Privacy Policy

Who we are

StudyRoute ("we", "us") is an education service that helps students find their route to universities abroad. This document explains what personal data we process and how we protect it.

The single official contact for any data or privacy request is support@studyroute.app. Further company details will be added here as they are formalised.

What data we collect

We collect only what the service needs to work:

• Survey and quiz answers (citizenship, budget, goals, priorities) — to build your recommendation.
• Contact details you provide yourself: name, email, phone, or messenger handle.
• Feedback you submit, together with the related page address, language and device type — so we can investigate it and improve the service.
• Images or PDFs you voluntarily attach to feedback. A voice recording is sent only to turn it into text and is not retained.
• Documents you voluntarily upload for review (for example, a second opinion on an application).
• Technical data: IP address, device and browser type, anonymised usage statistics.
• Payment data is handled by our payment provider Stripe — we never store or see card numbers.
• Interest-map answers — only if you ticked the box on the result screen. They are stored under a one-way code instead of an identifier, with no name or email, and are never linked to a route or an application; you can delete them from the same screen, without an account.

Why and on what basis

We use data to: build and show your education route; contact you at your request; improve the quality of recommendations; and meet legal obligations.

The legal bases are your consent (when you submit a form) and our legitimate interest in providing and improving the service. You can withdraw consent at any time by writing to us.

Who we share data with

We do not sell your data. We share it only with trusted providers that help us operate, and only to the extent needed:

• Cloudflare — website hosting and protection.
• Cloudflare Workers AI — turning a voice recording into text without retaining the original audio.
• International AI text-processing services (LLMs) — processing survey answers to build your recommendation.
• Stripe — payment processing.
• Resend — sending email.
• Google — spreadsheets for tracking enquiries.
• Telegram — internal team notifications about new enquiries.

Each of them processes data under a contract and only on our instructions.

How we use data when supporting your application

If you ask us for application support, we use the data and documents you provide only to the extent needed for the help you choose. This may include:

• finding universities and academic preparatory programmes;
• explaining published admission requirements and making a preliminary assessment of how your profile matches them;
• building target and backup routes;
• checking whether your document set is complete;
• helping you complete forms and prepare drafts;
• tracking deadlines;
• technically uploading or transferring documents when authorised, and corresponding with a university with your consent;
• providing general visa checklists and links to official rules;
• preparing you for the next steps in your chosen route.

We send data to a university or preparatory programme only at your request or with your consent, and only to the extent needed for the action you choose.

General visa materials are reference information, not individual legal or immigration advice. The relevant university or public authority always makes the decision on admission, qualification recognition or a visa.

How long we keep data

We do not delete data on a schedule. Until you delete it yourself, your route, reports and uploaded documents stay where they are — so you can come back a year later and find everything as you left it.

Deletion always starts with a person, and there is a button for it. In your profile you can delete a single route, report or document, or delete the account entirely — everything linked to it goes with it. If an agency consultant works with you, your record in their workspace is theirs to delete: it belongs to the agency, not to us.

Three things are exceptions to “until you delete it yourself”, each with its own term. Technical service logs carry no name of yours and are erased automatically after roughly 90 days. When the AI Consultant finds no answer to your question in its own knowledge base, we keep the text of that question — with no name and no link to your account, and with addresses, phone numbers and handles stripped out automatically — so that we can see which material the site is missing and write it; that record is erased after 90 days as well. Interest-map answers, if you allowed them to be kept, are stored for 12 months and then deleted automatically: that set is collected for one purpose — to find out whether the scales work — and lives exactly as long as the purpose needs.

Files attached to feedback are deleted automatically after 90 days. The feedback text remains in the improvement queue while it is needed to investigate and close the suggestion, or until you ask us to delete it.

Your rights

You can: request a copy of your data; correct inaccuracies; delete your data; restrict or object to processing; and withdraw consent. To exercise any right, write to us — we will respond within a reasonable time.

Cookies and storage

We use the minimum necessary: a durable visitor identifier to link your session to a saved result, and browser local storage for drafts (for example, your application basket). We do not use third-party advertising or tracking cookies.

International transfers

Our providers may process data outside your country. Where that happens, the transfer relies on recognised safeguards (for example, standard contractual clauses).

Minors

The service is intended for prospective students, and some of them are minors — we plan on that rather than assuming an adult audience. If you are under 16, use it with the consent of a parent or guardian.

Wherever we ask for consent separately — for example, to keep your interest-map answers — consent for anyone under 16 is given by a parent or guardian. Declining closes nothing: the result is visible either way.

Data sources

Some of the data behind the service is not ours. The interest map and the estimates built on it come from the open O*NET occupation database, published by the U.S. Department of Labor under CC BY 4.0. We modified it; the licence asks us to name both the licensor and the fact of modification. The notice is given here in the licensor's own words, unedited:

This page includes information from the O*NET 30.3 Database by the U.S. Department of Labor, Employment and Training Administration (USDOL/ETA). Used under the CC BY 4.0 license. O*NET is a trademark of USDOL/ETA. Talkout UG has modified all or some of this information. USDOL/ETA has not approved, endorsed, or tested these modifications.

The same terms are why screens carrying this data stay free and open without registration.

Changes to this policy

We may update this policy. The date of the last change is always shown at the top of the page. We will try to highlight material changes.