Privacy notice

Who controls your information

Roavit, the operator of roavit.com, controls the personal information described here. Privacy questions and rights requests can be sent to hello@roavit.com.

What we collect

• Your name, email address, password hash, active-session details and email-verification status.
• Your passports, country of legal residence, intended destination and purpose, applications, family/dependant profiles, selected routes, dates, checklist progress, coverage requests, eligibility answers and acknowledgements.
• Documents you choose to place in the vault, their expiry/translation/certification status, and profile details you review and confirm after CV extraction.
• Support requests and complaints you send us, and device push-subscription details when you explicitly turn on device alerts.
• If you enter a professional pilot: claimed regulator, registration, jurisdictions, review history, services, availability, booking and engagement messages, complaints and dispute records.
• If you use an organisation pilot: team membership, role, institution records, consented referrals, status updates, contract/API configuration and privacy-thresholded usage records.
• If you submit an outcome report: its route, date, context, moderation state, duplicate/fraud checks and any proportionate evidence later requested through a controlled private process.
• Versioned policy choices and limited privacy-screened product events, security, rate-limit, delivery, performance and administrative audit records needed to operate, improve and protect the service.

Screenshots supplied to the route assistant are processed for the answer and are not stored by Roavit. When you ask Roavit to tailor a CV or application draft, it uses only the confirmed profile, saved answers and vacancy you select after you explicitly approve that use. Roavit records the exact purpose and version of that approval. Passport numbers, passport images, signatures and unrelated vault documents are not inserted into a CV. Failed generation attempts do not consume a paid allowance. Roavit does not request payment through WhatsApp and does not sell personal information.

Why we use it

We use account, journey, route and vault information to match source-linked guidance to the circumstances you provide, prioritise new coverage, and provide the service you request; security and operational information to protect Roavit and prevent abuse; and optional email or device alerts with your choice or consent. Immigration eligibility outputs explain published rules and are not automated visa decisions.

Service providers and international processing

Roavit uses Hetzner for application hosting, Amazon Web Services for email delivery, event handling and encrypted database backups, and Anthropic for the route assistant. Information may therefore be processed outside your country under the safeguards applicable to those providers and contracts.

Professional and organisation sharing

Roavit shares information with an adviser, university, employer or data customer only for an activated service and within the recorded role, contract and consent. A referral covers only the selected organisation, record and stated purpose. Roavit does not send unrelated vault documents. Professional and organisation users receive only the information their authorised workflow permits, and their actions are audited. Public community reports exclude account identity and submitted evidence.

Documents and security

Vault documents are encrypted at rest with authenticated encryption. Access is restricted to the signed-in owner. A subscription may control new uploads or new document processing, but you can still retrieve, export and delete documents already held for you after a paid plan expires. No internet service can promise absolute security, so upload only what you need and delete documents you no longer need.

Retention

Account information remains while your account is active. Deleting the account removes its live account records and encrypted vault files, subject to records that must be retained for an unresolved complaint, fraud prevention, legal claim, contract, payment or regulatory obligation. Pending or published community reports can be withdrawn from the account; the public copy is removed while a minimal audited withdrawal record may remain. Professional review, organisation membership, consent, booking, dispute and API security records are retained only for their operational or legal purpose and must be covered by the final externally reviewed retention schedule. Continuous database backups expire after approximately 72 hours; operational backups may retain deleted records for up to 30 days before expiry. Delivery suppressions and minimal security records may be retained where necessary to prevent unwanted messages, fraud or abuse.

Your choices and rights

You can turn device alerts off, unsubscribe from optional update email, delete individual documents, download a structured copy of your information from My Roavit, review active sessions, and delete or request deletion of your account. Depending on where you live, you may also ask to access, correct, restrict, object to, erase or receive a copy of your personal information, and complain to your data-protection regulator.

Children

Roavit is designed for people independently planning international study and migration routes. We do not knowingly use children’s information for advertising or profiling. If a person under 18 may use the service, contact us before uploading identity or financial documents so appropriate safeguards can be considered.

Changes

Material changes will be shown in the product or sent to the verified account email. The effective date above will be updated.