Privacy policy
How KoreaAdmit collects, uses, shares, transfers, and protects your personal information, and the choices you have.
Last updated · June 4, 2026
Draft — pending legal review
This text is a working draft for review by a Korean privacy lawyer. It is not final and is not legal advice. Bracketed values such as [retention period] are placeholders to be completed before launch.
Who we are
KoreaAdmit ([business name]) is operated as a Korean sole proprietorship by Sans Bhatia. Business address: [business address]. We help international students and their families apply to Korean universities.
For any privacy question, access, correction, or deletion request, contact our privacy officer at [contact email] (or hello@koreaadmit.com).
What we collect and why
We collect only what each feature needs. The cards below list every place we collect personal information, the fields involved, the purpose, the consents that apply, and how long we keep it.
Eligibility quiz and account sign-up
- Fields
- Email; intended degree level, intake, nationality, GPA range, field and intended major, Korean and English level, funding need and budget, target region, priorities, timeline; birth year (age check only).
- Purpose
- Match you to scholarships and universities and save your results to your account.
- Consents
- collection_use, third_party, cross_border, marketing
- Retention
- [retention period]
Feature request / feedback
- Fields
- Email, name (optional), role, category, your message.
- Purpose
- Respond to and act on your feedback.
- Consents
- collection_use, cross_border
- Retention
- [retention period]
Account and sign-in
- Fields
- Email, name and profile image (if using Google sign-in), session records.
- Purpose
- Authenticate you and keep you signed in.
- Consents
- collection_use, cross_border
- Retention
- [retention period]
Sharing with universities and partners (third-party provision)
With your separate, optional consent, we may provide the following fields to the universities and recruitment partners on our recipient list so they can contact you about admission: email, name, major, field, level, budget, nationality, timeline, intake.
The current recipients are listed at /legal/recipients (there are none at this time). This consent is optional: you can use every feature without it, and you can withdraw it at any time, which stops all future sharing immediately.
Overseas transfer of your information
We use the service providers below, which are located outside the Republic of Korea. We ask for your separate, optional consent to this cross-border transfer.
- Vercel Inc. (Application hosting and content delivery) in United States.
- Resend Inc. (Transactional and sign-in email delivery) in United States.
- Neon Inc. (Managed PostgreSQL database) in United States or Republic of Korea (region dependent).
- Google LLC (Optional Google sign-in (OAuth)) in United States.
Fields transferred: the account and quiz information described above. Purpose: hosting, email delivery, and operating the service. Retention: [retention period].
How long we keep it
We keep your personal information for [retention period], or until you ask us to delete it, whichever comes first, except where we are legally required to retain certain records (such as proof that consent was given and later withdrawn).
Your rights
- Access the personal data we hold about you.
- Withdraw any optional consent at any time, as easily as you gave it.
- Export a copy of your data.
- Request correction or deletion of your data.
Manage everything from your signed-in privacy page, or, if you do not have an account, from /rights.
Younger applicants
KoreaAdmit is for applicants aged 14 and older. We collect a birth year only to confirm this, and we never share it. If you are under 14, you cannot use the lead tools; we do not knowingly collect or process the personal information of children under 14.
How we protect your information
We require encrypted connections (TLS), our database encrypts data at rest, and access to personal information is limited. We never place personal information in page URLs, server logs, or analytics events. IP addresses recorded with consent are stored only in a salted, hashed and truncated form, never in the clear.
If a breach happens
If a data breach affects your personal information, we will notify you without delay, within the time required by law, and notify the Personal Information Protection Commission where the threshold for doing so is met.
Changes and contact
If we make a material change, we will update this page and notify registered users by email before it takes effect. Questions or requests: hello@koreaadmit.com.