Privacy Policy

1. Introduction

This Privacy Policy describes how UniMate collects, uses, stores, and protects personal data of platform users. We strive to ensure maximum transparency regarding the processing of your data.

By using the UniMate platform, you agree to the terms of this Privacy Policy. If you disagree with any provisions, please discontinue use of the service.

2. Data We Collect

We collect the following categories of data:

3. Processing Purposes

Your data is used for:

• Providing and improving platform functionality
• User authentication and authorization
• Ensuring security and preventing abuse
• Personalizing AI recommendations and study plans
• Sending notifications about deadlines and schedules
• Technical support and troubleshooting
• Usage analysis for service improvement

4. Data Storage & Transfer

Your data is stored on secure servers. We apply the principle of data minimization — we collect only what is necessary for the service to function.

• Data is stored encrypted (AES-256)
• Passwords are hashed using bcrypt
• Backups are created daily
• Data is deleted upon user request within 30 days
• Inactive accounts are deleted after 12 months

5. Security Measures

We apply comprehensive measures to protect your data:

• HTTPS/TLS 1.3 for all connections
• CSRF tokens to protect against cross-site request forgery
• Content Security Policy (CSP) with nonce values
• Rate limiting to prevent DDoS attacks
• Regular session and token rotation
• Audit logging of administrator actions
• SQL injection protection through parameterized queries
• X-Frame-Options, X-Content-Type-Options headers

6. Cookies & Tracking

UniMate uses a minimal number of cookies necessary for the platform to function:

• Session cookies: To maintain authentication
• Preference cookies: Language, theme preferences
• CSRF cookies: For attack protection

7. Third Parties

We may use third-party services exclusively to ensure the platform operates:

• Hosting provider — for server hosting
• AI providers — for processing AI assistant requests (data is anonymized)
• Payment systems — for payment processing (we do not store card data)

All third parties are required to comply with data protection standards and have access only to the minimum necessary information.

8. Your Rights

You have the following rights regarding your data:

• Access: Request a copy of all your data
• Rectification: Update or correct inaccurate data
• Erasure: Request complete deletion of account and data
• Portability: Receive data in a machine-readable format
• Restriction: Restrict processing of certain data
• Objection: Object to certain types of processing

To exercise any of these rights, contact us at support@getunimate.com

9. Children's Privacy

UniMate is intended for users aged 16 and older. We do not knowingly collect data from individuals under this age. If we become aware of collecting data from a minor, we will promptly delete this information.

10. Policy Changes

We may update this Privacy Policy. Significant changes will be communicated through a notification on the platform. The date of the last update is indicated at the beginning of the document. We recommend periodically checking this page.

11. Contact Information

For privacy and data protection questions, contact us: