EuroDesk OS ("we", "our", or "us") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use our platform at eurodesk.io.
When you create an account, we collect your email address, name, and agency name. Authentication is handled by secure third-party authentication services. We do not store passwords directly — they are hashed and managed by our authentication provider.
As an agency user, you may upload student information including names, email addresses, nationalities, target countries, and academic transcripts. This data is stored in an encrypted cloud-hosted database and is scoped to your agency account using Row Level Security (RLS).
Transcript files (PDF, PNG, JPG) and visa-related documents are stored in private cloud-hosted object storage buckets within the European Union. Files are organized by agency ID and student ID and are only accessible to authenticated users within the same agency. Data is encrypted at rest and in transit.
We use cookies and may collect anonymous usage analytics to improve our platform, including page views, feature usage patterns, and performance metrics. This data does not identify individual users. You can manage your cookie preferences at any time through the Cookie Preferences page in your dashboard settings. Necessary cookies for authentication and security are always enabled.
For the purpose of business outreach and lead generation, we collect publicly available information about study-abroad agencies, universities, and their staff. This includes agency names, professional email addresses, countries of operation, and website URLs. This data is collected from publicly available sources such as agency websites, professional directories, and online forums. We process this data under our legitimate interest (GDPR Art. 6(1)(f)) to promote our B2B platform to potential customers. Every marketing email includes an unsubscribe link, and you may opt out at any time.
We monitor public online forums and communities related to study abroad and international education for posts relevant to our services. We may collect publicly posted information such as usernames and post content to determine relevance. When relevant, we may reply publicly or send direct messages. This processing is based on our legitimate interest to identify and engage with potential users who have publicly expressed interest in study-abroad services.
We maintain a LinkedIn company page and may collect publicly available professional information from LinkedIn profiles for business outreach purposes. When you interact with our LinkedIn content or connect with us through the platform, we may process your publicly visible profile information (name, title, company) for legitimate business purposes. This data is processed under our legitimate interest (GDPR Art. 6(1)(f)).
We utilize specialized third-party service providers (sub-processors) to deliver various features of the platform. A full, up-to-date list of our sub-processors, their roles, and data processing locations is maintained in our Data Processing Agreement.
When you upload a transcript or request content generation, data is processed by third-party AI infrastructure providers. This data is used to extract academic information, generate matching reports, or create educational content. These providers process data as sub-processors under our agreement. Transcripts are typically processed in-memory and are not used by the providers to train their models.
We use enterprise-grade cloud infrastructure providers to provide our database, authentication, backend API, and frontend hosting. All data is encrypted in transit and at rest using industry-standard protocols (HTTPS/TLS and AES-256).
We use analytics and monitoring services to understand how our platform is used and to resolve technical errors. These services collect anonymous usage patterns, performance metrics, and error logs to help us improve the service.
Student documents and uploaded transcripts are stored in private cloud-hosted object storage. We use global security services to protect our platform from automated attacks, bot activity, and fraudulent behavior.
We use specialized email service providers for transactional and marketing communications. Email addresses and message content are processed strictly for delivery and deliverability tracking purposes. Every marketing email includes a clear unsubscribe option.
Payment processing is handled by secure third-party payment gateways. Financial details, including credit card numbers, are never stored on EuroDesk OS infrastructure. These providers process data under their own strict privacy policies and PCI DSS compliance standards.
We use third-party data enrichment services to facilitate prospect discovery and university information enrichment. These services only process publicly available information.
We implement industry-standard security measures to protect your data:
In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where feasible. We will also notify affected users without undue delay if the breach is likely to result in a high risk to their rights and freedoms.
We do not sell, trade, or rent your personal data. We may share data only in the following circumstances:
We retain your data for as long as your agency account is active. You may delete student records, transcripts, and documents at any time through the platform. You may delete your entire agency account and all associated data at any time through the Settings page in your dashboard. Alternatively, contact us at support@eurodesk.io. Upon termination, all data is deleted within 30 days, with backup copies removed within 90 days.
Depending on your location, you may have the following rights:
You can exercise your rights directly through the platform:
To exercise any of these rights via email, contact us at support@eurodesk.io. We will respond within 30 days.
Every marketing and outreach email we send includes an unsubscribe link at the bottom. Clicking this link will immediately remove your email address from our mailing list. You will not receive any further marketing emails from us. If you have received an email from us and wish to stop receiving them, use the unsubscribe link in that email. Alternatively, you can contact us at support@eurodesk.io to request removal.
EuroDesk OS is a global platform available to agencies worldwide, specializing in European university admissions, ECTS requirements, and European visa compliance. We comply with the General Data Protection Regulation (GDPR) and apply its principles to all users regardless of location. We act as a data processor for the student data you upload, while you (the agency) act as the data controller. Our legal basis for processing is the performance of our service agreement with you. See our Data Processing Agreement for full details.
EuroDesk OS is a B2B platform intended for use by authorized agency personnel. We do not knowingly collect personal data from children under 16. Student data processed through our platform is provided by agencies in the course of their professional services. Agencies are responsible for obtaining proper consent from students (or their parent/guardian if under 16) before uploading their data.
The majority of your data is processed and stored within the European Economic Area (EEA) — specifically in Frankfurt, Germany. This includes your database, authentication, file storage, object storage, frontend hosting, analytics, error monitoring, security services, and backend API.
Limited data transfers outside the EEA occur only for:
For all transfers outside the EEA, we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs). For a complete list of providers and their processing locations, please refer to our Data Processing Agreement.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date. We encourage you to review this policy periodically.
If you have any questions about this Privacy Policy or our data practices, please contact us: