Information & control
Privacy policy
Last updated: 19 October 2026
This policy describes how Consulting Agent handles information for consultant-assisted university application work. For privacy questions or requests, contact the operator at yigity2002@gmail.com.
Information used
Depending on the task, the app processes Google account identity information, file names and metadata, and the contents of authorized documents. Documents may include names, contact details, CVs, educational history, transcripts, test results, certificates, application materials and document comments. Information supplied directly by the consultant or applicant may also be used.
Google OAuth credentials enable the approved connection. They are handled as secrets and must not be included in public pages, source code or document comments.
Why information is used
Information is used to carry out requested reviews, compare evidence, prepare or edit documents, add comments, and keep limited context and records of work. It is not sold or used by the operator for advertising. Access and changes are limited by the instructions and authorization for each task.
Google permissions
Read-only Google Drive access allows the app to locate, read and download authorized files. Editing access allows requested file creation and updates, including uploading edited documents. The Google consent screen describes the permissions granted; these permissions can be broader than the files needed for an individual task. The app does not treat a broad permission as permission to work on unrelated student records.
Services involved in processing
Google Drive stores source and working documents. OpenAI ChatGPT/Codex and its execution environment are used for AI-assisted analysis and document processing, so relevant document content may be provided to those services. A private GitHub repository stores workflow rules and limited student summaries and audit records; full student documents are not intended to be stored there. Cloudflare hosts these public information pages and may process connection and security information.
These providers process information under their applicable terms, privacy policies and account settings. This policy does not replace those policies or make additional guarantees about their retention or model-training settings. Providers may process information in countries other than your own.
Storage, retention and security
Necessary working copies may be held in an isolated processing workspace while a task is underway. Temporary copies are removed where appropriate after verification; incomplete work may require recovery copies. Documents in Drive and limited private continuity and audit records remain until removed under the relevant instructions or retention needs. Provider logs and backups may follow separate retention periods.
The workflow uses access controls, protected credentials and checks on the target account and files. No online system can guarantee absolute security.
Your choices and requests
You can revoke the Google connection through Google Account third-party connections. Revocation stops future access through that connection; it does not automatically delete existing documents, copies or records.
Contact yigity2002@gmail.com to request access, correction or deletion of information handled by the operator, or to ask which services were used. The operator may need to verify your identity and authority over the records. Do not send passwords or OAuth tokens by email. Applicable legal obligations and service-provider controls may affect deletion.
This website
These pages do not offer public sign-up or document upload forms. We do not add advertising trackers or analytics scripts. The hosting provider may process IP addresses, browser information and other technical data for delivery and security. Emailing the contact address shares the information you include in that message.
Policy updates
Changes to this policy will be published here with an updated date. Contact the operator if you need clarification before authorizing a task.