Privacy Policy

Last Updated: December 12, 2025

Introduction

TrackMyOPT is a product of Zyene, Inc., a company incorporated in the State of Delaware, with headquarters located in San Francisco, California. TrackMyOPT ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Chrome extension and web application.

Information We Collect

Personal Information

When you create an account or sign in, we collect:

  • Email address: For account creation and authentication
  • Name: First and last name (for Google OAuth or manual sign-up)
  • Password: Encrypted and stored securely (manual sign-up only)

OPT & Immigration Data

You may voluntarily provide:

  • Program End Date
  • DSO Recommendation Date
  • OPT EAD End Date
  • OPT Start Date
  • STEM OPT Start Date
  • Employment history and dates
  • STEM eligibility status

USCIS Case Status Data (Personal Identifiable Information)

If you use our Case Status Tracking feature, you may voluntarily provide:

  • USCIS Receipt Number: Your 13-character case receipt number (e.g., EAC1234567890) used to track your immigration case status with USCIS

Important: USCIS Receipt Numbers are considered Personal Identifiable Information (PII) as they are unique identifiers linked to your individual immigration case. We treat this data with the highest level of security and confidentiality.

Usage Data

We automatically collect:

  • Browser type and version
  • Extension version
  • Timezone (for accurate date calculations)
  • Authentication timestamps

How We Use Your Information

We use your information to:

  • Provide and maintain our service
  • Calculate OPT filing windows and deadlines
  • Send reminders about critical dates (if you opt-in to email notifications)
  • Authenticate your account and secure your data
  • Improve our services and user experience
  • Respond to your support requests

How We Use Your USCIS Receipt Number

Your USCIS Receipt Number is used exclusively for the following purposes:

  • Case Status Monitoring: We use your receipt number to periodically check the public USCIS Case Status Online system (egov.uscis.gov) on your behalf to retrieve your current case status
  • Status Change Notifications: When your case status changes, we notify you via email (premium feature) so you stay informed about updates to your immigration case
  • Dashboard Display: We display your current case status within your TrackMyOPT dashboard for easy reference

We do NOT:

  • Share your receipt number with any third parties
  • Use your receipt number for any purpose other than checking your case status
  • Store any case history beyond the current status
  • Sell or monetize your receipt number data in any way

Data Storage and Security

Where We Store Data

Your data is stored securely using Supabase, a PostgreSQL database with enterprise-grade security:

  • Encrypted at rest and in transit (TLS/SSL)
  • Row-Level Security (RLS) policies ensure you can only access your own data
  • Regular backups and disaster recovery
  • SOC 2 Type II compliant infrastructure

Local Storage

The Chrome extension stores:

  • Authentication tokens: Short-lived JWT tokens (10-minute expiry) in chrome.storage.sync
  • Session state: Sign-in status and timestamps

These are stored locally on your device and synchronized across your Chrome browsers if you're signed into Chrome.

Data Sharing and Disclosure

We do NOT sell, rent, or share your personal information with third parties except in the following limited circumstances:

Service Providers

  • Supabase: Database and authentication (privacy policy: supabase.com/privacy)
  • Hostinger SMTP: Email notifications via our own domain (emails sent from @trackmyopt.com)
  • Google OAuth: If you sign in with Google (privacy policy: policies.google.com/privacy)
  • Stripe: Payment processing for premium features (privacy policy: stripe.com/privacy)

All third-party service providers are contractually bound to protect your data in accordance with this Privacy Policy and are prohibited from using your data for any purpose other than providing their services to TrackMyOPT.

Legal Requirements

We may disclose your information if required by law or in response to valid legal requests.

Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct your information in the app settings
  • Deletion: Request deletion of your account and all associated data
  • Portability: Export your data in a machine-readable format
  • Opt-out: Unsubscribe from email notifications at any time

To exercise these rights, please contact us at: support@trackmyopt.com

Data Retention

We retain your personal information for as long as your account is active. If your account becomes dormant (no login for 24 months), we will notify you before taking any action on your data.

If you delete your account:

  • All personal data is permanently deleted within 30 days
  • Aggregated, anonymized data may be retained for analytics

Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we will:

  • Notify affected users via email within 72 hours of discovery
  • Provide details about what data was compromised
  • Explain what steps we are taking to address the breach
  • Provide instructions on actions you may take to protect yourself
  • Report to relevant authorities as required by law

Business Transfers

If TrackMyOPT is involved in a merger, acquisition, or sale of assets:

  • We will notify you via email and/or prominent notice on our website before your data is transferred
  • Your data will only be transferred to entities that agree to protect your data consistent with this Privacy Policy
  • You will have the option to delete your account and data before any transfer

If TrackMyOPT ceases operations, we will provide at least 30 days' notice and securely delete all user data.

Cookies and Tracking

We use minimal cookies for authentication and session management:

  • Supabase auth cookies: For maintaining your sign-in session
  • No third-party tracking: We do NOT use Google Analytics or other tracking tools

Children's Privacy

TrackMyOPT is intended for F-1 students (typically 18+). We do not knowingly collect information from anyone under 13.

International Users

Your data is stored in the United States. By using TrackMyOPT, you consent to the transfer of your information to the U.S.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you
  • Right to Delete: You may request deletion of your personal information
  • Right to Opt-Out: You have the right to opt-out of the sale of personal information. Note: We do NOT sell personal information
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise your CCPA rights, please contact us at support@trackmyopt.com. We will respond to verified requests within 45 days.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes:

  • We will update the "Last Updated" date at the top of this page
  • For material changes, we will send an email notification to all registered users
  • We will provide a plain-language summary of what has changed
  • For significant changes, we will request your active consent (e.g., checkbox confirmation) before the changes take effect
  • You will have the opportunity to review changes and delete your account if you do not agree

Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

By using TrackMyOPT, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.