Privacy Policy

This Privacy Policy explains how EnrollinX ("we", "us", "our") collects, uses, shares, stores and protects personal information when you visit our website, create an account, use Leo AI (including the public, no-login Ask Leo), interact with a partner through the platform, or submit an enquiry.

EnrollinX is operated by NxtGener Limited. For privacy questions or to exercise any of the rights below, contact privacy@nxtgener.com.

What we collect depends on how you use EnrollinX:

Website visitors

• Pages visited and basic device/browser information
• Your cookie preferences (see the Cookies section below)
• Anything you submit through the enquiry form on the Contact page

Students

• Name, email, phone, nationality and study preferences
• Education history and application interests
• Documents you upload (transcripts, certificates, passport, visa and financial documents)
• Career Passport content, Career Launchpad activity and job applications
• Support messages, reports you submit and reviews you leave

Education Partners, Employers, Service, Growth and Referral Partners, Universities

• Organisation details and the information provided during our review process
• Team member details for people you invite to your dashboard
• Agreements, commission and payment records
• Campaign and referral link activity
• Messages and support tickets

Leo AI and Ask Leo

• The messages you send Leo, and the role you select (student, education partner, employer, etc.)
• For public Ask Leo, the email address collected at the start of a conversation
• Session metadata (message counts, feedback you leave on a response)

We use your information to:

• Create and run your account and your dashboard
• Support your student journey — applications, scholarships, visa guidance, career tools
• Match students with the right Education Partner and connect partners with the right students
• Power Leo's guidance, grounded in your own data and our knowledge base
• Process applications, agreements, commissions and enquiries
• Investigate reports and keep the platform safe
• Send service communications, and — only with your consent — marketing updates
• Meet our legal and security obligations

Depending on what we're doing with your data, we rely on:

• Contract — to provide the account and services you've signed up for
• Consent — for marketing communications and non-essential cookies, which you can withdraw at any time
• Legitimate interests — to keep the platform secure, prevent fraud, and improve our services
• Legal obligation — where we're required to keep or disclose records

We share data only as necessary to deliver our services:

• Your matched Education Partner sees the information you make visible to them
• Employers see only what you choose to share through your Career Passport — never your passport, visa documents, bank statements or sponsor details
• Service Partners see only what's needed to fulfil a request you've made
• Referral Partners see only the students assigned to them
• The EnrollinX team, to run and support the platform
• Infrastructure providers who process data on our behalf (see International Transfers below)
• Legal or regulatory authorities, only where we're required to

Reports you submit about a concern are handled confidentially — your identity is never revealed to the partner or listing you're reporting.

• Public Ask Leo does not access your private account data — it answers from a general knowledge base and the role you select
• Once you're logged in, Leo can use your own journey, document and profile data to give you specific guidance
• Leo does not make final decisions on your behalf — it does not guarantee visa outcomes, admissions, scholarships or job offers
• Important decisions always involve a human — your Education Partner, an employer, or the EnrollinX team

• Data is encrypted in transit and at rest
• Access is controlled by row-level security and role-based permissions, so an account can only see what it's actually entitled to
• Sensitive documents are consent-gated — nothing is visible to a partner or employer until you explicitly allow it
• We keep records of who accessed or changed sensitive data

We keep information only as long as it's needed for the purpose it was collected:

• Website enquiries and Ask Leo sessions — retained for a limited period to handle follow-up, then deleted or anonymised
• Account and application records — retained for the life of your account, plus a period afterwards to meet our legal and audit obligations
• Agreements and commission records — retained as required for financial and legal record-keeping
• Exact retention periods are being finalised as part of our formal legal review; this section will be updated with specific timeframes

Wherever you are, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to certain processing
• Receive a copy of your data in a portable format
• Withdraw consent at any time, where we rely on consent
• Complain to your local data protection authority

You can manage your visibility and marketing preferences directly from your dashboard privacy settings, or contact privacy@nxtgener.com for anything else.

Some international students planning their studies may be under 18. Where we know we're dealing with a younger student, we take extra care: we collect only what's needed for that stage of the journey, use age-appropriate language in Leo's guidance, and expect a parent or guardian to be involved in decisions where appropriate. If you believe a minor has provided us with data without appropriate consent, contact us and we'll act on it.

Because EnrollinX serves international students and partners around the world, your data may be stored or processed by our infrastructure providers outside the country you're in, including outside the UK/EEA. Where that happens, we rely on appropriate safeguards required by data protection law.

EnrollinX uses a small number of cookies to keep you signed in and to attribute partner referrals. See our full Cookies Policy for the complete list and how to manage your preferences.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page always reflects the most recent version.

For privacy-related questions or data requests, contact us at privacy@nxtgener.com or through our Contact page. See also our Terms of Service and Trust & Safety pages.