Privacy Policy

1. Scope and Controller

This Privacy Policy explains how ProfileSity handles personal information across its global platform and enabled modules.

ProfileSity is the primary organisation responsible for personal information processed for account management, platform security, verification, payments, recommendations, product analytics and support. A local ProfileSity affiliate may act as controller where identified in a local notice or contract.

Universities, agencies, course providers, event organisers, sellers and pickup providers may act as independent controllers for information they receive and use for their own purposes.

2. Information We Collect

2.1 Account and Identity Information

• Name, username, email, phone, password or authentication data
• Age or date of birth, country, city, language and profile image
• Identity, selfie, business, licence, accreditation and authorisation documents where verification is required

2.2 Student and Education Information

• Education history, grades, GPA, transcripts, test scores and work experience
• Target destinations, programs, budget, intake, scholarship and support preferences
• Applications, offers, interviews, examinations, enrolment and visa-related status information

2.3 Institutional and Agency Information

• Organisation profile, campuses, programs, accreditations, staff accounts and permissions
• Business registration, licences, university authorisations, billing details and performance metrics

2.4 Documents and Sensitive Information

• Passports, identity records, financial evidence, statements, recommendation letters, academic records and test reports
• Biometric or facial information only where a separately disclosed verification feature is enabled and lawful

2.5 Technical and Usage Information

• IP address, device, browser, operating system, identifiers, session records and approximate location
• Searches, clicks, page views, feature use, error logs, fraud indicators and security events

3. How We Use Information

• Create, authenticate and manage accounts
• Process applications, registrations, bookings and payments
• Provide AI-powered recommendations, readiness scores and matching
• Enable communication between students, universities and advisors
• Deliver courses, events, expos and virtual sessions
• Verify identities, institutions and credentials
• Prevent fraud, abuse and security threats
• Improve platform features and user experience
• Comply with legal obligations
• Send service updates and relevant communications

4. Legal Bases for Processing

We process personal information based on:

• Contract: To provide services you've requested
• Consent: Where you've given explicit permission
• Legitimate Interests: For platform security, fraud prevention and service improvement
• Legal Obligation: To comply with applicable laws

5. Sharing Information

We may share information with:

• Universities and agencies you apply to or connect with
• Course providers and event organisers you register with
• Service providers who help operate our platform
• Payment processors for transactions
• Verification partners for identity and credential checks
• Legal authorities when required by law

6. International Transfers

ProfileSity operates globally. Your information may be transferred to and processed in countries other than your own. We implement appropriate safeguards for international transfers, including standard contractual clauses and other legal mechanisms where required.

7. Data Retention

We retain personal information for as long as necessary to provide services, comply with legal obligations, resolve disputes and enforce agreements. Retention periods vary based on the type of information and applicable legal requirements.

When you delete your account, we will delete or anonymise your information unless retention is required for legal, accounting, safety or dispute purposes.

8. Your Rights

Depending on your location, you may have rights to:

• Access your personal information
• Correct inaccurate information
• Delete your information
• Restrict or object to processing
• Data portability
• Withdraw consent
• Lodge a complaint with a supervisory authority

To exercise your rights, contact us at privacy@profilesity.com.

9. Security

We implement technical and organisational measures to protect personal information, including encryption, access controls, security monitoring and regular assessments. However, no system is completely secure, and we cannot guarantee absolute security.

10. Children

ProfileSity is not intended for children under 13. Users between 13 and 17 may use age-appropriate features with parental involvement where required. We do not knowingly collect personal information from children without appropriate consent.

11. Contact

For privacy-related questions or requests: