Demo / starter implementation

Privacy Notice

Starter privacy notice to be aligned with applicable law, partners and the infrastructure actually used.

This is a starter notice. It must be reviewed and localized before launch, especially if the site will handle passports, transcripts, minors’ data or institutional records.

1. Data collected

The Platform may collect account name, email, role, country, contact details, selected institution/programme, progress statuses, messages and uploaded application documents. Public contact messages are also stored. Do not collect fields that are not necessary for the service.

2. Purposes

Data is used to create accounts, keep student trackers, respond to support requests, administer directory entries, manage approved partner access, protect the service and record consent to terms. Uploaded documents are for application organization only and do not constitute formal university submission.

3. Sharing and decision authorities

Information should be shared with a participating university only where necessary for a student request and under an approved data-sharing arrangement. The Platform does not automatically transmit applications to every university. A student must follow the institution’s official submission instructions. Do not share student records with a diplomatic mission or public authority without a lawful basis, clear purpose and appropriate controls.

4. Security and retention

Production deployment must use HTTPS, strong administrator passwords, least-privilege access, protected document storage, routine updates, backups, access logs and a written retention/deletion schedule. Files in the private document folder must not be directly downloadable from a public URL. Review logs and remove old documents when the purpose expires.

5. External links and cookies

The Platform links to third-party institutional and government websites. Those websites operate independently. The starter implementation uses a session cookie for sign-in and language preferences; analytics, advertising and payment integrations are not enabled by default.

6. Requests and corrections

Users should be able to request correction, access, deletion or clarification through a published contact address, subject to legal and institutional recordkeeping requirements. Configure an accountable privacy contact before public launch.

7. Updates

This notice may be updated as the platform’s features, partners and applicable obligations change. The production version should show a version/date and record user acceptance where appropriate.

Version: 2026-10-29