1. Overview

AbroadCMS values the confidentiality of your education consultancy and your students' personal information. This Privacy Policy details the types of data collected, how it is processed, and our strict architectural security measures.

2. Data We Collect

We collect information provided directly by you when creating an account: agency company name, business address, contact telephone, administrator email, and billing details. Within your workspace, your staff may upload student contact records, passport copies, academic transcripts, and visa documentation solely for admissions processing.

3. Multi-Tenant Architectural Isolation

AbroadCMS operates on a multi-tenant model where data isolation is enforced at every software layer:

Every database query requires an authenticated tenant context.
All document uploads are stored in dedicated tenant-namespaced directories.
Cross-tenant reads, updates, and deletes are mathematically prohibited and tested via continuous security suites.
We do not aggregate student records across consultancies for commercial advertising.

4. Service Providers & Third Parties

We partner with trusted enterprise infrastructure providers: Resend (transactional email and OTP verification delivery) and Cloudflare (DNS, SSL encryption, and DDoS mitigation). We do not sell or rent data to any third-party marketing brokers.

5. Contact Us

If you have questions regarding data protection or request data export/deletion, contact our privacy team at [email protected].