Privacy notice

Who controls your information

ROAVIT LTD (company number 17422970), registered in England and Wales. Contact: [email protected]. Postal address: 22 West Park Drive, Blackpool, FY3 9DN.

Privacy questions, complaints and rights requests can be sent to the contact address above.

What we collect

• Your name, email address, password hash, active-session details and email-verification status.
• Your passports, country of legal residence, intended destination and purpose, applications, family/dependant profiles, selected routes, dates, checklist progress, coverage requests, eligibility answers and acknowledgements.
• Documents you choose to place in the vault, their expiry/translation/certification status, and profile details you review and confirm after CV extraction.
• Support requests and complaints you send us, and device push-subscription details when you explicitly turn on device alerts.
• If you enter a professional pilot: claimed regulator, registration, jurisdictions, review history, services, availability, booking and engagement messages, complaints and dispute records.
• If you use an organisation pilot: team membership, role, institution records, consented referrals, status updates, contract/API configuration and privacy-thresholded usage records.
• If you submit an outcome report: its route, date, context, moderation state, duplicate/fraud checks and any proportionate evidence later requested through a controlled private process.
• Versioned policy choices and limited, privacy-screened product and pilot events needed to operate, improve and protect the service. These may record the page or feature used, task completion, errors, performance, delivery, rate-limit, support and billing events, and administrative audit actions. Roavit does not use these events to record the contents of vault documents, passwords, payment-card details or the text of private documents.

Screenshots supplied to the route assistant are processed for the answer and are not stored by Roavit. When you ask Roavit to tailor a CV or application draft, it uses only the confirmed profile, saved answers and vacancy you select after you explicitly approve that use. Roavit records the exact purpose and version of that approval. Passport numbers, passport images, signatures and unrelated vault documents are not inserted into a CV. Failed generation attempts do not consume a paid allowance. Roavit does not request payment through WhatsApp and does not sell personal information.

Why we use it

We use account, journey, route and vault information to show official information that may be relevant to the circumstances you provide, prioritise new coverage, and provide the service you request; security and operational information to protect Roavit and prevent abuse; limited product and pilot events to understand task completion, errors, accessibility, support, billing and service reliability and to improve the controlled pilot; and optional email or device alerts with your choice or consent. We may ask pilot participants for feedback. Roavit's route information explains published rules; it is not an eligibility decision or an automated visa decision.

Lawful bases

Where data-protection law requires a lawful basis, Roavit relies on performance of its contract with you to provide the account and services you request; its legitimate interests in operating, securing, measuring and improving the controlled pilot, including limited records of pages or features used, task completion, errors, service reliability, support and billing events; consent for optional communications or device alerts where required; and compliance with legal obligations or the establishment, exercise or defence of legal claims. Roavit applies data minimisation and access controls to legitimate-interests processing, does not use pilot measurement for advertising, and allows you to object as described under Your choices and rights. Requests for pilot feedback are voluntary.

Service providers and international processing

Roavit uses Hetzner for application hosting; Amazon Web Services in the EU (Stockholm) for email delivery, event handling and continuous database recovery; Cloudflare R2 with EU jurisdiction for application-encrypted immutable backup archives; Anthropic for the route assistant; RevenueCat for purchase and entitlement coordination; Paddle as merchant of record for web purchases; Apple and Google for native-app purchases; and Apple Push Notification service, Firebase Cloud Messaging and browser push providers for alerts you enable. Archive encryption keys remain in Roavit's separate secret store and are not stored with the archive. These providers receive only the information needed for their service. Information may be processed outside your country. Roavit must maintain the applicable provider terms, data-processing terms and lawful transfer safeguard before relying on a restricted international transfer.

Professional and organisation sharing

Roavit shares information with an adviser, university, employer or data customer only for an activated service and within the recorded role, contract and consent. A referral covers only the selected organisation, record and stated purpose. Roavit does not send unrelated vault documents. Professional and organisation users receive only the information their authorised workflow permits, and their actions are audited. Public community reports exclude account identity and submitted evidence.

Documents and security

Vault documents are encrypted at rest with authenticated encryption. Access is restricted to the signed-in owner. A subscription may control new uploads or new document processing, but you can still retrieve, export and delete documents already held for you after a paid plan expires. No internet service can promise absolute security, so upload only what you need and delete documents you no longer need.

Retention

Account information remains while your account is active. Raw product and pilot events and their actor identifiers are automatically deleted after 30 days. Deleting the account removes its live account records and encrypted vault files, subject to records that must be retained for an unresolved complaint, fraud prevention, legal claim, contract, payment or regulatory obligation. Pending or published community reports can be withdrawn from the account; the public copy is removed while a minimal audited withdrawal record may remain. Professional review, organisation membership, consent, booking, dispute and API security records are retained only for their operational or legal purpose and must be covered by the final externally reviewed retention schedule. Continuous database recovery data expires after approximately 72 hours. Locally retained operational backups are limited to the latest seven daily and three pre-deployment recovery points. Application-encrypted immutable recovery archives expire after 365 days; a restoration must reapply the deletion ledger before service is resumed, so an archived copy is never used to reverse a completed deletion. Delivery suppressions and minimal security records may be retained where necessary to prevent unwanted messages, fraud or abuse.

Your choices and rights

You can turn device alerts off, unsubscribe from optional update email, delete individual documents, download a structured copy of your information from My Roavit, review active sessions, and delete or request deletion of your account. A signed-in pilot participant can use Help and support to object to non-essential pilot measurement; Roavit stops it for that account immediately and confirms the request, while essential security, billing, accounting and legal records continue where required for their separate purposes. Depending on where you live, you may also ask to access, correct, restrict, object to, erase or receive a copy of your personal information, and complain to your data-protection regulator. In the United Kingdom, the regulator is the Information Commissioner’s Office.

Children

Roavit is designed for people independently planning international study and migration routes. We do not knowingly use children’s information for advertising or profiling. If a person under 18 may use the service, contact us before uploading identity or financial documents so appropriate safeguards can be considered.

Changes

Material changes will be shown in the product or sent to the verified account email. The effective date above will be updated.