Document Privacy

1. Why this policy exists

Applications require highly sensitive documents — passport copies, academic records, financial proof and identity photos. This policy explains the extra protections we apply to those files, beyond our general privacy policy.

2. Private storage

• Uploaded documents are stored in a private, non-web-accessible directory on our servers. There is no public URL that leads to your files.
• Files are never indexed by search engines and never attached to public pages.

3. Proxied downloads — no direct links

• Documents are never linked directly. Every view or download goes through a secure download script that checks your login session and permissions before serving the file.
• Sharing a download link with someone else does not give them access — the script re-verifies the viewer's identity and rights on every request.

4. Admin-only and role-based access

• Only authorized staff (administrators and assigned admissions staff) can open applicant documents, and only as needed to process applications.
• Students can view and manage their own documents; agents can view documents of students they represent.
• Universities receive the documents attached to applications submitted to their programs.
• Access events can be recorded in audit logs.

5. What we ask from you

• Upload only the documents requested — do not include unrelated sensitive data (such as full bank account credentials) in your files.
• Keep your account credentials private and log out on shared devices.
• Report anything suspicious to us via the contact page.

6. Retention and deletion

Documents are kept for as long as needed to process your applications and meet legal obligations. You may request deletion of your documents by contacting us; files required for legal or audit purposes may be retained in restricted form.

7. Contact

Questions about document handling: contact us.