Privacy Policy

Who We Are

IEP provides tools that help users explore international education options, generate personalized reports, and communicate with education agents. For privacy requests, you can contact our privacy team at info@iep7.com.

Personal Information We Collect

• Account and identity information: name, email address, phone number, profile image, internal user ID, and information we receive from Google if you sign in with Google.
• Authentication and security data: one-time passcodes, verification records, session data, IP address, user agent, and related fraud-prevention or abuse-detection information.
• Assessment and profile data: destination countries, program type, major, English level, nationality, country code, year of birth, completed study years, high school grade, generated assessment code, and related report inputs and outputs.
• Communications data: emails, WhatsApp or SMS delivery details, report-delivery records, support requests, and contact-history information.
• AI and chat content: chat prompts, messages, report context that you or the product provide to generate responses, and generated summaries or replies.
• Device and usage data: cookies, local storage identifiers, FingerprintJS visitor ID, affiliate referral ID, timestamps, report open/contact counters, and similar technical usage information.

How We Collect Information

• Directly from you when you submit forms, create an account, chat, or contact us.
• From identity providers such as Google when you choose a social sign-in method.
• Automatically from your browser or device through cookies, local storage, session technologies, log data, and device fingerprinting tools used to reduce duplicate submissions and protect platform integrity.
• From affiliate or agent referral flows when you arrive through a tracked referral link.

How We Use Personal Information

• Provide the website, accounts, assessments, reports, and chat features.
• Authenticate users and send verification codes by email or WhatsApp/SMS.
• Generate personalized education guidance, report summaries, and AI responses.
• Associate assessments with a returning device or authenticated account.
• Detect, prevent, and investigate fraud, abuse, duplicate responses, and security incidents.
• Communicate with you about your account, reports, support requests, or service issues.
• Maintain records, enforce our terms, comply with law, and protect legal rights.
• Improve platform quality using internal analytics and operational reporting.

Cookies, Local Storage, and Similar Technologies

• We use essential cookies and related technologies to maintain sessions, keep you signed in, remember preferences, and protect platform security.
• We store a `deviceId` in local storage and in a browser cookie for up to 12 months to help prevent duplicate questionnaire submissions and link later activity to the same device when appropriate.
• We may store an affiliate identifier (`afId`) when you arrive from a referral link so we can route activity to the relevant agent or affiliate.
• We also store chat-session identifiers and limited interface preferences in local storage or cookies.
• We do not currently use personal information collected through these technologies for third-party advertising or cross-context behavioral advertising.

AI Features and Automated Processing

• When you use AI features, we send the content needed to answer your request or build a report summary to our AI service provider.
• AI outputs can be incomplete or inaccurate and are provided for guidance and support, not as the sole basis for legal, immigration, academic, or other high-impact decisions.
• Please do not submit unnecessary sensitive personal information through AI chat fields.
• We do not use AI to make solely automated decisions that produce legal or similarly significant effects about you.

When We Disclose Personal Information

• Service providers and processors: companies that help us provide authentication, device intelligence, cloud hosting, database, email, messaging, and AI services.
• Education agents or affiliates: when necessary to deliver a report, respond to a request you initiated, or support a tracked referral relationship.
• Professional advisers and authorities: when reasonably necessary for legal compliance, security, fraud prevention, or to protect rights, safety, and property.
• Corporate transactions: if we are involved in a merger, financing, acquisition, reorganization, or sale of assets, your information may be transferred as permitted by law.

Current or recent providers used by this product may include Google, FingerprintJS, Twilio/WhatsApp, our email infrastructure providers, and Microsoft Azure OpenAI, along with infrastructure and hosting vendors acting on our behalf.

No Sale or Sharing for Behavioral Advertising

We do not currently sell personal information or share personal information for cross-context behavioral advertising as those terms are defined under certain U.S. state privacy laws. We also do not knowingly use your assessment or chat data for third-party ad targeting. If that changes, we will update this Privacy Policy and provide any rights or opt-out tools required by law.

Cross-Border Processing

We may process or store personal information in Canada, the United States, or other jurisdictions where we or our service providers operate. If you are located in Canada, this means your information may be accessible to courts, law enforcement, or regulators in other jurisdictions under their laws. We remain responsible for personal information transferred to service providers acting on our behalf and use contractual and other reasonable safeguards designed to provide comparable protection.

Data Retention

• Account records: retained while your account is active and for a reasonable period afterward for security, fraud prevention, recordkeeping, and legal compliance.
• Verification codes: one-time passcodes are designed to expire quickly, generally within about 10 minutes, although limited verification records may remain longer for audit and abuse-prevention purposes.
• Session, log, and security data: retained for as long as reasonably necessary to secure the service, investigate misuse, and troubleshoot issues.
• Assessments, reports, and chat content: retained for as long as needed to provide the service, preserve user history, support legitimate business operations, and comply with legal obligations, unless deletion is required sooner by law or we approve a verified deletion request.
• Browser-side identifiers: retained in your browser until they expire, are deleted by you, or are overwritten. Some local storage values remain until you clear them.

We determine retention using criteria such as the sensitivity of the information, the purpose for which it was collected, the risk of harm from unauthorized use or disclosure, legal requirements, and whether the information is needed to resolve disputes or enforce agreements.

Security

We use administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your Privacy Rights and Choices

Depending on where you live and subject to legal exceptions, you may have the right to request access to personal information, request correction, request deletion, withdraw consent, request a portable copy of certain information, or complain to a regulator.

• Canada: You may request access to and correction of personal information and may withdraw consent to certain processing, subject to legal or contractual restrictions and reasonable notice. If you are in Quebec or another province with its own private-sector privacy law, additional rights may apply, including portability where required.
• United States: Residents of California and other applicable states may have rights to know, access, correct, delete, and obtain a copy of personal information, and to opt out of sale, targeted advertising, or certain profiling where those activities apply. Because we do not currently sell personal information or use it for cross-context behavioral advertising, some opt-out rights may not be applicable to our current practices.
• We will not unlawfully discriminate against you for exercising privacy rights.

How To Exercise Your Rights

To make a privacy request, email info@iep7.com with the subject line "Privacy Request." Please describe the request in enough detail for us to understand, evaluate, and respond to it. We may need to verify your identity before acting on the request. Authorized agents may submit requests on your behalf where allowed by law, but we may ask for proof of authority and identity verification.

If we deny your request, you may reply to the same email with the subject line "Privacy Appeal." We aim to respond within the time required by applicable law, which is often within 45 days after verification, subject to any lawful extension.

Children and Age-Related Disclosures

Our services are not directed to children under 13, and we do not knowingly collect personal information from children under 13 without the consent or authorization required by law. Because our services may be used by students, users under the age of majority in their jurisdiction should use the service with a parent, guardian, or other authorized adult where required. If you believe a child provided personal information in violation of this policy, contact us and we will review the situation.

Third-Party Links and Services

Our website or communications may contain links to third-party websites, services, or policies that we do not control. Their privacy practices are governed by their own notices and terms.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date above. If required by law, we will also provide additional notice or obtain consent for material changes.

Contact

Privacy questions, complaints, and rights requests can be sent to info@iep7.com. If you are not satisfied with our response, you may also have the right to contact the Office of the Privacy Commissioner of Canada, Quebec's Commission d'acces a l'information, or another applicable privacy regulator or attorney general.