Privacy Policy

1. Introduction

Scholagora ("Platform"), operated by GeeTL ("we", "us", "our"), is committed to protecting the privacy and security of our users. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our platform.

By using Scholagora, you consent to the data practices described in this policy.

2. Information We Collect

Information you provide directly:

• Account information: Name, email address, phone number, password, and role (student or employer).
• Profile information: University, skills, county, bio, portfolio URL, work experience, and education history.
• Organisation information: Company name, industry, and contact details (for employer accounts).
• Application data: Cover letters, CVs, and messages submitted through the Platform.
• Payment information: Payment details are processed by Paystack and are not stored on our servers.

Information collected automatically:

• Usage data: Pages visited, features used, and interactions with the Platform.
• Device information: Browser type, operating system, and screen resolution.
• Log data: IP address, access times, and referring URLs.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account.
• Match students with relevant internships and opportunities.
• Enable direct messaging between students and employers.
• Process premium subscription payments.
• Power AI features (CV generation, cover letter writing, AI Tutor chat).
• Send email notifications about applications, messages, and platform updates.
• Improve and personalise the Platform experience.
• Prevent fraud and ensure platform security.

4. Data Sharing

We do not sell your personal information. We may share your data with:

• Employers: When you apply for an internship, your profile, CV, and cover letter are shared with the posting employer.
• Service providers: We use third-party services for email delivery, payment processing (Paystack), and AI features (Groq). These providers process data on our behalf under strict confidentiality agreements.
• Legal requirements: We may disclose information if required by law, regulation, or legal process in Kenya.

5. AI-Powered Features

Scholagora uses AI services to provide features like:

• AI-generated cover letters and CVs.
• AI Tutor chat for academic and career support.

When you use these features, your prompts and relevant profile data are sent to our AI provider (Groq) for processing. We do not use your data to train AI models. AI-generated content is stored in your account for your convenience.

6. Cookies & Local Storage

We use session cookies to keep you logged in and maintain your preferences. We do not use third-party advertising cookies. You can disable cookies in your browser settings, though this may affect Platform functionality.

7. Data Security

We implement reasonable security measures to protect your data, including:

• Password hashing using industry-standard algorithms.
• HTTPS encryption for all data in transit.
• CSRF protection on all forms and API endpoints.
• Access controls limiting data access to authorised personnel only.

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law.

9. Your Rights

Under the Kenya Data Protection Act (2019), you have the right to:

• Access: Request a copy of your personal data.
• Correction: Update or correct inaccurate information.
• Deletion: Request deletion of your personal data.
• Portability: Receive your data in a structured, commonly used format.
• Object: Object to processing of your data for certain purposes.

To exercise any of these rights, please contact us at info@scholagora.com.

10. Children's Privacy

Scholagora is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes via email or a prominent notice on the Platform. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us: