Privacy Notice

1. Personal data we collect

• Identity and contact data: name, email address.
• Account data: login details, session records.
• Assessment and profile data: career assessment answers, dimension scores, academic profile information (GPA, exam scores, language level, budget and country preferences).
• Support data: messages you send to us.
• Technical data: IP address, device identifiers, browser information, usage logs.

2. Purposes of processing and legal basis

• Creating your account and providing the service — performance of a contract.
• Generating career, field and university matches — performance of a contract.
• Sending result and notification emails — performance of a contract / explicit consent.
• Security, abuse and fraud prevention — legitimate interest.
• Product development and service quality improvement — legitimate interest.
• Marketing communications — only with your explicit consent; you may withdraw it at any time.
• Complying with legal obligations — legal obligation.

3. Sharing of data

• Service providers / processors: hosting, database, email delivery and analytics tools.
• Merchant of record: Paddle.com, for payments, subscription management, tax compliance and billing.
• Professional advisers: legal and accounting services.
• Competent authorities: where legally required.

4. International transfers

Our service providers may be located outside Türkiye (including in the EU/EEA and the US). In such cases, transfers are carried out under appropriate safeguards such as standard contractual clauses (SCCs) or adequacy decisions.

5. Retention period

We retain data for as long as your account is active and for any applicable statutory retention periods. When you delete your account, your assessment and profile data will be deleted or irreversibly anonymised within a reasonable period. Invoicing and accounting records are retained for the legally required period.

6. Your rights

You have the right to access, correct and delete your data, to restrict processing, to data portability, to object to processing, and to withdraw your consent. You may also lodge a complaint with the competent supervisory authority. You can submit your requests to destek@unirivo.live; we respond to requests within one month at the latest.

7. Security

We apply appropriate technical and administrative measures to protect data, including encryption in transit and at rest, access controls, authorisation policies and regular security reviews.

8. Cookies

We use essential cookies for sessions and security. We may use analytics cookies to measure usage; marketing cookies are used only with your consent. You can manage your preferences in your browser settings and reject non-essential cookies.

9. Contact

Data controller: Unirivo — destek@unirivo.live