Privacy Policy
Last updated: September 2026 · Effective immediately
Our privacy promise:
NELO collects only the information needed to match and apply you to courses: your account details and the documents you choose to upload. Documents are encrypted at rest, never sold, and only shared with a university when you submit an application to it. You can request deletion of your account and documents at any time.
1. Information We Collect
To provide tailored higher education matching and direct university application submission, we collect:
- Account Credentials: Name, email address, password hash, and account role.
- Academic Profile: Prior degrees, grade point averages, target field of study, and destination preferences.
- Application Documents: Transcripts, standardized test scores (e.g. IELTS/TOEFL/GRE), letters of recommendation, and personal statements that you explicitly choose to upload.
- Usage & Device Metrics: Browser type, search queries, IP address, and anonymized platform interaction metrics.
2. How We Use Your Data
Your personal data is used solely to:
- Calculate AI match scores against published university admission criteria.
- Transmit verified applications directly to institutions you explicitly authorize.
- Send important deadline reminders, scholarship notifications, and visa updates.
- Prevent abuse, protect platform security, and ensure document authenticity.
3. Encryption & Storage
All student records and uploaded academic documents are encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. Access to document storage is restricted to authenticated services and audited under ISO/IEC 27001 security standards.
4. Data Sharing & Third Parties
We do not sell, rent, or trade your personal data with third-party advertisers. Your information is shared only with:
- Admissions Offices: The specific universities or colleges to which you choose to apply.
- Authorized Partners: If you register under an authorized recruitment partner, your assigned counselor can view your application progress.
- Infrastructure Providers: Secure cloud infrastructure providers operating under strict data processing agreements compliant with GDPR and UK GDPR.
5. Your Rights & Account Deletion
Under global privacy standards including GDPR and UK GDPR, you have the right to access, rectify, export, or permanently delete your personal information. You can request deletion of your account and all associated documents directly through your account dashboard or by emailing our Data Protection Officer at privacy@nelo.education.
6. Contact Our Privacy Team
If you have questions about this Privacy Policy or how your documents are managed, please reach out to:
NELO Privacy & Data Governance Team
Email: privacy@nelo.education