This Privacy Policy explains how GradNexa collects, uses, stores, and protects your personal information when you use our website, dashboard, application-matching tools, scholarship search tools, CV analysis features, and related services.
GradNexa is operated by Emmanuel Oloyede. For data protection purposes, GradNexa is the controller of the personal information described in this policy.
GradNexa is designed to help prospective students discover Master's programmes, PhD positions, scholarships, fellowships, and other academic opportunities that may match their profiles.
When you create a GradNexa account, we collect:
Your password is handled through Supabase Auth. GradNexa does not have access to or store your password in plain text. Supabase stores authentication credentials using secure password-protection methods.
We collect the academic and application information you provide, which may include:
You may upload a CV in PDF format.
Your CV may contain information such as your:
CV upload is optional, but some fit-analysis features may work less effectively without it.
Please do not upload passports, national identity documents, banking information, medical records, passwords, or other information that is not needed for academic opportunity matching.
You should also avoid including sensitive personal information in your CV unless it is genuinely necessary.
When you search for programmes or scholarships, we may collect:
When you contact GradNexa through the website or by email, we may collect:
GradNexa and its service providers may automatically process limited technical information necessary to operate and secure the service, such as:
GradNexa does not currently use this information for behavioural advertising.
We use your information to:
We do not sell your personal information.
We do not use your CV or academic profile for third-party advertising.
We do not allow advertisers to use your profile to target advertisements.
GradNexa uses artificial intelligence to analyse user profiles, interpret CV information, compare applicants with opportunity requirements, and generate personalised recommendations.
When you request a fit analysis or opportunity search, relevant parts of your academic profile and CV may be sent to Google's Gemini API.
The information sent may include:
GradNexa should be configured to use a Gemini API service connected to an active Google Cloud billing account and covered by Google's applicable data-processing terms.
Google may temporarily log prompts and responses for security, abuse prevention, legal compliance, and enforcement of its usage policies. GradNexa does not permit Google to use information submitted through its paid Gemini API service to train or improve Google's general artificial-intelligence products.
GradNexa may also use Google Search grounding or Tavily to retrieve current information from publicly available websites.
Where Tavily is used, GradNexa aims to send only search criteria needed to locate relevant opportunities, such as:
GradNexa does not intentionally include your name, email address, or complete CV file in Tavily search queries.
Search providers and institution websites may receive search terms and standard technical request information when searches are performed.
GradNexa uses automated profiling to compare your academic background with the publicly stated requirements of programmes and scholarships.
The system may consider information such as:
The resulting match score is an estimate intended to help you prioritise opportunities.
It is not an admission decision, scholarship decision, employment decision, or guarantee of acceptance.
GradNexa does not make decisions that legally bind universities, scholarship providers, employers, governments, or funding organisations. Those organisations make their own independent decisions.
You should confirm all eligibility conditions, funding information, requirements, and deadlines directly with the relevant institution before applying.
Where the General Data Protection Regulation or similar data protection law applies, GradNexa relies on the following legal bases.
We process information necessary to:
We may rely on your consent when:
You may withdraw your consent at any time. Withdrawal does not affect processing that lawfully occurred before the consent was withdrawn.
We may process limited information where necessary for our legitimate interests in:
We will not rely on legitimate interests where your fundamental rights and freedoms override those interests.
We may process or retain information where necessary to comply with applicable laws, regulatory requirements, court orders, or lawful government requests.
GradNexa uses third-party service providers to operate the platform.
Supabase provides:
Your account information, academic profile, and uploaded CV may be stored through Supabase.
Google's Gemini API processes relevant profile and CV information to:
Google Search grounding may also be used to retrieve current publicly available information.
Tavily may be used as a web-search provider when additional or fallback searches are needed.
Search queries are intended to be limited to information needed to find relevant academic opportunities.
We may disclose information to professional advisers, courts, regulators, law-enforcement bodies, or government authorities where required by law or reasonably necessary to establish, exercise, or defend legal rights.
We do not allow our service providers to use GradNexa user information for their own advertising purposes.
Some GradNexa service providers may process information outside France, the European Economic Area, Switzerland, or the United Kingdom.
This may include processing in countries whose data protection laws are different from those in your country.
Where legally required, GradNexa will use an appropriate transfer mechanism, which may include:
GradNexa will maintain appropriate agreements with service providers where required.
Your account, academic profile, and uploaded CV are stored using Supabase infrastructure in the region selected for the GradNexa project.
GradNexa uses access-control rules designed to prevent one user from accessing another user's private account information.
Access to personal information is limited to:
GradNexa uses reasonable technical and organisational measures designed to protect your information.
These measures may include:
No website or online storage system is completely secure. GradNexa cannot guarantee that unauthorised access, data loss, or cyberattacks will never occur.
You are responsible for maintaining the confidentiality of your login credentials and should notify GradNexa immediately if you believe your account has been compromised.
We retain your account, profile, CV, saved opportunities, and generated results while your account remains active.
Accounts that have not been used for 24 consecutive months may be treated as inactive.
GradNexa may delete or anonymise inactive accounts after this period. Where reasonably possible, we will send a notice to the registered email address before deleting an inactive account.
When you request account deletion:
Contact and support correspondence may be retained for up to 24 months after the relevant enquiry has been resolved, unless a longer period is legally required.
GradNexa uses browser storage and other strictly necessary technologies to:
Supabase Auth may use your browser's local storage to maintain your login session.
GradNexa does not currently use:
If GradNexa later introduces non-essential analytics or marketing cookies, this policy and the website's consent controls will be updated before those technologies are used where consent is required.
GradNexa may send essential emails concerning:
These messages are necessary to operate and protect your account.
GradNexa does not currently send third-party advertising emails.
If a separate email-delivery provider is introduced, this policy will be updated to identify that provider where required.
Depending on where you live, you may have the right to:
These rights are not absolute and may be subject to legal exceptions.
To exercise your rights, email privacy@gradnexa.online.
We may ask you to verify your identity before completing a request. We will respond within the period required by applicable law, normally within one month for requests covered by the GDPR.
If you are located in France, you may lodge a complaint with the Commission nationale de l'informatique et des libertés, commonly known as the CNIL.
You may also complain to the data protection authority responsible for your country or place of residence.
To request deletion of your account and associated information, email:
Use the subject line:
GradNexa Account Deletion Request
Please send the request from the email address connected to your GradNexa account.
Deletion requests include, subject to applicable legal exceptions:
You may request an export of the personal information associated with your account by contacting:
Where applicable, the information will be provided in a commonly used electronic format.
The Excel export generated through the GradNexa dashboard may contain only your opportunity shortlist and should not be treated as a complete personal-data export.
GradNexa is intended for prospective university and graduate-level applicants.
The service is not directed at children under 16, and we do not knowingly create accounts for or collect personal information from children under 16.
If you believe that a child under 16 has provided information to GradNexa, contact privacy@gradnexa.online so that the matter can be investigated and the information deleted where appropriate.
GradNexa search results may link to websites operated by:
GradNexa does not control those websites or their privacy practices.
When you leave GradNexa and visit another website, that website's own privacy policy applies.
GradNexa may update this Privacy Policy when:
The updated version will display a revised "Last updated" date.
For material changes that significantly affect how personal information is used, GradNexa will provide additional notice through the website, dashboard, or registered email address where appropriate.
For questions about this Privacy Policy, the use of your information, or your data protection rights, contact:
GradNexa Privacy
Data controller: Emmanuel Oloyede
Email: privacy@gradnexa.online
For general support enquiries: