Privacy policy.

Who we are

Eduuro (eduuro.com) is operated by Mindbalancer OÜ, a company registered in Estonia, European Union. We are the data controller for the personal data described here. Contact: hello@eduuro.com.

What we collect and why

Profile data - name, what you want to study and at which level, your education so far, start year, citizenship, where you live, year of birth, English level, other languages, the countries you would study in, skills, a summary, an optional budget and an optional LinkedIn address. You provide this to be listed in the register; that is the whole purpose of the service (contract basis, GDPR Art. 6(1)(b)).

Documents - files you choose to attach: a transcript, a diploma, a passport data page, a language certificate, a CV. They are stored in a private bucket in the EU and are shown only to a university that has opened your profile, through a link that expires after an hour. You can remove any document at any time.

Account data - your email address, used for signing in with one-time codes and for essential service messages, such as telling you when a university has opened your profile or written to you.

Payment data - none for being listed. Creating and keeping a profile is free. If you choose the optional Pro tools, or if a university subscribes, Stripe holds the card details; we store only the subscription status and a customer reference.

Pro tools data - letters you draft, the applications you track and the notes you write are stored so you can come back to them. They are yours, never shown to a university, and deleted with your account.

Messages - what a university writes to you and what you answer, so both of you can read the conversation later. Nobody else sees it.

Assistant conversations - what you type to the profile assistant is processed to fill in your profile. Messages are sent to Google (Gemini) or OpenAI for that one purpose and are not used by us for anything else. You can skip the assistant and type the same answers into the form.

Profile statistics - we count when a university sees your profile in search results or opens it, so we can show you real numbers. We do not use tracking cookies, do not build advertising profiles, and record nothing of this kind about visitors who are not signed in beyond standard server logs.

Who processes your data

We use a small number of processors: Supabase (database, hosted in Ireland, EU), Vercel (website hosting), Resend (email delivery, EU region), Stripe (university payments only) and Google or OpenAI (the profile assistant). Each receives only what it needs for its function.

Who can see your profile

Your study details - what you want to study, your level, your education so far, start year, citizenship, age, English level, languages, target countries, skills and summary - are shown to universities, colleges and schools searching the register. That is what being listed means. Agents and recruiters are not admitted as account holders.

Your contact details and documents are not in the search. Your email address, your LinkedIn if you gave one, and your documents are released to a single university at the moment it chooses to open your profile in order to contact you about studying there. They are never shown publicly, never included in a list and never handed over in bulk. We email you every time it happens and name the university.

You can switch this off. In your dashboard, under Privacy and data, the switch Let universities open my profile takes your profile out of the search and stops any new unlock. Universities that already opened your profile keep what they have. You can switch it back on at any time.

We never sell your data. We do not sell, rent or licence profiles, we do not sell the register as a list or a file, and we do not pass your data to advertisers. If we ever want to use your data for a new purpose, we will tell you first and ask.

How long we keep it

As long as you have an account. If you delete your account, your profile and your statistics are erased immediately. We keep one thing: the record that a university opened your profile while you were listed, without your profile attached, because that university already holds the address and we need the record for invoicing. Payment records on the university side are kept for seven years as tax law requires.

Delete your account or your data

1. Sign in at eduuro.com/login with the email you used for your profile.
2. Open Privacy and data in the menu.
3. Press Delete my account and type DELETE to confirm.

To change or remove only part of your data, edit it in the dashboard, or email hello@eduuro.com from your account address and we do it within 30 days.

Your rights

Under the GDPR you can access, correct, export and erase your data, and object to or restrict processing. Your dashboard has one-click Download my data and Delete my account. For anything else, email hello@eduuro.com. You also have the right to lodge a complaint with a supervisory authority - in Estonia, the Data Protection Inspectorate (Andmekaitse Inspektsioon).

Age

The register is for people aged 16 and over. If we learn that a profile belongs to somebody younger, we delete it. If you are under 18, tell a parent or guardian that you are listed here; a university that contacts you will ask the same.

Changes

If we materially change this policy, we notify you by email before the change takes effect.