Privacy Policy

1. Who is responsible for your data

Senda Future is the data controller for everything described here. You can reach us about privacy at senda.policy@gmail.com.

If we ever appoint a Data Protection Officer, their contact details will be published on this page.

2. What we collect

We only collect what the platform needs in order to give useful guidance:

• Account details: your email address and password (stored only as a secure hash, never in readable form).
• Registration details: your name or nickname, age band (14–16, 16–18, 18+), city and country.
• Your DNA profile: the subjects, interests, dislikes, languages, extracurricular activities, sports, school, industries and skills you choose to add. You decide what goes in here, and you can change or delete any of it at any time.
• Your activity on the platform: careers, companies and study options you save, quiz and interest-profile results, a personality type if you enter one, and roadmap steps you create or tick off.
• Basic usage statistics: which pages signed-in students visit and when, so we can see which parts of Senda are useful.
• Technical information needed to serve the site securely, such as your connection's IP address, processed by our hosting provider for security and abuse prevention.

3. Why we use it, and our legal basis

Under Article 6 GDPR we rely on the following grounds:

• Performance of a contract: creating and running your account, saving your careers, results and roadmap, and showing your personal guidance.
• Legitimate interests: keeping the service secure, preventing abuse, fixing faults and understanding in aggregate which parts of the platform students use. We keep this to the minimum needed and it never involves advertising or selling data.
• Consent: where you add optional information to your profile, and for any future optional feature that clearly asks for it. You can withdraw consent at any time by removing that information.
• Legal obligation: where we must keep or disclose records because the law requires it.

4. Country and language detection

When you open Senda we look at the approximate country of your connection so that the site appears in the right language and shows the universities, employers and pathways of your country. This check happens on the fly. We do not keep a location history, and we do not store your IP address as part of your profile. If you set a country in your profile, that choice always takes precedence.

5. Automatic translation of your profile

Senda works in English and Spanish. When you write something into your DNA profile in one language, the text is sent to an automated translation service so your profile reads correctly in the other language too. Only the short profile entries are sent — never your email address, password or account identifiers.

No decision about you is made by an automated system. Career matches are simple suggestions based on what you have entered, and they never restrict your options.

6. Who else processes your data

We do not sell your data and we do not share it with advertisers. We use a small number of service providers who act only on our instructions under a data processing agreement:

• Our hosting and database provider, which stores account and profile data on infrastructure located in the European Union.
• An email delivery provider, used only to send account emails such as verification and password resets.
• An automated translation provider, used only for the profile text described above.

7. International transfers

Your account and profile data is stored on servers inside the European Union. Where a provider we use operates outside the European Economic Area, or where support staff may access data from outside it, the transfer is covered by the European Commission's Standard Contractual Clauses together with additional technical safeguards such as encryption in transit and at rest. You can ask us for details of these safeguards at any time.

8. How long we keep it

We keep your account and profile data for as long as your account exists. When you delete your account from your profile page, your profile, saved items, results and roadmap are deleted, and your login is removed from our authentication system.

Usage statistics are kept for a limited period (currently no more than 12 months) and are only ever looked at in aggregate. Backups are rotated and overwritten on a short cycle.

9. Your rights

Under the GDPR you have the right to access your data, to correct it, to have it erased, to restrict or object to how we use it, to receive a copy in a portable format, and to withdraw consent where we rely on it.

Most of these you can exercise directly in the platform: edit any part of your profile, remove saved items, or delete your account outright. For anything else, write to us at senda.policy@gmail.com and we will reply within one month.

10. Complaints

If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to a supervisory authority. In Spain this is the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es. If you live in another EU country, you may complain to your own national data protection authority instead.

11. Cookies and local storage

Senda does not use advertising cookies or third-party tracking. We only use what is strictly necessary to make the site work: a session cookie and local storage entry that keep you signed in, a small cookie remembering your language choice, and a stored preference for the student or admin view where that applies. These are exempt from consent because the service cannot function without them.

12. Students under 18

Senda is made for students from about 14 upwards. The age at which a young person can agree to online services on their own varies across the EU — 14 in Spain, and between 13 and 16 elsewhere. If you are below that age in your country, you should use Senda with the agreement of a parent, guardian or your school.

A parent or guardian can contact us at senda.policy@gmail.com to ask what we hold about their child, to have it corrected, or to have the account deleted.

13. Security

Passwords are hashed, traffic is encrypted, and access to student data in the database is restricted row by row so one account can never read another's. Access by our own team is limited to what is needed to run and support the service. If a breach ever affects your rights, we will notify the AEPD within 72 hours and tell you directly where the law requires it.

14. Changes to this policy

If we change how we use your data, we will update this page and change the date above. For significant changes we will also tell you by email or in the platform before they take effect.