SCHOLARIS.

Legal

Privacy Policy

Last updated: 5 May 2026

This Privacy Policy explains how Paideia Gamma Pte Ltd ("Paideia Gamma," "we," "us"), a company incorporated in Singapore, collects, uses, discloses, and protects personal data when you use scholaris.world (the "Service"). Paideia Gamma is the data controller for the personal data you provide to the Service.

1. Personal data we collect

We collect personal data only when you choose to provide it or as strictly necessary to operate the Service.

  • Account data: email address, hashed password (or OAuth identifier where you sign in with Google), and account creation timestamp.
  • Profile data: optional fields you fill in voluntarily, such as country of residence and self-described role.
  • Review and shortlist data: ratings, review text, and schools you save. Reviews are linked to your account internally so you can edit or delete them, but your identity is never displayed publicly or shared with the schools you review.
  • Technical data: minimal session cookies required for authentication and aggregated, privacy-preserving analytics via Plausible. We do not use advertising trackers.

2. Lawful bases for processing

Where the EU/UK GDPR applies, we rely on the following lawful bases:

  • Contract: to create and operate your account and deliver the Service you have requested.
  • Legitimate interests: to keep the Service secure, prevent fraud and abuse, and improve the platform with aggregated analytics.
  • Consent: for any optional cookies or marketing communications. You can withdraw consent at any time.
  • Legal obligation: where we are required to retain records or respond to lawful requests.

3. How we use personal data

  • To authenticate you and protect account security.
  • To publish reviews you choose to submit, decoupled from your identity.
  • To send transactional email (verification, password reset, security alerts).
  • To investigate and prevent abuse, fraud, or violations of our terms.
  • To comply with legal obligations.

4. Reviewer privacy

Reviews submitted to Scholaris are designed to be anonymous to readers, schools, and any third party. The link between a review and its author is stored internally to allow editing and deletion by the author and to enforce our one-review-per-user-per-school rule. We do not, and our access controls do not permit us to, expose this link through any public-facing query or to share it with the schools that are reviewed.

5. Sharing and disclosure

We share personal data only with:

  • Service providers acting under data-processing agreements: Supabase (database and authentication), Resend (transactional email), and Vercel (hosting). Each is contractually bound to use personal data only to provide the Service.
  • Legal authorities where disclosure is required by applicable law.
  • Successors in the event of a merger, acquisition, or sale of assets, subject to the confidentiality protections of this Policy.

6. International transfers

Personal data may be processed in jurisdictions other than your own, including Singapore (where Paideia Gamma is incorporated) and EU/EEA regions where our processors are located. Where required, we use Standard Contractual Clauses or equivalent safeguards.

7. Retention

We retain personal data only as long as necessary for the purposes set out in this Policy or as required by law. Reviews and account data are retained for the lifetime of your account; deleting your account permanently removes your reviews and shortlist within 30 days, subject to backup retention windows.

8. Your rights

Depending on your jurisdiction (including the EU/UK GDPR and Singapore PDPA), you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to data portability. To exercise these rights, email scholaris@paideiagamma.com. You also have the right to lodge a complaint with your local data protection authority — for Singapore, the Personal Data Protection Commission (PDPC).

9. Security

We use industry-standard safeguards including encryption in transit (TLS), encryption at rest, role-level access controls, and audit logging. No system is perfectly secure; please notify us immediately of any suspected compromise of your account.

10. Changes to this Policy

We may update this Policy to reflect changes in law or our practices. We will post the updated Policy with a revised "Last updated" date and, where changes are material, notify you by email.

11. Contact

Paideia Gamma Pte Ltd (UEN: registered in Singapore). Email: scholaris@paideiagamma.com.