EuroDesk OS ("we", "our", or "us") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use our platform at eurodesk.io.
When you create an account, we collect your email address, name, and agency name. Authentication is handled by Supabase Auth. We do not store passwords directly — they are hashed and managed by Supabase.
As an agency user, you may upload student information including names, email addresses, nationalities, target countries, and academic transcripts. This data is stored in a PostgreSQL database hosted by Supabase and is scoped to your agency account using Row Level Security (RLS).
Transcript files (PDF, PNG, JPG) and visa-related documents are stored in private Supabase Storage buckets. Files are organized by agency ID and student ID and are only accessible to authenticated users within the same agency.
We use cookies and may collect anonymous usage analytics to improve our platform, including page views, feature usage patterns, and performance metrics. This data does not identify individual users. You can manage your cookie preferences at any time through the Cookie Preferences page in your dashboard settings. Necessary cookies for authentication and security are always enabled.
When you upload a transcript, the file is sent to Google Vertex AI for parsing. The AI extracts course names, grades, credits, and GPA information. Google processes this data as a sub-processor under our agreement. Uploaded files are not stored by Google and are only used for the purpose of parsing. We may update the underlying AI model from time to time to improve accuracy and performance.
Supabase provides our database, authentication, and file storage infrastructure. All data is encrypted in transit and at rest. Supabase operates under SOC 2 Type II compliance.
Our frontend application is hosted on Vercel. Vercel may collect standard server logs for operational purposes.
Our backend API is hosted on Google Cloud Run. Standard infrastructure logs are collected for monitoring and debugging purposes.
We implement industry-standard security measures to protect your data:
In the event of a personal data breach, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where feasible. We will also notify affected users without undue delay if the breach is likely to result in a high risk to their rights and freedoms.
We do not sell, trade, or rent your personal data. We may share data only in the following circumstances:
We retain your data for as long as your agency account is active. You may delete student records, transcripts, and documents at any time through the platform. You may delete your entire agency account and all associated data at any time through the Settings page in your dashboard. Alternatively, contact us at support@eurodesk.io. Upon termination, all data is deleted within 30 days, with backup copies removed within 90 days.
Depending on your location, you may have the following rights:
You can exercise your rights directly through the platform:
To exercise any of these rights via email, contact us at support@eurodesk.io. We will respond within 30 days.
EuroDesk OS is a global platform available to agencies worldwide, specializing in European university admissions, ECTS requirements, and European visa compliance. We comply with the General Data Protection Regulation (GDPR) and apply its principles to all users regardless of location. We act as a data processor for the student data you upload, while you (the agency) act as the data controller. Our legal basis for processing is the performance of our service agreement with you. See our Data Processing Agreement for full details.
EuroDesk OS is a B2B platform intended for use by authorized agency personnel. We do not knowingly collect personal data from children under 16. Student data processed through our platform is provided by agencies in the course of their professional services. Agencies are responsible for obtaining proper consent from students (or their parent/guardian if under 16) before uploading their data.
The majority of your data is processed and stored within the European Economic Area (EEA) — specifically in Frankfurt, Germany. This includes your database, authentication, file storage, frontend hosting, and backend API.
Limited data transfers outside the EEA occur only for:
For all transfers outside the EEA, we ensure appropriate safeguards:
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date. We encourage you to review this policy periodically.
If you have any questions about this Privacy Policy or our data practices, please contact us: