Abstud

Privacy Policy

Last updated: June 14, 2026

1. Introduction

Welcome to Abstud. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we look after your personal data when you use our platform and informs you about your privacy rights and how the law protects you.

2. Data We Collect

We may collect, use, store, and transfer different kinds of personal data about you, grouped as follows:

  • Identity Data — first name, last name, username, or similar identifier.
  • Contact Data — email address and telephone numbers.
  • Technical Data — IP address, login data, browser type and version, time zone, and location.
  • Google Integration Data — When you authorise access to Google services, we collect only the minimum information required to perform the requested tasks:
    • Google Drive (drive.file scope) — used solely to upload, organise, and manage documents related to visa applications and student records that are created by this application.
    • Google Calendar & Meet (calendar.events scope) — used to create and manage consultancy appointments and coaching sessions, and to auto-generate Google Meet links for virtual meetings.

3. How We Use Your Data

We use your personal data only when permitted by law, including to:

  • Provide educational consultancy services.
  • Manage visa application processes end-to-end.
  • Integrate with Google services (Drive and Calendar/Meet) for document management and session scheduling — strictly for features requested by authorised users.
  • Improve our services and user experience.

4. Google User Data Sharing, Transfer, and Disclosure

Abstud accesses Google user data only for the purposes described in this Privacy Policy and to provide features explicitly requested by authorised users.

We do not sell, rent, trade, or share Google user data with advertisers, marketing companies, data brokers, or any other third parties for commercial purposes.

Google user data may only be shared, transferred, or disclosed in the following limited circumstances:

  • Authorised user access — to the authenticated user who owns or manages the connected Google account.
  • Trusted infrastructure partners — to service providers such as hosting, storage, backup, monitoring, and security providers, solely as necessary to operate and maintain the platform.
  • Legal obligations — when required by applicable law, legal process, court order, or governmental request.
  • Safety and security — to protect the rights, safety, security, and integrity of our users, services, and systems.
  • Business transfers — in connection with a merger, acquisition, reorganisation, or sale of company assets, subject to appropriate confidentiality obligations.

Except for the circumstances described above, Google user data is not shared, transferred, or disclosed to any third party.

5. Google API Services User Data Policy

Abstud's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy , including the Limited Use requirements.

Data obtained through Google Workspace APIs is used solely to provide and improve the application's functionality as requested by the user. Specifically:

  • Google Drive data is used only to store, organise, and retrieve documents created by this application on behalf of the authenticated user.
  • Google Calendar data is used only to create, view, and manage events and Google Meet links generated by this application on behalf of the authenticated user.
  • We do not use Google Workspace API data to develop, improve, or train generalised artificial intelligence (AI) or machine learning (ML) models.
  • We do not allow humans to read Google user data unless we have your affirmative agreement, it is necessary for security or legal compliance, or it is aggregated and anonymised for internal operational purposes.

6. Data Security

We have put in place appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed. We limit access to your personal data to those team members, agents, contractors, and other third parties who have a legitimate business need to know.

7. Your Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

  • Request access to your personal data.
  • Request correction of inaccurate personal data.
  • Request erasure of your personal data.
  • Object to processing of your personal data.
  • Request restriction of processing your personal data.
  • Request transfer of your personal data.
  • Revoke Google OAuth access at any time via your Google Account permissions . Revoking access will prevent the application from accessing your Google Drive or Calendar going forward.

8. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us: