Privacy Policy

1. Who operates Ulydia

Ulydia is a website and online service operated by Sendbiz Inc., a Delaware corporation. “Ulydia”, “we”, “us” and “our” refer to the Ulydia service operated by Sendbiz Inc.

2. Minimum age

Personal accounts for students and job seekers are intended for users who are at least 16 years old. Ulydia is not directed to children under 16, and we do not knowingly allow users under 16 to create personal accounts.

Ulydia is also not directed to children under 13, and we do not knowingly collect personal information from children under 13.

If we learn that we have collected personal information from a personal account user under 16, or from a child under 13, we may delete the account and associated data, unless retention is required by law.

3. Data we collect

Depending on how you use Ulydia, we may collect:

• account information, such as email address, user type, country and authentication data;
• profile information, such as name, photo, education level, interests, skills, preferences, location, phone number or career goals;
• orientation information, such as answers to guidance questions, AI prompts, interests, recommended jobs and saved results (a separate copy, not linked to your account, is also kept for quality measurement — see the “Orientation analytics” section);
• student documents, such as CVs, resumes, diplomas, transcripts or files uploaded by the user;
• application and CRM data, such as wishes, applications, school interests, lead status, messages and interactions with schools or companies;
• school and company content, such as logos, images, brochures, program descriptions, job postings and uploaded documents;
• technical data, such as IP address, device information, browser type, logs, cookies, country selection and usage events;
• device location data (approximate or precise), collected only with your explicit permission and only while you are actively using the mobile application, in order to display schools, programs and opportunities near you on the map; this permission is optional, can be granted or revoked at any time in your device settings, and the application remains fully usable without it; we do not track your location in the background;
• payment and subscription data processed through Stripe or other payment providers when paid services are used.

4. How we use data

We use personal data to:

• create and secure accounts;
• provide orientation guidance, career suggestions, school and program recommendations;
• allow users to save preferences, CVs, documents, interests and applications;
• allow schools and companies to receive, manage and respond to relevant leads or applications;
• operate dashboards, CRM tools, messaging, analytics and support features;
• display schools, programs and opportunities near your location on the map, when you have granted location permission;
• process payments, subscriptions, free trials, invoices and tax requirements;
• prevent fraud, abuse, scraping, spam, false content and security incidents;
• improve the Services, including through aggregated or anonymized analytics.

For users located in the European Union, the United Kingdom and other jurisdictions with similar requirements, our legal bases are: performance of a contract for account creation, orientation guidance, saved preferences, documents, applications and paid subscriptions; legitimate interests for security, fraud prevention, abuse detection, service improvement, and for measuring and improving the quality of our orientation tool as described in the “Orientation analytics” section; consent for non-essential cookies, marketing communications and the sharing of your profile with a school or company at your request; and legal obligation for billing, tax and accounting records.

5. CVs, diplomas and uploaded documents

Users may upload CVs, resumes, diplomas, transcripts or similar documents. These documents may be used to complete a profile, prepare an application or share information with selected schools or organizations.

Some files may be watermarked, stored using protected URLs or subject to automatic retention rules to reduce fraud and unauthorized redistribution.

Unless a different period is required by law or specified in the relevant feature, Ulydia aims to retain uploaded student documents only for a limited period, such as six months after the last active event, and then delete or detach them.

6. Sensitive personal information

Please do not upload sensitive personal information unless it is necessary for the feature you are using. Sensitive information may include health information, disability information, government identifiers, immigration information, racial or ethnic origin, religious beliefs, political opinions or other highly private information.

If a CV, diploma, transcript or other uploaded document contains unnecessary sensitive information, you should remove or redact it before uploading.

7. Cookies and similar technologies

Ulydia may use cookies and similar technologies for authentication, security, country and language preferences, analytics, product improvement and, where applicable, campaign measurement. More information is available in our Cookie Policy.

8. AI and automated recommendations

Ulydia may use AI systems and automated scoring to provide guidance, detect vague answers, recommend jobs, suggest schools or programs, summarize information, or help schools and companies manage interests and applications.

AI outputs are assistive and informational. They should not be treated as official admission decisions, employment decisions, legal advice, academic equivalency decisions or professional certification decisions.

We do not make decisions based solely on automated processing that produce legal effects or similarly significant effects for you. Admission, recruitment and certification decisions are always made by the relevant school, employer or authority, not by Ulydia.

In line with EU AI Act transparency obligations, content that is generated by AI and interactions with our AI-based guidance are labelled as such within the Services, so that you can always tell when you are seeing AI-generated results.

9. Orientation analytics (checking that our guidance works)

When you use the orientation tool, we keep a separate copy of three things: the text you write in your own words, the interest keywords our system reads from that text, and the jobs it suggests to you.

We keep this copy for one reason: to check whether our guidance engine works well, and to fix it when it does not. For example, if someone writes “I want to help the planet” and the tool suggests jobs that have nothing to do with the environment, we need to see that in order to correct it.

This copy is not attached to your account. It carries no name, no email and no login, and we store it with no way to link it back to you. We want to be honest about what that means: because we cannot find your measurements, we cannot show them to you or delete them one by one on request. In return, we protect you a different way — every measurement is deleted for good after 30 days, automatically, with nothing kept longer. The short lifetime and the missing link to your account are that protection, and they are the whole point, not a technical detail.

Our legal basis is legitimate interest (Article 6(1)(f) GDPR): we genuinely need to measure and improve the tool, and we have balanced that against your privacy by keeping this data pseudonymous — not linked to you — and short-lived, so that it does not override your rights.

One last point, because it matters. The text box is free, and a 16-year-old may write personal things in it: about their school, their struggles, their family. That is exactly why we keep this data for such a short time and never tie it to an account. And if you would rather not write anything personal, you can use the guided questionnaire instead — it produces results on its own, without the free-text box.

10. Sharing of data

We may share data:

• with schools or organizations selected by the user when the user expresses interest, applies or requests contact;
• with companies when a user applies to a job or interacts with employer features;
• with service providers that help operate Ulydia, including hosting, database, AI, payment, analytics, email, security and support providers;
• when required by law, legal process, fraud prevention, platform security or protection of rights;
• in aggregated or anonymized form that does not reasonably identify an individual.

We do not sell personal data to advertisers.

When you express interest in a school, apply to a program or apply to a job, the data you choose to share is transmitted to that school or company, which then processes it as an independent data controller under its own privacy policy. We encourage you to review the privacy practices of the schools and companies you contact.

11. Current service providers

Ulydia currently uses service providers that may include Supabase for database and authentication, Vercel for hosting, OpenAI for AI processing, and Stripe for payments and subscriptions.

These providers may process data on our behalf according to their own contractual, security and legal terms.

Our AI processing provider (OpenAI) processes personal data submitted through its API under a signed Data Processing Agreement that incorporates the European Commission Standard Contractual Clauses. OpenAI does not use data submitted through its API to train its models.

12. International use and transfers

Ulydia is intended for a global audience. Data may be processed in countries other than the country where you live. We aim to use appropriate safeguards when data is transferred internationally, especially for users in jurisdictions that require specific protections.

User data is primarily stored within the European Union (AWS region eu-west-1, Ireland). Where personal data is transferred outside the European Economic Area, the United Kingdom or Switzerland, we rely on appropriate safeguards such as the European Commission Standard Contractual Clauses or, where applicable, the EU-US Data Privacy Framework certification of the receiving provider.

13. Retention

We keep personal data only as long as reasonably necessary for the purposes described in this Policy, including account operation, security, legal compliance, fraud prevention, customer support and service improvement.

Different categories of data may have different retention periods. For example, uploaded student documents may be retained for a limited period such as six months after the last active event, while security logs, billing records or legal records may be retained for longer when required. Pseudonymous orientation analytics, described in the “Orientation analytics” section, are kept for a maximum of 30 days and then deleted automatically.

14. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, export, restrict or object to certain uses of your personal data. You may also have the right to withdraw consent where processing is based on consent.

To make a request, contact us using the email below. We may need to verify your identity before responding.

If you are located in the European Union, you also have the right to lodge a complaint with your local data protection supervisory authority. In France, this is the CNIL (Commission Nationale de l'Informatique et des Libertés, www.cnil.fr).

Sendbiz Inc. has designated LE LAB ENTREPRENEUR SAS, its parent company, as its representative in the European Union in accordance with Article 27 GDPR: LE LAB ENTREPRENEUR SAS, 120 rue Jean Jaurès, 92300 Levallois-Perret, France, contact@lelabentrepreneur.com. You may contact the EU representative on all issues related to the processing of your personal data.

15. Account and data deletion

You can delete your Ulydia account at any time, directly from the Ulydia mobile application published by Sendbiz Inc. Open the app, go to Profile, then My account, then Delete my account. Confirm with your password and type the confirmation word to validate. Deletion is immediate and irreversible.

Deleting your account permanently removes your profile, your orientation test results, your saved careers and programmes, the applications you sent to schools and the messages you exchanged with institutions. This applies to the results saved to your account. It does not apply to the separate orientation analytics measurements described in the “Orientation analytics” section, which carry no link to your account and are therefore deleted automatically after 30 days, not when you delete your account.

Messages and application data already received by a school remain in that school's own records where it has an independent legal basis to keep them, as a separate data controller. Aggregated or anonymised statistics that can no longer be linked to you may be retained.

If you cannot access the application, you can request deletion of your account and associated data by writing to privacy@ulydia.com. We process such requests within 30 days.

16. Security

We use technical and organizational measures intended to protect the Services and user data, including access controls, authentication, protected storage and security monitoring. No online service can guarantee absolute security.

17. Changes to this Policy

We may update this Privacy Policy from time to time. If changes are material, we may notify users through the Services or by email.

18. Contact

For privacy or data requests, contact us at contact@ulydia.com.