Privacy Policy

1. Who is responsible

MyErasmus is an independent project run by its founders from Spain. It has not yet been incorporated as a company, so the data controller is the people who run the project. For any privacy question, write to contacto@myerasmus.com.

2. What data we process, why, and on what legal basis

MyErasmus has no user accounts or profiles. We only process:

• App waitlist: your email, to tell you when the app is available. Legal basis: your consent, given when you submit the form.
• “Notify me” form for WhatsApp groups:your email, the city you pick and the site language, to tell you when that city's group is available. Legal basis: your consent.
• Emails you send us: your address and whatever you tell us, to reply. Legal basis: our legitimate interest in answering you.
• Technical browsing data: IP address, browser and requested pages, logged by our hosting provider to serve and protect the site. Legal basis: legitimate interest in security and operation.
• Usage statistics: Vercel Analytics (cookieless, aggregated; legitimate interest) and Google Analytics (only if you accept it in the cookie banner; consent). See the Cookie Policy.

We don't use your data for advertising, build profiles, make automated decisions, or sell or share your data with third parties. We only send you the notification you asked for; we don't sign you up to any newsletter.

3. How long we keep it

• Waitlist: until we notify you of the app launch and at most 12 months after that, or until you ask to be removed.
• Group “Notify me”: until we tell you the group is available and at most 12 months after your request, or until you ask to be removed.
• Emails: as long as needed to reply and up to 12 months after, unless a legal obligation requires longer.
• Hosting logs: the limited period applied by Vercel (days to a few weeks).

4. Who else processes your data

We use providers that process data on our behalf (processors):

• Supabase (database, on Amazon Web Services infrastructure): stores the emails from the forms.
• Vercel Inc. (web hosting and Vercel Analytics).
• Google (Google Analytics, only with your consent).
• Our email provider, to receive and answer your emails.

Some of these providers may process data outside the European Economic Area, mainly in the US. Those transfers rely on the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

5. WhatsApp and Telegram groups

When you tap a group link you leave MyErasmus for WhatsApp or Telegram, which apply their own privacy policies. Keep in mind that other members of a group can see your phone number and profile name. MyErasmus does not receive or store that data.

6. Your rights

You can ask to access, rectify or erase your data, object to or restrict its processing, or request portability. You can withdraw consent at any time, without affecting earlier processing. Write to contacto@myerasmus.com saying what you want and the email you signed up with. We will reply within one month.

If you think we have mishandled your data, you can complain to the Spanish Data Protection Agency (www.aepd.es) or the authority in your country.

7. Minors

The site is aimed at university students. If you are under 14, please don't send us your data.

8. Security

Data travels encrypted (HTTPS). The database only lets the public add requests: nobody can read other people's emails from the site.

9. Changes to this policy

If we change anything relevant, we will update this page and its last-updated date.