This Privacy Policy (“Policy”) governs the manner in which InsightEd (“we”, “us”, or “our”) collects, uses, stores, discloses, and protects the personal data of individuals (“Users”, “you”, or “your”) who access or utilize the services provided through our platform, including prospective university applicants (“Students”) and university student consultants (“Mentors”).

This Policy is issued in accordance with applicable data protection laws, including but not limited to the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

1. Scope of this Policy

This Policy applies to all personal data collected and processed by InsightEd in connection with your use of our services, including data collected via our website, platform interfaces, communication systems, and third-party integrations.

2. Categories of Personal Data Collected

2.1 Data Provided Directly by the User: Full name, email address, password, profile information (including educational background, country of residence, spoken languages, and profile photographs), payment details, session-related data (bookings, notes, uploaded materials, messages, feedback), and Mentor application data (CV/resume, university and program details, availability).

2.2 Automatically Collected Data: IP address, browser type, operating system, device identifiers, log data (timestamps of access, session activity, navigation history), location data (approximate, IP-based), cookies and tracking technologies.

3. Legal Bases for Processing

InsightEd processes your personal data under one or more of the following lawful bases as provided by Article 6 of the GDPR: performance of a contract, legitimate interests, compliance with legal obligations, or consent where explicitly provided.

4. Purposes of Data Processing

Your personal data may be used for the following purposes: account creation and maintenance, facilitate and administer sessions, payment processing, communication regarding sessions and platform updates, marketing (with consent), platform optimization, legal and compliance activities.

5. Data Sharing and Third-Party Access

We do not sell personal data. However, limited sharing may occur with service providers (e.g., payment processors, communication platforms) strictly for operational purposes. All third-party providers are contractually obligated to safeguard your data.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to maintain secure sessions, remember preferences, analyze usage, and improve user experience. You may control cookie settings via your browser.

7. Data Retention

Personal data is retained only as long as necessary to fulfill the purposes outlined or as required by law. Upon request or account deletion, your data will be deleted or anonymized unless retention is legally necessary.

8. Data Subject Rights under GDPR

If you are in the EU/EEA, you have rights to access, rectification, erasure, restriction of processing, data portability, objection, and withdraw consent. To exercise these rights, contact us at support@insighted.com.

9. Changes to This Policy

We may amend this Policy at any time. Changes will be posted on our website and communicated via email or platform notifications.

10. Contact Information

For questions or concerns regarding this Policy or your personal data, please contact: support@insighted.com.