Privacy PolicyDraft

Last updated: August 23, 2026

1. Introduction

XportEdu, operated by XportEdu (“XportEdu,” “we,” “our,” or “us”), is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. It applies to our websites, applications, widgets, and services (the “Platform”), which connect international students, families, schools, host families, agencies, receiving organizations, and coordinators.

The Platform is designed to be open and transparent so that users can find and connect with one another. Some information — particularly organization and program information — is intended to be public. Personal information is protected and used as described below. Please also read our Terms of Service, which this policy is part of.

2. Public Business Information vs. Protected Personal Information

Business & marketing information — such as organization and school names, descriptions, programs, pricing, logos, facility photos, and promotional materials — is treated as open, public information. It may be displayed on public pages, shown in search and widgets, and used to market the Platform and your listing.

Personal information — information that identifies an individual, such as a student, family member, or coordinator — is protected. We use it to operate the Platform and enable connections, as described in this policy, and we do not treat it as free, public content. Personal information about minors is never sold or used for third-party advertising.

3. How the Law Applies

GDPR / UK GDPR

For users in the EU/UK, we process personal data on a lawful basis and honor data-subject rights.

Minimum Age & Minors

XportEdu is intended for users 13 and older; we do not knowingly collect information from children under 13. For users under 18, a parent or legal guardian must affirm consent before information is shared.

FERPA (Education Records)

Where applicable, we handle education records consistent with FERPA.

CCPA/CPRA (California)

California residents have specific rights over their personal information; we do not sell personal information.

4. Information We Collect

We collect information you provide, information from your organization, and information generated as you use the Platform, including:

  • Account & contact information: name, email, phone, password, role, and organization affiliation.
  • Student information: personal and identity details (such as name, date of birth, nationality, and, where relevant, passport or visa details), academic records and transcripts, application materials, health or emergency information you choose to provide, photos, and documents.
  • Organization information: school, agency, receiving-organization, and coordinator profiles, accreditation and program details, pricing, logos, and marketing materials.
  • Host family information: household details, address, references, background-check status, and photos of the home you choose to provide.
  • Usage & device information: log data, IP address, browser and device information, and activity on the Platform, collected via cookies and similar technologies.

5. How We Use Your Information

  • To match and connect students with schools, host families, and organizations, and to operate placements and applications;
  • To create and manage accounts and communicate with you about your account, applications, and connections;
  • To enable other users to find and contact you for connection purposes consistent with your role;
  • To publish and market business & marketing content and to promote the Platform and your listing;
  • To keep the Platform safe and secure, prevent fraud and abuse, and enforce our Terms;
  • To operate, analyze, and improve the Platform and develop new features and services;
  • To comply with legal obligations and protect the rights, safety, and wellbeing of users, especially students.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, operate core features, measure and improve performance, and understand how the Platform is used. Some cookies are essential; others help us analyze usage. You can control cookies through your browser settings, though disabling some may affect how the Platform works.

7. How We Share Information

We are not in the business of selling personal information. We share information only as needed to run the Platform:

  • With other users, to connect you. This is the core purpose of the Platform — for example, sharing a student’s application details with a school or organization involved in a placement, or a listing with prospective students and families. What is shared depends on your role and the connections you make.
  • Public content. Business & marketing content and public listings may be visible to anyone and indexed by search engines.
  • Service providers. Trusted vendors that host and operate the Platform on our behalf (for example, our database, hosting, storage, email, and analytics providers), under obligations to protect your information.
  • Legal & safety. When required by law, to respond to lawful requests, to protect our rights and the safety of users, or in connection with a merger, acquisition, or sale of assets.

8. Data Retention

We keep your information for as long as your account is active and for a period afterward. Our current practice is to retain account and record data for up to approximately three (3) years after an account is closed, then delete or anonymize it, except where we are legally required or permitted to keep it longer (for example, for legal, tax, or safety reasons).

Because XportEdu may in the future offer related educational services (for example, programs beyond high school), we may — with your consent at that time — retain and carry a student’s record forward so it can be reused for those services rather than re-entered. You can request deletion of your information at any time as described below.

9. International Data Transfers

XportEdu operates from and processes information in the United States. If you access the Platform from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States and other countries where we or our service providers operate, which may have different data-protection laws than your own. Where required, we use appropriate safeguards for such transfers.

10. Minimum Age & Protection of Minors

Minimum age. The Platform is intended for users who are 13 years of age or older. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it. If you believe a child under 13 has provided us information, please contact us using the details below.

We take special care with the personal information of users under 18:

  • Parent / guardian consent for minors: for users under 18, a parent or legal guardian must review and affirm consent before the student’s information — including any health information (such as allergies, asthma, and pet compatibility) — is shared with receiving organizations, coordinators, or host families. We capture this affirmation through a confirmation link we send to the parent or guardian’s email address, and we record when it is confirmed.
  • Data minimization: we collect only what is necessary for the educational placement process.
  • Parental access & control: a parent or guardian may review, correct, or request deletion of a minor’s information.
  • No sale or ad targeting: a minor’s personal information is never sold or used for third-party advertising.

11. Your Rights & Choices

Depending on where you live, you may have some or all of the following rights over your personal information:

  • Access — request a copy of the personal information we hold about you;
  • Correction — ask us to fix inaccurate or incomplete information;
  • Deletion — request that we delete your personal information;
  • Portability — receive your information in a portable format;
  • Objection / restriction — object to or limit certain processing;
  • Withdraw consent — where we rely on consent, withdraw it at any time.

To exercise any of these rights, contact us using the details below. We will respond as required by applicable law, and we will not discriminate against you for exercising your rights.

12. Data Security

We use appropriate technical and organizational measures to protect your information, including:

  • Encryption of data in transit and at rest;
  • Secure authentication and role-based access controls;
  • Restricting access to personal information to those who need it;
  • Ongoing monitoring, security reviews, and incident-response procedures.

No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If a change is material, we will provide reasonable notice (for example, by posting the updated policy with a new date or notifying you through the Platform). Your continued use of the Platform after the changes take effect means you accept the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us:

Email: info@xportedu.com

Data Protection Officer: [name/contact — if appointed]

Mailing address: [MAILING ADDRESS — to be added]

This Privacy Policy was last updated on August 23, 2026.

© 2026 XportEdu. All rights reserved.