Privacy Policy

1. Who we are

Gobroadpath ("we", "us" or "our") is a study-abroad planning and admissions-support platform. Our mission is to help students research universities, build their profiles, draft essays and statements of purpose, and manage their entire application timeline in one workspace. Gobroadpath is operated by Gobroadpath, with its principal place of business at 19/38 Scarborough Beach Road, North Perth, WA6006, Australia. For any privacy questions, contact us at privacy@gobroadpath.com.

This Privacy Policy explains how we collect, use, store, share and protect your personal data when you use the Gobroadpath website, dashboard, AI copilot, WhatsApp receptionist and related services (together, the "Services"). Please read it carefully. By using Gobroadpath, you agree to the practices described here.

2. Data we collect

We collect only the information we need to deliver the Services and improve your experience. The categories include:

• Account and contact data: name, email address, phone number, password hash, authentication provider tokens (for example Google OAuth), and account settings.
• Profile and academic data: home country, target countries, intended degree level, field of study, target intake, academic history, test scores, work or research experience, budget range, career goals and any other information you choose to add to your profile.
• Application data: universities and programs you shortlist, application statuses, deadlines, tasks, notes, and related workflow information.
• Documents and essays: files and drafts you upload, such as transcripts, diplomas, CVs, recommendation letters, test results, financial documents, portfolios, essays and statements of purpose.
• Communication data: messages you exchange with our AI copilot, our WhatsApp receptionist "Maya", and human counsellors or mentors through the platform; counsellor appointment details and session notes.
• Payment data: billing information and transaction records processed by Stripe, our payment processor. We do not store full payment card numbers.
• Usage and technical data: IP address, browser type, device information, pages visited, feature interactions, crash logs and cookies or similar technologies that help us keep the platform secure and performant.

3. How we use your data

We use your data to operate, maintain and improve Gobroadpath, and to give you relevant admissions guidance. Specific purposes include:

• Creating and securing your account and authenticating your identity.
• Matching your profile to universities and programs, generating shortlists and estimating fit.
• Powering the AI copilot so it can answer questions, review essays, suggest next steps and help you manage deadlines.
• Connecting you with human counsellors and mentors, scheduling sessions, and sharing relevant context so you do not have to repeat yourself.
• Processing payments, managing subscriptions, free trials and billing support.
• Running the WhatsApp receptionist to answer questions, book or reschedule appointments, and route urgent requests.
• Sending service updates, deadline reminders and, where you consent, marketing communications.
• Detecting fraud, abuse and security risks; complying with legal obligations.

Our AI tools process the information you provide to give coaching-style assistance. They do not invent achievements or qualifications. You remain responsible for the accuracy of your application materials.

4. Legal basis for processing

We process personal data on the following legal bases:

• Performance of a contract: to provide the Services you signed up for, including profile building, application tracking and counsellor sessions.
• Consent: where required, for example for marketing messages or optional cookies. You may withdraw consent at any time.
• Legitimate interests: to keep our platform secure, prevent fraud, improve features and support users, provided those interests are not overridden by your rights.
• Legal obligation: to comply with applicable law, court orders or regulatory requests.

5. Who we share data with

We do not sell your personal data. We share information only when necessary and with appropriate safeguards:

• Counsellors and mentors: authorised Gobroadpath counsellors and mentors can see the profile, application and document data they need to support you. They cannot access other students' data.
• Service providers: we use trusted third parties for hosting, authentication, database services, payment processing, AI inference, analytics, email and WhatsApp messaging. Current categories include cloud infrastructure (Lovable Cloud / Supabase), payment processing (Stripe), AI providers and messaging gateways (WhatsApp Business / Twilio / Meta).
• Legal and safety: we may disclose data if we believe it is necessary to comply with law, protect our rights, prevent fraud or harm, or respond to a lawful request.
• Business transfers: if Gobroadpath is involved in a merger, acquisition or sale of assets, your data may be transferred as part of that transaction, subject to confidentiality obligations.

6. International data transfers

Gobroadpath students and universities are located worldwide. Your data may be stored or processed in countries other than your own, including the United States and the European Union. We rely on appropriate safeguards, such as Standard Contractual Clauses and equivalent mechanisms, to protect your data when it crosses borders.

7. Data retention

We keep your data for as long as your account is active or as needed to provide the Services. If you delete your account, we will remove or anonymise your personal data within a reasonable period, except where we need to retain it for legal, security, fraud-prevention or accounting purposes. Specific retention periods depend on the type of data and applicable legal requirements. Contact us for more detail.

8. Your rights

Depending on where you live, you may have rights over your personal data, including:

• Accessing the personal data we hold about you.
• Correcting inaccurate or incomplete data.
• Deleting your account and personal data in certain circumstances.
• Restricting or objecting to certain processing.
• Receiving your data in a portable format.
• Withdrawing consent where processing is based on consent.
• Lodging a complaint with a data protection authority.

To exercise these rights, email us at privacy@gobroadpath.com. We will respond within the timeframe required by applicable law.

9. Security

We protect your data using industry-standard security measures, including encryption in transit, access controls, row-level security in our database, role-based permissions for staff and counsellors, and regular security reviews. No system is completely secure, and we encourage you to use a strong password and keep your account credentials private.

10. Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember your preferences (such as language), understand how the platform is used, and improve security. You can manage cookie preferences through your browser settings. Essential cookies required for the Services to function cannot be disabled.

11. Children

Gobroadpath is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on the platform before the changes take effect. The "Last updated" date at the top of this page shows when the policy was last revised.

13. Contact us

If you have questions, concerns or requests about this Privacy Policy or how we handle your data, please contact:

Gobroadpath
19/38 Scarborough Beach Road, North Perth, WA 6006, Australia
Email: privacy@gobroadpath.com

We will do our best to resolve your concern promptly.