XRUPI Privacy Policy
Privacy Policy
XRUPI stores personal information so students can manage study-abroad planning, funding comparisons, deadlines, and related support in one workspace. This policy explains what data is collected, how it is used, and how it is protected operationally.
1. Information collected
XRUPI may collect profile information, email address, phone number, school and program details, journey stage, tuition and funding information, notes, document names, account access records, and service usage events needed to operate the workspace.
2. Why the information is used
Information is used to personalize the student dashboard, retain progress between visits, present relevant actions and comparisons, support customer service, improve the product, prevent abuse, and facilitate partner referrals where the user has consented.
3. Data sharing
XRUPI does not sell personal information. Personal information may be shared with service providers, infrastructure vendors, analytics tools, legal advisors, or referral partners only where necessary to operate the platform, comply with law, or act on an authorized user request.
4. Security measures
XRUPI applies account authentication, access controls, session protection, structured validation, restricted database access, and operational monitoring to reduce unauthorized access risk. Sensitive administrative credentials are separated from normal user access flows.
5. Retention and deletion
Student records are retained only as long as reasonably needed for service delivery, compliance, dispute handling, fraud prevention, and product operations. Users may request review, correction, or deletion of their information, subject to legal or security retention obligations.
6. User choices
Users may update account information, change communication preferences, request assistance, or ask about data handling practices. Marketing communications should only be sent where the user has consented or where applicable law otherwise permits it.
7. Cross-border processing
Because XRUPI supports international student journeys, data may be processed or stored in more than one jurisdiction through approved service providers. XRUPI should maintain contractual and operational safeguards appropriate to those transfers.
8. Compliance and updates
This policy should be reviewed and updated as the product expands into document storage, advisor workflows, payment orchestration, or additional countries, especially where stronger privacy, financial, or consumer rules apply.