Privacy Policy
1. What we collect
- Account data — your name, email address and a password stored only as a bcrypt hash. We never store your password in readable form.
- Profile data — the education history, grades, budget, target countries and language test results you choose to enter.
- Documents — transcripts, certificates, CVs, language test reports and statements that you upload. Documents are stored against your account and are not publicly accessible.
- Usage data — records of actions taken in the platform, used for audit and for showing you your own application history.
2. How we use it
Your data is used to build your eligibility and match results, prepare your applications, and show you your own progress. We do not sell your personal data, and we do not use your documents for advertising.
3. Your documents
Uploaded documents are private to your account. They are served only to you, after authentication, and are not exposed at predictable public URLs. You can request deletion at any time (see section 6).
4. Third-party processors
We use a small number of service providers to run the platform, including a cloud database provider (Render), a hosting provider (Hostinger), an email delivery provider (SendGrid) and, where you choose to use a feature that requires it, a payment processor (Stripe). If you sign in with Google, Google receives the request necessary to authenticate you. Each provider sees only what is needed to perform its function.
5. AI processing
Where a document is analysed, its contents are sent to a language model provider for extraction. This is used to pre-fill fields you can then correct. Automated output is never treated as a final decision about your admission and you can always edit it.
Face matching is disabled. Arqeliva does not perform biometric face matching and does not process biometric identifiers.
6. Retention and deletion
We keep your data while your account is active. You may request deletion of your account and documents by writing to the address on our Contact page, and we will remove them. Aggregated, non-identifying audit records may be retained for security purposes.
7. Your rights
You may request access to, correction of, or deletion of your personal data. Contact us and we will respond.
8. Changes
If this policy changes materially we will update the date at the top of this page.