Uniyantra
Book a demo→
Book a demo →
Legal & Compliance

Privacy Policy

Effective Date: August 8, 2026 | Last Updated: August 8, 2026

Google API Services User Data Policy Compliance Statement

Uniyantra's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

1. Overview & Data Controller Identity

Uniyantra provides a multi-tenant B2B SaaS educational consultancy management and student platform accessible at https://uniyantra.com (API origin: https://api.uniyantra.com). Uniyantra enables study-abroad education consultancies, counselors, and intake officers to streamline student communications, shortlist courses, and track applications.

For inquiries regarding this Privacy Policy or data processing practices, contact our Data Protection Officer at:
Email: uniyantra@gmail.com

2. Information We Collect & Google OAuth Scopes

To provide our integrated counselor workspace and student communication tools, Uniyantra requests explicit permission to access specific Google user data through OAuth 2.0. Below is a detailed breakdown of each scope requested and its precise technical usage within our application:

https://www.googleapis.com/auth/gmail.readonly (Restricted Scope)

Technical Usage: Allows Uniyantra to read email threads, messages, headers, snippets, and attachments associated with connected counselor accounts. This data is processed strictly to display student-counselor email histories directly inside the student timeline and match incoming student replies automatically based on email addresses.

https://www.googleapis.com/auth/gmail.send (Sensitive Scope)

Technical Usage: Enables authorized counselors to draft, compose, and send outgoing emails (with file attachments up to 25 MB) directly to prospective students from the Uniyantra workspace messaging panel using their connected Gmail account.

email (OpenID Connect Scope)

Technical Usage: Retrieves the primary email address of the connecting Google account to establish ownership, display the connected inbox ID, and prevent unauthorized cross-tenant integration.

profile (OpenID Connect Scope)

Technical Usage: Obtains basic profile details (such as counselor display name and avatar) to personalize the counselor inbox UI within the workspace.

3. Strict Boundaries on Google User Data Usage

We maintain strict technical and organizational controls governing data retrieved via Google APIs:

  • No Commercial Sale: Google user data is NEVER sold, leased, or rented to any third party under any circumstances.
  • No Advertising Usage: Email content and metadata are NEVER used or disclosed for personalized advertising, retargeting, or marketing profiling.
  • No AI Model Training: Google user data is NEVER passed to external Large Language Models (LLMs), commercial AI APIs, or used to train artificial intelligence / machine learning models.
  • Internal Workspace Boundary: Access to email threads is confined exclusively to authenticated and authorized personnel within the specific customer workspace (tenant).

4. Data Protection, Token Storage & Security

Uniyantra employs robust technical safeguards to protect connected email accounts and stored token credentials (managed via our backend ConnectedEmailAccount model):

  • Encryption at Rest: OAuth Access Tokens and Refresh Tokens are stored in secure backend databases using industry-standard AES-256 encryption.
  • Encryption in Transit: All HTTP communications between the client browser, API origin (https://api.uniyantra.com), and Google servers enforce modern TLS 1.3 encryption.
  • Tenant Isolation: Multi-tenant database design ensures that data from one education consultancy is logically isolated from all other organizations.

5. Account Disconnection & OAuth Token Revocation

Users retain complete ownership and control over their connected Google accounts. You may revoke Uniyantra's access at any time through either of the following methods:

  1. In-App Disconnection: Navigate to Settings > Email Accounts within the Uniyantra workspace and click Disconnect Account. This immediately initiates a programmatically executed revocation API call to https://oauth2.googleapis.com/revoke and removes all stored access credentials from our backend database.
  2. Google Account Permissions: Visit your Google Account Third-Party Access Settings and remove access for Uniyantra.

6. Contact Us

If you have any questions regarding this Privacy Policy, your data privacy rights, or Google API compliance, please contact us at:

Uniyantra Support Team

Email: uniyantra@gmail.com

Website: https://uniyantra.com