Privacy Policy

Gaarsia Academic Advisory ("Gaarsia", "we", "us") is the data controller for personal data processed through www.gaarsia.com and the MyGaarsia web application (candidate, advisor, and founder portals). This policy explains what we collect, why we use it, and your rights under the GDPR and applicable national law.

Who this applies to

This policy covers website visitors, account holders, paying subscribers, assigned advisors where applicable, and anyone who contacts us at hello@gaarsia.com.

Data we collect

Depending on how you use the platform, we may process: account and profile data (name, email, authentication identifiers, questionnaire responses); uploaded documents (CV, transcripts, motivation letters, identity and funding evidence); subscription and payment metadata processed by Stripe (we do not store full card numbers); in-app messages between candidates and advisors; usage and security logs; and cookie or analytics data where you consent.

How we use data

We use personal data to provide the MyGaarsia platform, generate Pathway Score diagnostic and Pathway Pro roadmap report outputs, operate program search and document tools, process subscriptions, send service notifications, respond to support requests, maintain security, and improve the product. We do not sell personal data. We do not accept university placement commissions that would bias recommendations.

Lawful bases

We rely on: (a) contract performance (delivering the subscription you purchase); (b) legal obligation (tax, accounting, and regulatory records); (c) legitimate interests (security, fraud prevention, and product improvement, balanced against your rights); and (d) consent where required (non-essential cookies and certain analytics).

Automated processing and AI tools

Pathway scores, tier classifications, and report drafts are generated from your submitted profile data using structured assessment logic and platform intelligence. Document studio audits and the in-app AI assistant use automated processing to provide feedback. Outputs are advisory tools, not decisions about you with legal effect. You may contact hello@gaarsia.com to request human review of scoring outputs or to raise concerns about automated processing.

Processors and international transfers

We use vetted subprocessors including Supabase (database and authentication), Stripe (payments), Resend (transactional email), Vercel (application hosting), and, where you consent, Google Tag Manager and privacy-oriented analytics providers. Data is primarily processed in the EU. Where subprocessors process data outside the EU/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses where required.

Retention

We retain account and subscription records for as long as your account is active and for a reasonable period afterwards to handle billing disputes, legal claims, and regulatory obligations. If you cancel, you can still download submitted profile data and exports you created for up to 12 months, as described in our Terms. You may request deletion subject to legal retention requirements.

Your rights

You may request access, rectification, erasure, restriction, portability, or object to certain processing. Contact hello@gaarsia.com. We respond within one month unless an extension is permitted by law. You may lodge a complaint with the Danish Data Protection Agency (Datatilsynet) or your local supervisory authority.

Contact

Data protection enquiries: hello@gaarsia.com · Gaarsia Academic Advisory · Copenhagen, Denmark