Privacy Policy
Last updated: March 7, 2026
1. Introduction
ThinkAbroad.ai ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what limited information we collect when you use our website at www.thinkabroad.ai and how we use it.
We keep things simple: we only collect the minimum information necessary to run your account.
2. What We Collect
We collect only the following:
- Email address — used to identify your account and allow you to sign in.
- Name (optional) — used to personalise the experience if you choose to provide it during sign-up.
- Google account identifier — only if you sign in with Google. We receive your name, email, and a unique Google ID from Google. We do not receive your Google password or any other Google data.
We do not collect browsing behaviour, location data, device fingerprints, or any other personal information. Any content you enter into our tools (such as academic background or preferences) is processed in real time to generate your results and is not stored on our servers.
3. How We Use Your Information
- To create and authenticate your account.
- To keep you signed in between sessions via a secure, encrypted session cookie.
- To address your support requests if you contact us.
We do not use your information for advertising, profiling, or any purpose beyond operating your account.
4. Cookies
We use a single essential cookie (ta_session) to keep you signed in. This cookie is httpOnly (cannot be read by JavaScript) and is only sent over HTTPS. We do not use advertising cookies, analytics cookies, or any third-party tracking cookies.
5. Data Sharing
We do not sell, rent, or share your personal information with any third party, except:
- Render — our hosting provider. Your account data is stored on their infrastructure. See render.com/privacy.
- Google — only if you choose Google Sign-In, Google processes your authentication. See Google's Privacy Policy.
- Legal requirements — if required by law or court order.
6. Data Security
Your password is hashed using PBKDF2-SHA256 with a unique salt — we never store it in plain text. Sessions are protected by signed JWT tokens stored in httpOnly cookies. All communication with our servers is encrypted via HTTPS.
7. Data Retention
We retain your account information (email and name) for as long as you have an account. If you delete your account, your data is permanently removed from our database immediately. You can delete your account at any time from the account menu in the navigation bar.
8. Your Rights
You have the right to:
- Access — request a copy of the data we hold about you (just your email and name).
- Delete — permanently delete your account and all associated data at any time, directly from the app.
- Correct — contact us to correct any inaccurate information.
9. Children's Privacy
ThinkAbroad.ai is not directed at individuals under 16. We do not knowingly collect data from children. If you believe a child has created an account, please contact us and we will delete it promptly.
10. Changes to This Policy
If we ever start collecting additional data, we will update this policy and notify users clearly before doing so. The "Last updated" date above reflects the most recent revision.
11. Contact
Questions? Reach us at: