Your documents stay yours.

OPT Buddy is operated under the Schedia.ai brand in California at optbuddy.app. This policy covers our website, workspace, online features, payments and support. Effective and last updated: September 12, 2026.

For privacy questions or requests, use support@optbuddy.app. Email support@optbuddy.app for account, billing, cancellation, refund, privacy, or accessibility requests. You can also use the contact form and save its private request link to read our reply. Do not include immigration documents, card numbers, passwords, or recovery credentials.These choices apply to both Free and Pro.

We do not send your case to USCIS, SEVP, your school, or your employer as part of this service. We use Supabase, Vercel, Anthropic, Stripe, and email providers for the purposes described below. We may also make legally required disclosures or disclosures needed to protect the service, as explained in this policy. We do not train on your documents. We do not sell data and we do not run ads.

A free account is required for the workspace. We keep your email, the name you provide, sign-in records and the agreements you accept. Urgent help and notice triage require sign-in and Pro. The standalone Extension of Stay checker remains public and free.

While you are signed in, your case details, drafts, checklist progress and preferences automatically save to your private account in Supabase. Account saving is included on both plans. Selecting or uploading a document saves that file to your account. Scanning and AI drafting each require your separate choice. We also hold service activity and usage records needed to provide these features.

Your browser keeps a temporary working copy while you use the workspace. Wait for “Saved” before closing the page. Changes that have not finished saving can be lost if you close or reload the page, lose your connection, or sign out.

A date entered in the homepage timeline check stays temporarily in your current tab for up to 30 minutes. It is not added to your account and disappears on reload or expiry. Enter your date again when starting your own case; a homepage check does not save one.

AI drafting runs only when you request it. The fields to be shared are shown before you send them. For a DSO message, these include your SEVIS ID, program end date, requested OPT dates and the answers you provide about the message, your DSO, attachments and question. For Form I-983 drafting, we send your answers and do not automatically include your name or SEVIS ID. Anything personal you type in an answer travels with it.

Documents you upload are not included in an assisted draft. Neither are the rest of your case, your checklist or dates calculated by the app. Document scanning is a separate choice, described below.

Selecting a document for upload saves it to your account. A scan sends the document file to the AI provider. This may include your Form I-20, passport identity page, electronic I-94, one or both sides of an EAD card, or passport photograph. Other documents and the rest of your case are not included. The selected file can contain sensitive identity and immigration information, so review it before choosing to send it.

Uploaded photographs and images are prepared on your device to remove attached camera and location details. PDFs are sent as supplied, including any hidden information they contain. We keep the uploaded file, information read from it and the checks produced for you.

Supabase provides account sign-in and private storage for your saved records and documents. Vercel hosts the website. Selected AI draft fields and scan files go through the Vercel AI Gateway to Anthropic. We ask these AI providers not to use your request content for training or retain it after processing. Their service terms and retention controls still apply; we cannot guarantee removal of every provider copy.

Stripe handles payments on its own payment pages. We send your account email and a reference to your account, and receive billing dates, amounts, subscription status and refunds. We do not collect full card numbers or security codes. Stripe also uses information for its own payment, fraud-prevention and legal duties under its Privacy policy.

Resend provides account email delivery and receives messages sent to our support address. When an account email is sent, such as confirmation or password reset, Resend receives the recipient address, message and delivery information. Support emails include your sender address, message, any attachments you send, and delivery information. See Resend’s data processing terms. Reminder emails are not currently active. For contact form submissions, support replies are on your private request page; we do not send support email notifications for those form submissions.

We use information to provide the features you request, manage accounts and subscriptions, answer support requests, maintain security, prevent abuse and resolve errors or disputes. Service providers may process your IP address, browser information, request times and error records to deliver and protect the service. Support records include your entered email, message and our reply. Anyone with your private request link can read the request and reply, so keep it safe. We do not need immigration documents for an ordinary billing request.

Where a legal basis is required, we rely on providing the service you request, consent for optional processing, legitimate interests in security and administration, or legal duties, as appropriate. You can stop future optional processing through its controls; this does not undo lawful processing already carried out.

We may disclose information when needed to comply with law, protect people or the service, or handle legal claims. If the service changes ownership, information may transfer with it, subject to this policy and any legally required notice or choice. We do not make immigration decisions or government submissions for you.

Essential cookies support sign-in and account recovery. Browser storage also remembers service and privacy choices. You can control cookies and site data in your browser, but blocking them can stop features from working. Clearing site data does not delete saved account records; it can erase older records that remain only on that device.

We do not sell personal information, run ads or use advertising trackers. We do not share information for advertising based on activity across different businesses. A browser Do Not Track signal or Global Privacy Control signal keeps optional analytics and replay off. Payment providers may connect transaction information across services for fraud prevention under their own policies. Browser privacy settings do not cancel a subscription or replace your upload and sharing choices.

With your permission, PostHog helps us understand page visits, navigation, feature use, completion or failure of product actions, and page performance. We use a random browser identifier rather than your account email or name. We do not send your case facts, document contents, form entries, private request links, or account credentials to analytics.

Choosing “Allow analytics” also allows session replay. It records activity on public information pages with text and inputs masked before sending. Account, billing, case, document, support and other private screens are excluded from recordings. Network contents, console messages, images and document previews are not recorded. These limits mean some interactions are not visible.

PostHog processes this information in the United States. Optional browser storage remembers your analytics identifier after you agree; a separate preference remembers your choice. Declining or withdrawing permission stops future collection and does not restrict app access. It does not automatically erase information already collected. Contact support about deletion requests. See PostHog’s privacy policy.

Session recordings are retained for up to 30 days. Product analytics events may be kept for up to one year to compare usage over time.

We use encryption and account access controls to protect saved information. We and the relevant providers can access information as needed to provide and protect the service. Use a strong account password, protect your email account and device, and sign out on shared devices. No service can promise complete protection against every security risk.

Older encrypted device records are retained separately for optional one-time recovery. They are not automatically decrypted or copied into your account. Recovery requires the original passphrase, which we cannot reset or recover. An account password reset cannot unlock those records, and recovery cannot be guaranteed.

Account records normally remain while your account is open unless you delete them. Deleting a document requests removal of its stored file and related records. Account and document cleanup can fail or remain pending; follow any retry instructions. An incomplete deletion does not mean that every copy is gone. Older encrypted device records remain until you remove them or clear this site’s data on that device.

Backups and service logs follow the providers’ retention settings. There is no fixed 30-day backup deletion promise. We may keep support, billing and legal records for as long as needed to resolve requests or disputes, protect the service, meet accounting requirements or comply with law. These purposes can require keeping some records after account deletion.

We retain a record of your subscription renewal agreement and when you accepted it for at least three years, or one year after the contract ends, whichever is longer. A legal obligation or dispute may require longer retention. This evidence contains no card details or case content. It is not automatically removed by account deletion or included in the ordinary account export. Ask support@optbuddy.app for a copy or about its retention.

Use the controls on your Case file page to export or delete saved information. An account export does not bundle your uploaded document files or include older records that remain only on your device. Some support, billing or agreement records require a separate request through support@optbuddy.app.

Review the scope shown before confirming deletion. Removing older device records does not delete your account or uploaded files. Account deletion does not erase downloads, copied text, calendar entries or older records held on a device. We cannot erase copies held elsewhere.

Depending on the laws that apply, you may ask to access, correct or delete personal information, receive a portable copy, restrict or object to processing, withdraw consent, complain to a privacy regulator or appeal a response. Use support@optbuddy.app. We do not penalize you for exercising an applicable right. We may ask for the minimum information needed to verify you or your representative and will explain applicable limits. We cannot retrieve records kept only on a device you can no longer unlock. Do not include identity or immigration documents in your initial request.

Information you send to online services may be processed in the United States or other countries with different privacy laws. Transfers are subject to applicable legal requirements. Contact us about relevant providers and safeguards. Your signed-in workspace saves information to your account using these online services.

OPT Buddy is intended for adults aged 18 or older. Do not create an account for a child or upload a child’s information. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided information so we can investigate and delete it where required.

We post updates here with a new date. For material changes, we will provide notice through the service or an appropriate account communication and obtain any consent required by law. Read the Terms of service for product terms, or use the contact form to raise a concern.