Privacy Policy

Welcome to Vaultt. Vaultt is a brand of StudentVenture Ltd ("StudentVenture Ltd," "Vaultt," "Company," "we," "us," or "our"). We are committed to protecting your privacy and ensuring that your personal data is handled in a safe and responsible manner. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with applicable laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Purpose of the Service

Vaultt is the professional network for the next generation of builders. Vaultt helps young people create and showcase projects, build a living portfolio, find collaborators, receive feedback, develop their skills, and access challenges and career opportunities. Vaultt also connects emerging talent with companies offering jobs, projects, events, mentorships, and other career-building resources.

2. Data Collection

2.1 Types of Data Collected

We collect the following types of data:

• First name, last name
• University email (if provided)
• Regular email
• Phone number (optional)
• Date of birth
• Ethnicity (optional)
• Nationality
• Profile picture
• CV

• Degree and degree type
• Degree description
• University name

• Projects, files, images, links, and descriptions you upload
• Feedback you give or receive
• Challenge entries and submissions
• Collaborators, connections, and followers

• Clicks on posts, projects, companies, and platform features
• Applications, event participation, follows, and general usage data

2.2 Automatic Data Collection

We automatically collect certain data through:

• User registration
• Forms submitted on our platform
• App and platform usage tracking

2.3 Special Category (Sensitive) Data

We do not collect financial information or health records. Ethnicity, where provided, is "special category" personal data under the UK GDPR. Providing it is entirely optional and is used only for equal-opportunities and diversity monitoring on the basis of your explicit consent. You can decline to provide it, or withdraw it at any time, without affecting your use of Vaultt.

3. Data Usage

We use collected data for the following purposes:

• Creating and managing user accounts
• Building and displaying your portfolio and projects
• Improving user experience
• Sending notifications and platform updates
• Analytics and usage monitoring

Sharing with third parties: We do not sell your personal data, and we do not share it with third parties for their own marketing purposes. We do use trusted service providers who process data on our behalf to run the platform (see Section 8.3).

Advertising or marketing: We do not use personal data for third-party advertising or sell it to advertisers.

3.1 Use of Data for AI-Powered Features

We use certain personal and usage data to operate and improve AI-powered features within Vaultt. These features help enhance matching accuracy between users and companies, recommend relevant opportunities, and improve platform efficiency.

The types of data used for AI processing include profile information, academic information, skills, project and portfolio content, CV content, usage interactions (such as clicks and applications), and anonymised task submissions. This data is processed for the following purposes:

• Improving talent-to-company and company-to-talent matching
• Enhancing semantic search and recommendation systems
• Analysing platform usage patterns to refine the accuracy and quality of results
• Training internal models to improve the performance and effectiveness of our services

All AI processing is performed internally and in accordance with this Privacy Policy. We do not sell personal information, and we do not use your data to train external third-party AI systems. Data used for AI development is handled securely, is protected under GDPR-compliant safeguards, and is processed only to support the functionality and improvement of Vaultt.

4. User Rights

4.1 Data Access and Deletion

Under the UK GDPR you have the right to access, correct, delete, restrict, or object to the processing of your data, and the right to data portability. You may request access to, modify, or delete your data at any time by emailing company@studentventure.io or student@studentventure.io. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

4.2 Opt-Out Options

Users cannot opt out of the analytics and platform data collection that is essential for the service to function. Optional data (such as ethnicity) can be declined or withdrawn at any time.

5. Data Security

We implement industry-standard security measures to protect your personal data, including:

• Encryption of stored data
• Secure storage and processing through Firebase, Google Cloud, and Supabase

6. Data Retention

We retain personal data indefinitely, or until you request deletion. There is no automatic data-deletion policy in place. When you request deletion, we remove your personal data except where we are required to retain it by law. You can request deletion at any time by contacting us (see Section 9).

7. Geographic and Legal Considerations

7.1 Data Storage & International Transfers

Data is stored on globally distributed servers operated by our infrastructure providers (Google Firebase, Google Cloud, and Supabase). This may involve transferring data outside the UK. Where data is transferred internationally, we rely on GDPR-compliant safeguards such as adequacy decisions or Standard Contractual Clauses.

7.2 Compliance

We comply with the UK GDPR and the Data Protection Act 2018.

7.3 Availability

Our services are available globally but are primarily marketed to and intended for users in the United Kingdom.

8. Specific Features and Practices

8.1 Cookies and Tracking

We track how you use the platform for analytics and to improve the service. To do this, we and our providers use essential cookies, local storage, device identifiers, and analytics technologies that are necessary to deliver, secure, operate, and measure the service. We do not use cookies or tracking for third-party advertising.

8.2 Data Collection from Children

Vaultt is intended for users aged 13 and over. We do not knowingly collect data from children under 13. Users under 18 should have permission from a parent or guardian before using the platform, including before entering challenges.

8.3 Third-Party Service Providers

We use trusted third-party providers to process data on our behalf strictly to operate the platform. These currently include:

• Google Firebase and Google Cloud: hosting, database, and authentication
• Supabase: database and backend services
• Our analytics provider: measuring and improving platform usage

These providers act as data processors under GDPR-compliant data processing agreements and are not permitted to use your data for their own purposes. We do not integrate with third-party services for advertising, and we do not sell or share your data with third parties for their own marketing.

9. Communication and Contact

9.1 Updates to the Privacy Policy

We may update this Privacy Policy from time to time. Any significant changes will be communicated via email. Continued use of Vaultt after such updates constitutes acceptance of the revised policy.

By using Vaultt, you acknowledge and agree to the terms outlined in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of our services.