Privacy Policy

StudyVisaHub is operated as a small Australian business. This policy sets out what we actually do with information about you: what we collect, why we collect it, where it is stored, who can see it, how long we keep it, and how to have it deleted. It is written as a description of our practice, in the plainest words we can manage.

We hold very little. Most of the site works with no account and no login, and we do not need to know who you are to show you a published government figure.

By using StudyVisaHub, you agree to the collection and handling of your information as described in this policy.

Where and how we use artificial intelligence on this site — and where we do not — is set out separately in our AI Transparency Statement. In short: we do not use AI to profile you or to make automated decisions about you, and we do not submit your personal information to AI tools.

1. What personal information we collect

We collect personal information only when you actively provide it. This may include:

• Contact details — your name and email address when you submit a contact form, advertising enquiry, or registration of interest
• Newsletter subscription data — your email address and subscription preferences if you sign up for our newsletter. If you give us your first name on a sign-up form, we use it only to personalise the alert emails we send you.
• Enquiry content — the message or question you submit, which may include details you choose to share about your study or visa situation
• Usage data — pages visited, links clicked, approximate location (country or region), browser type, device type, and referring source — collected automatically via cookies and analytics tools
• Technical submission data — when you submit a form, our servers record the referring page URL, your browser's user-agent string, and an IP address or IP-derived identifier for rate limiting and fraud prevention. This data is held with your submission record.

We do not ask for sensitive information. Our forms include free-text fields — please do not enter health, financial or identity document details there. If you do, we delete it on request.

We do not knowingly collect personal information from children under 13.

2. How we collect it

We collect personal information:

• Directly from you, when you submit a form or contact us
• Automatically, through cookies and analytics tools as you browse the site — see Section 6 for details
• From third-party providers, to the extent those providers process data on our behalf in accordance with their own terms

3. Why we collect it — purpose of collection

We use personal information to:

• Respond to your enquiries and correspondence
• Send newsletters or updates you have subscribed to
• Operate and improve the site and its features
• Analyse how the site is used so we can make it more useful
• Detect and prevent fraudulent submissions
• Comply with legal obligations and protect the security of the platform

We will not use your personal information for a purpose that is unrelated to why we collected it without first notifying you and, where required, obtaining your consent.

4. Disclosure of personal information

We do not sell, rent, or trade personal information.

We use the following third-party processors to operate the platform. Each receives only the information needed for their specific role:

• Vercel Inc. (United States) — website hosting and serverless function runtime. All web traffic passes through Vercel infrastructure.
• Supabase (database hosted in ap-south-1, Mumbai, India) — our primary database. Registration, subscription, enquiry, and survey records are stored here.
• Resend (United States) — transactional email. We use Resend to send you confirmation emails and to notify us of new enquiries.
• Google LLC (United States) — Google Analytics 4 (site analytics) and Google Sheets (where contact and question enquiry records are also stored as a secondary backup via our service-account integration).
• Cloudflare (United States) — network delivery and DDoS protection. Traffic passes through Cloudflare before reaching Vercel.

We may also disclose personal information to law enforcement or regulatory authorities where required by law, court order, or to protect the rights, property, or safety of any person; and to a successor entity in the event of a merger, acquisition, or sale of assets, under equivalent privacy protections.

5. Overseas disclosure

Our database is hosted in Mumbai, India. Our website hosting, email delivery and analytics providers are in the United States. This means your information is stored and processed outside Australia.

6. Cookies and analytics

We use cookies and similar technologies for the following purposes:

• Analytics (Google Analytics 4) — cookies _ga (expires 2 years) and _ga_* (expires 2 years) identify returning visitors and sessions. Analytics data is aggregated and does not personally identify you.
• Site survey state — cookies svh_survey_dismissed (expires 30 days) and svh_survey_completed (expires 90 days) record whether you have dismissed or completed the on-site survey widget, so it is not shown again in that period.
• Feedback prompt state — cookie svh_feedback_seen (expires 30 days) records that you have already been shown or answered the feedback prompt, so it is not shown again in that period.
• Change notifications — cookie svh_follow_session (expires 12 months) is set only if you ask to be told when a record changes. It holds a random identifier, not your name or email, and is readable only by our server, never by scripts in your browser. It exists so the things you asked to follow are still there when you come back.
• Session storage — svh_popup_fired is stored in your browser for the current tab session only, so that at most one prompt appears per visit. It is cleared when you close the tab.
• Your cookie choice — cookies svh_region (expires 6 months) and svh_cookie_choice (expires 12 months). The first records only whether your request came from a country where we must ask permission before using analytics — the value is eu or row and nothing more. The second records the answer you gave, so we do not ask again. Both are strictly necessary to honour your choice. If you are in the EEA, the UK or Switzerland, Google Analytics does not load at all until you choose to allow it.
• Functionality — to remember your preferences and improve your experience when you return to the site.

You can disable cookies in your browser settings. Some site features may not function correctly if cookies are disabled.

7. Storage and security

We store personal information on infrastructure maintained by trusted third-party providers. We take reasonable technical and organisational steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure.

No data transmission over the internet or storage system is completely secure. While we do our best to protect your information, we cannot guarantee absolute security.

8. Who can see your information

Inside StudyVisaHub, the records described in Section 1 can be read only by the site operator, through an administrator login that is not available to the public and is not issued to subscribers. Ordinary visitors and paying subscribers cannot read anyone's enquiry, subscription or survey record, including their own, because there is no account area that exposes them.

Outside StudyVisaHub, only the providers listed in Section 4 hold any of it, and each holds only the part it needs to do its job: the database provider stores the records, the email provider carries the messages, the hosting and network providers carry the traffic.

We do not sell, rent, trade or share your information with providers, agents, institutions or any other commercial third party. Our enquiry intake refuses to record a consent to share it, in code, so a form cannot be changed later to start sharing quietly.

9. How long we keep it, and how to have it deleted

We keep a record for as long as we still need it for the reason it was collected. A subscription record is kept while you are subscribed. An enquiry or correction record is kept while we are dealing with it, and afterwards as the record of what was asked and what we did about it, because a correction to published data has to be traceable to the person who reported it.

We do not currently delete records on an automatic schedule. We delete them when you ask us to.

To have everything we hold about you deleted, email info@mediamantra.com.au from the address you gave us, or tell us which address to look for. You do not have to give a reason.

When you ask, we run a single documented procedure that searches every one of our records that can hold an email address, reports back what it found, and then deletes it. In plain terms that covers: newsletter and alert subscriptions; contact, correction and enquiry messages; student registrations and anything attached to them, including any occupation alert you set up; agent and provider registrations; scholarship enquiries; survey answers; on-site feedback answers; and questions you sent us. We tell you what was found and what was deleted.

We complete a deletion request within 30 days and confirm it in writing. If there is something we cannot delete, we will tell you what it is and why, rather than quietly leaving it in place. Anonymous usage counts that are not linked to you, and records we are required to keep by law, are the only things that would fall into that category.

Deleting your information ends any subscription attached to it, because the subscription is the record.

10. Asking to see, correct or delete what we hold

You can ask us for any of these things at any time, and you do not need to give a reason:

• a copy of what we hold about you
• a correction, if something we hold is wrong
• deletion, as described in Section 9
• to be unsubscribed from anything you signed up for

Email info@mediamantra.com.au. We respond within 30 days. If we cannot do what you have asked, we tell you why, in writing.

11. Complaints

If you are unhappy with how we have handled information about you, tell us first at info@mediamantra.com.au. We will look into it and give you an answer in writing within 30 days.

If our answer does not satisfy you, the Office of the Australian Information Commissioner publishes guidance on privacy rights and on making a privacy complaint at oaic.gov.au.

12. Automated processing

Automated processing. We do not use automated decision-making or profiling to make decisions about you. Our tools display published government data and do not assess your individual circumstances or eligibility. If this changes, we will update this policy and tell you before the change takes effect.

13. Data breaches

If we discover a breach that could seriously harm anyone whose information we hold, we will tell the affected people directly, explain what happened and what to do about it, and notify any regulator we are required to notify.

14. Updates to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or circumstances. Updates take effect when posted to this page and are reflected in the “Last updated” date above. We encourage you to review this policy periodically.

15. Contact us

For any privacy-related questions, requests, or complaints: info@mediamantra.com.au

Last updated: 2 September 2026