Back to Home

Privacy Policy

Last updated: 26 July 2026

1. Introduction

UniGPT (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI assignment assistant service.

2. Information We Collect

Account Information:

  • Email address (required for account creation)
  • Display name and university affiliation (optional)
  • Account credentials (stored securely via Supabase Auth)

Usage Data:

  • Uploaded assignment briefs and source materials
  • AI-generated content and analysis results
  • Project titles, subjects, and course codes
  • Credit balance and purchase history

Payment Information:

  • Payment processing is handled entirely by Stripe
  • We do not store your credit card or banking details
  • We retain transaction records (amount, date, credits purchased)

3. How We Use Your Information

  • To provide and maintain the UniGPT Service
  • To process AI generation requests and manage credit balances
  • To process payments and maintain purchase records
  • To communicate service updates, security alerts, and support messages
  • To improve our AI models and service quality
  • To comply with legal obligations

4. Data Sharing and Third Parties

We share your data only with the following third-party services that are essential to operating UniGPT:

  • OpenAI— Assignment briefs and prompts are sent to OpenAI’s API for AI processing. Review OpenAI’s privacy policy for details on how they handle data.
  • Supabase — Your account data, projects, and generated content are stored in Supabase (our database provider). Data is encrypted in transit and at rest.
  • Stripe — Payment processing. We do not share academic data with Stripe.

We do not sell, rent, or trade your personal information to any other third parties.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal data. Authentication is handled via Supabase Auth with encrypted credentials. All data transmission uses HTTPS/TLS encryption. However, no method of electronic storage is 100% secure.

6. Data Retention

We retain your account data and generated content for as long as your account is active. You may delete your projects at any time through the dashboard. Upon account deletion, your personal data and projects are permanently removed from our systems.

7. Cookies

UniGPT uses essential cookies for authentication and session management (via Supabase Auth). These cookies are necessary for the Service to function. We do not use tracking cookies or analytics cookies.

8. Your Rights

Under Malaysian law (Personal Data Protection Act 2010), you have the right to:

  • Access your personal data
  • Correct inaccurate personal data
  • Withdraw consent for data processing
  • Request deletion of your account and associated data

To exercise any of these rights, contact us at vistelostudio@gmail.com.

9. Non-Refundable Purchases

All credit purchases are final and non-refundable.

When you purchase credits, the transaction is completed immediately and credits are added to your account. We do not offer refunds for:

  • Unused or partially used credit packs
  • Accidental purchases
  • Dissatisfaction with AI-generated content
  • Account closure or termination

Your payment information is processed securely by Stripe and is not stored on our servers.

10. Children’s Privacy

UniGPT is intended for university students and is not directed at children under 13. We do not knowingly collect personal information from children under 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: