Privacy policy

Last updated: October 2026

Who we are

Go Above (“we”, “us”) operates the website at https://goabove.online and related services. For data protection questions, contact hello@goabove.example.

Account data: name, email address, and a securely hashed password. Passwords are never stored in readable form.
Profile data you choose to provide: nationality, education level, grades, intended degree, preferred countries, test scores, funding needs, and intake year. Everything except your name and email is optional.
Platform activity: saved opportunities, eligibility assessments, application tracker entries, notes, checklist items, and notifications.
Uploaded documents: stored privately, served only to your authenticated session, and never shared with third parties.
Messages you send us (contact/consultation forms) and newsletter subscriptions with your consent timestamp.
Basic technical logs (IP address for rate limiting and abuse prevention).

To provide your account, dashboard, recommendations, and eligibility assessments.
To send transactional email you request (email verification, password resets) and notifications you enable.
To send the monthly newsletter only where you explicitly subscribed; every email includes an unsubscribe route and you can also contact us to be removed.
To keep the platform secure: rate limiting, abuse detection, and audit logs of administrative actions.

We never sell your personal data.
We never share your profile or documents with consultants, universities, or advertisers without your explicit action (for example, when you yourself submit a consultation request).
We never publish your dashboard activity; those pages are marked noindex for search engines.

Essential cookie: a signed, httpOnly session cookie that keeps you signed in. The site cannot function without it.
Optional analytics: only set after you accept them in the cookie banner; you can change your choice at any time by clearing site data.

You can delete your account at any time from Dashboard → Settings. Deleting removes your profile, saved items, tracker, notes, checklist, and uploaded documents.
Contact messages are retained for up to 24 months to handle support threads. Audit logs are retained for security accountability.
Unverified newsletter subscriptions that bounce repeatedly are removed.

Passwords hashed with bcrypt; sessions are signed tokens in httpOnly, sameSite cookies.
Server-side authorization on every sensitive operation; uploads restricted by type and size.
Rate limiting on authentication and public forms; protection against common web vulnerabilities (see also our Terms).

Go Above is intended for people aged 16 and over. We do not knowingly collect data from younger children; contact us if you believe a child has created an account.

If we make material changes we will announce them on the site and, where appropriate, notify account holders by email.