OxbrivyOxbrivyBack to app

Privacy Policy

Last updated: 8 August 2026

1. About This Policy

Oxbrivy ("we", "us", "our") operates the AI-powered study-abroad platform at oxbrivy.com, which helps students discover best-fit international university programs, check admit chances, find scholarships, draft application documents, track applications, and prepare for student visas and interviews. This Privacy Policy explains what personal data we collect from you as a user of Oxbrivy, why we collect it, how we use it, and the rights you have under India's Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology Act, 2000.

2. Data We Collect

We collect personal data you provide directly and data generated by your use of the platform:

  • Account data — name, email address, phone number, and password (stored hashed); or, if you sign in with Google or Facebook, the basic profile information (name, email) that provider shares with us.
  • Profile and academic data — academic history, standardised test scores, work experience, target countries, programs and fields of study, nationality, passport and address details (where you provide them, e.g. for application forms), and other preferences you share to help us match you with programs and scholarships.
  • Uploaded documents — resumes/CVs, transcripts, and other files you upload for AI parsing or storage in your document vault.
  • AI-generated content — SOP, LOR, resume, and essay drafts, document critiques, admission-probability estimates, scholarship matches, and conversations with our AI advisors (the Discover matchmaker, Ask Oxbrivy); where you use voice mock interviews, this includes interview transcripts and, in some cases, audio.
  • Communication data — WhatsApp messages (only if you opt in), transactional emails, push notifications, and any messages you send our support team.
  • Payment data — subscription and billing details processed by our payment processor; we do not store your full card or bank account details ourselves.
  • Usage data — IP address, device and browser type, pages visited, timestamps, and actions taken within the platform, collected via server logs and the analytics/advertising tools described in Section 9.
  • Referral data — if you refer, or are referred by, another user, we record that relationship to apply referral rewards.

3. How We Use Your Data

  • To provide Oxbrivy's features — program and scholarship matching, AI document drafting and critique, application tracking, visa guidance, mock interviews, and test-prep tools.
  • To generate the AI content above using the model providers listed in Section 5.
  • To send transactional notifications, and — only where you've opted in — marketing or reminder messages by email, WhatsApp, or push notification.
  • To process payments and manage your subscription.
  • To measure and improve our advertising and marketing (see Section 9).
  • To improve platform performance, fix bugs, and develop new features.
  • To comply with legal obligations under applicable Indian law.
  • To detect and prevent fraud, abuse, and security incidents.

4. Legal Basis for Processing

Under the DPDPA 2023, we process your personal data on the basis of the consent you give when creating an account and using Oxbrivy's features, and our legitimate interest in operating a secure and reliable platform.

5. Data Sharing

We do not sell your personal data. We share it only with:

  • Cloud infrastructure providers — Supabase (database, authentication, and file storage) and Vercel (hosting) — bound by data-processing agreements.
  • AI model providers — OpenAI and Anthropic process the academic, profile, and document content needed to generate matches, drafts, critiques, and interview responses. This may include substantive application content; we do not send payment details to these providers.
  • Messaging and communications providers — Meta's WhatsApp Business Platform (only for users who opt in to WhatsApp notifications), our transactional email provider, and our SMS/OTP provider (Twilio).
  • Advertising and analytics partners — Google (Analytics, Ads conversion tracking) and Meta (Pixel and Conversions API) receive limited, typically hashed or aggregated, usage and conversion data to measure and improve our marketing; PostHog receives product-usage analytics.
  • Payment processor — Razorpay, to process subscription payments.
  • Oxbrivy staff — our own reviewers and administrators, who support application review, catalog curation, and customer support.
  • Universities and programs you apply to — Oxbrivy helps you prepare and copy your information into external application forms, but does not submit applications on your behalf. Any data that reaches a university is sent by you, directly, through that university's own systems.
  • Legal authorities — where required by law, court order, or to protect the rights and safety of our users.

6. Data Retention

We retain your account, profile, and document data for as long as your account remains active, and for up to 90 days after deletion to allow for recovery and to meet legal obligations. You may request earlier deletion (see Section 8).

7. Data Security

We implement industry-standard technical and organisational measures to protect personal data, including encryption at rest and in transit, role-based access controls, and regular security reviews. No system is completely secure; please notify us immediately at admin@oxbrivy.com if you believe there has been a security incident.

8. Your Rights

Under the DPDPA 2023, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete personal data.
  • Withdraw your consent to processing (where consent is the legal basis).
  • Request erasure of your personal data, subject to legal retention obligations.
  • Nominate a person to exercise your rights on your behalf.
  • File a complaint with India's Data Protection Board.

To exercise any of these rights, email us at admin@oxbrivy.com. We will respond within 30 days.

9. Cookies, Analytics, and Advertising

We use strictly necessary cookies to keep you signed in and to protect against cross-site request forgery. We also use analytics and advertising tools — including Google Analytics, Google Ads conversion tracking, Meta Pixel and Conversions API, and PostHog — to understand how Oxbrivy is used and to measure the effectiveness of our marketing. These tools may set cookies or receive limited, often hashed, information such as your IP address or the pages you visit. You can disable non-essential cookies in your browser settings, and where legally required we will ask for your consent before setting them.

10. Children's Privacy

Oxbrivy is intended for use by adults (18 years and older). We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, contact us and we will delete it promptly.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via a notice on the platform or by email. Continued use of the platform after a change constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions, requests, or complaints:
Oxbrivy
Email: admin@oxbrivy.com
Website: oxbrivy.com