion" also covers your stored Telegram messages, the documents taken from them and the record built from them. See section 3.
• View and edit your personal data
• Download your data
• Request data deletion
• Change or delete your profile picture
• Disconnect Google OAuth connection
• Opt out of marketing communications
• Ask questions about the privacy policy
If you are a candidate in the Consultant CRM, "request data deletion" also covers your stored Telegram messages, the documents taken from them and the record built from them. See section 3.
11. Children's Privacy
Our platform is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If you are between 13 and 18 years old, you must use the platform with parental or legal guardian permission.
For a candidate under 18 in the Consultant CRM, the agreement described in section 3 has to come from a parent or guardian.
For a candidate under 18 in the Consultant CRM, the agreement described in section 3 has to come from a parent or guardian.
12. Changes to Privacy Policy
We may periodically update this privacy policy. All changes are published on this page, and you will be notified by email of significant changes. It is recommended to regularly review this page.
13. Contact Information
If you have questions about the privacy policy, you can contact us:
• Email: info@unigrad.org
• Phone: +998 (71) 200-00-00
• Address: Tashkent, Uzbekistan
• Email: info@unigrad.org
• Phone: +998 (71) 200-00-00
• Address: Tashkent, Uzbekistan
Last updated: 19.09.2026