Privacy policy

The short version

We collect what you tell us, such as your contact details, study plans and scores, so we can match you with universities and a counsellor can help you.
We ask for your consent first and keep a record of the exact words you agreed to.
We never sell your data. We don’t show ads, and we don’t use tracking or advertising cookies.
Chat messages go to Anthropic to generate the assistant’s answers. We don’t save chat conversations on our servers.
Email hello@unlimitedu.com to see, correct or delete your data, or to withdraw consent.

Who we are

Unlimit Edu (“Unlimit”, “we”, “us”) runs unlimitedu.com, its study abroad assistant and student accounts (together, “the service”). We help students in India and elsewhere find and apply to universities in the United States, the United Kingdom and Canada.

Under India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”), we are the Data Fiduciary for the personal data described here: we decide why and how it’s used. You are the Data Principal. You can reach us about anything in this policy at hello@unlimitedu.com.

What we collect

When you use the finder or book a counsellor

Contact details: your name, email address, phone or WhatsApp number and, if you give it, your city.
Study preferences: the countries you’re considering, level of study, subject, your latest percentage, English test score, yearly budget and preferred intake.
Your consent: the date and time you agreed, and the exact consent wording you saw.
Where the enquiry came from, for example the website finder.
A salted hash of your IP address. This is a one-way scrambled value, not your IP address itself. We use it only to detect abuse, such as the same source sending many fake enquiries.

When you create a student account

Sign-in details: your name, email address and password. We store your password only as a scrypt hash, so nobody at Unlimit can read it.
Your profile: the same study preferences and contact details as above, including whether you haven’t taken an English test yet. You can skip any question.
Account activity: when you created the account, when you last signed in, when you finished the onboarding questions, and when you asked for a counsellor call while signed in.
Your consent: the date and time, and the exact wording you agreed to.

Every student account also appears as an enquiry in the tools our counsellors use, and is kept up to date with your profile.

What our counsellors add

The stage you’ve reached (for example contacted, applied or enrolled) and notes from conversations with you.
Documents you choose to send your counsellor to help with applications, loans or visas, such as transcripts, test scores, passport pages or financial documents.

When you use the chat assistant

The assistant answers the messages you type. Your messages, and the conversation so far, are sent to our server and on to Anthropic, whose AI model (Claude) writes the reply. To check facts that change often, such as visa rules, the assistant may run web searches based on your question. We don’t save chat conversations in our database. Your browser keeps a copy so you can carry on later (see Cookies and browser storage).

Please don’t put sensitive details such as passport or bank numbers into the chat. The assistant doesn’t need them, and it is set up not to ask for your phone number or email.

Technical data

Like any website, our servers and hosting provider process your IP address and basic browser information to deliver pages, keep the service secure and limit how many requests one connection can make in a minute. Our servers keep error logs for about a month.

What we don’t collect

We don’t use analytics or advertising trackers, and we don’t set cookies. We don’t buy data about you from anyone else.

How we use it

To build your shortlist and estimate your admit odds.
For a counsellor to contact you by email, phone or WhatsApp about your study plans and shortlist.
To help with the applications, scholarships, education loans, visas and housing you ask us about.
To run your account: signing you in and saving your answers.
To answer your questions in the chat assistant.
To understand demand in aggregate, for example how many students are looking at each country or subject.
To keep the service secure and prevent abuse.
To arrange your gift if you enrol (see the gift terms).
To meet our legal obligations.

We never sell your data, and we don’t use it for advertising.

We use your personal data on the basis of your consent, as the DPDP Act requires. Before we store your details, you tick a box next to one of these statements, and we record the wording and the time:

That is the wording on the finder and the booking form. When you create an account, it reads:

You can withdraw your consent at any time by emailing hello@unlimitedu.com. It’s as easy as giving it. We’ll then stop using your data and delete it, unless the law requires us to keep something. Withdrawing doesn’t affect what we did before you withdrew.

A few uses don’t depend on consent under the DPDP Act, for example when the law requires us to keep or disclose information.

Who processes it

We use a small number of service providers to run Unlimit. They process data on our behalf and only for the purposes below.

Who	What they do	What they receive
Amazon Web Services	Hosts our website, servers and database. Data is stored in the AWS Asia Pacific (Mumbai) region; web pages are delivered worldwide through Amazon CloudFront.	Everything we store, described above.
Anthropic	Provides the AI model (Claude) behind the chat assistant, including web searches the assistant runs to check official sources. Anthropic says it doesn’t use inputs or outputs from its commercial products to train its models by default.	The messages in your chat conversation. These may be processed outside India, including in the United States.
Google Fonts	Delivers the fonts our pages use.	Your IP address and browser details, when your browser loads the fonts.
WhatsApp, email and phone providers	How counsellors talk to you.	Your number or email address and the messages you exchange, under each provider’s own privacy terms.

We also share data with others in these situations:

Universities you apply to, only when you ask us to help with an application: the details and documents that application needs. When you enrol, the university and Unlimit confirm to each other that your application came through us, so the university can pay us and we can arrange your gift.
Lenders, accommodation providers and similar services, only when you ask us to connect you, and only what that request needs.
Authorities, when the law requires it.

We don’t currently send your data to a customer relationship management (CRM) service. If we start using one, we’ll name it in this policy first.

Where it’s stored and for how long

Enquiries, accounts and counsellor notes are stored in our database in AWS’s Mumbai region. We keep them while you’re using our services and delete them once they’re no longer needed for the purpose you gave them for, when you withdraw consent, or when you ask us to, unless the law requires us to keep something longer.
Backups of the database are kept for up to 30 days, so deleted data drops out of them within that time.
Error logs are kept for about a month.
Chat conversations aren’t stored on our servers. Anthropic handles the messages it receives under its own commercial terms.
Data in your browser stays until you clear it, sign out or start a new chat (see below).

How we protect it

The whole site and service run over HTTPS.
Passwords are stored only as scrypt hashes.
The database sits in a private network that isn’t reachable from the internet, and is encrypted at rest.
Only staff who need it can see enquiries, through a signed-in admin tool. Database credentials are kept in AWS Secrets Manager, not in our code.
We store IP addresses with enquiries only as salted hashes.

If a personal data breach happens, we’ll tell you and the Data Protection Board of India as the DPDP Act requires.

Your rights

Under the DPDP Act you have the right to:

Access a summary of the personal data we hold about you, what we do with it, and who we’ve shared it with.
Correct, complete or update it. If you have an account, you can edit most of your profile yourself at any time.
Erase it, unless the law requires us to keep it.
Withdraw consent at any time.
Have your grievances addressed by us, and, if you’re not satisfied with our response, complain to the Data Protection Board of India.
Nominate someone to exercise these rights for you if you die or become unable to.

To use any of these rights, email hello@unlimitedu.com from the address you used with us. We may ask you to confirm your identity before we act. If you live outside India, the law where you live may give you further rights; write to us and we’ll help.

Cookies and browser storage

We don’t set cookies, and we don’t use analytics or advertising trackers. We do use your browser’s local storage, which stays on your device, for these features:

Name	What it holds	Why
`ue_widget_chat`	Your conversation with the assistant and your finder answers. From the contact form, only your first name is kept: never your email, phone number or city.	So you can pick up where you left off. Starting a new chat replaces it.
`ue_account`	Your sign-in token (valid for up to 30 days) and your profile.	So you stay signed in. Signing out removes it.
`ue_saved_programs`	The programs you save on Explore programs.	So your saved list is there next time.

You can clear all of these at any time in your browser’s settings. Loading our pages also loads fonts from Google Fonts (see Who processes it).

Children

Unlimit is meant for people aged 18 or over. Many students start planning for an undergraduate degree before they turn 18, so if you’re under 18, the DPDP Act requires verifiable consent from your parent or lawful guardian before we process your data. Please ask your parent or guardian to fill in the form or create the account with you, and to email hello@unlimitedu.com so we can confirm their consent.

We don’t track children’s behaviour or show them targeted advertising. If we learn we’ve collected a child’s data without that consent, we’ll delete it.

Changes to this policy

We’ll update this page when the way we handle data changes, and change the date at the top. If a change is significant, we’ll tell you by email or on the site before it takes effect, and ask for your consent again where the law requires it.

Contact and grievances

For questions, requests or complaints about your personal data, email hello@unlimitedu.com with “Privacy” in the subject line. If you’re not satisfied with our response, you can complain to the Data Protection Board of India.