Privacy policy

Who we are

Oorsea is a business-to-business platform that connects study-abroad agencies with Super Agents who hold university partnerships. Oorsea is operated by Team Kelope, Malappuram, Kerala, India. Contact: connect@oorsea.com.

What data we process

• Partner users: name, work email, phone number, organisation and role.
• Students (entered by agencies): name, contact details, date of birth, passport details, nationality, address, academic history, English test results, previous visa refusals and uploaded documents such as passports, transcripts and offer letters.
• Finance: agency bank details and commission records.
• Usage: sign-in sessions, application history and an audit log of administrative actions.

Why we process it

To let agencies apply to universities on behalf of students, let Super Agents and their staff process those applications with the universities, send status updates, and calculate and pay commission. Agencies confirm they have the student's consent to share their data for their application, in line with India's Digital Personal Data Protection Act, 2023, and other laws that apply.

Who can see it

• An agency sees only its own students and applications.
• A Super Agent sees only applications made to its own universities; its staff see only the universities assigned to them.
• Student data is shared with the chosen university and, where needed, with visa authorities (for example EMGS in Malaysia) to process the application.
• We never sell personal data.

How we protect it

• Access rules are enforced in the database itself, not just in the app.
• Documents are stored privately; viewing one uses a link that expires after an hour.
• Traffic is encrypted (HTTPS). Data is backed up daily, with a separate encrypted copy kept off-site.

Where it is stored

On Supabase (database and files) and Cloudflare (hosting and backups). These providers may process data outside India under their own security commitments.

How long we keep it

For as long as the partner account is active and as required for legal, tax and dispute purposes. Agencies can ask us to delete a student's data when it is no longer needed.

Your rights

Students and users can ask to access, correct or delete their personal data, or withdraw consent, by writing to connect@oorsea.com. We respond within 30 days.

Changes

We will update this page when our practices change and show the new date at the top.