Effective Date: June 1st 2026
At Ivy Tower, we understand that the information you entrust to us is personal and important. The Platform is designed to help applicants, employers, institutions, and referees connect in meaningful ways, often involving educational records, professional achievements, recommendation letters, and career aspirations. We are committed to handling that information responsibly, transparently, and in accordance with applicable privacy laws.
This Privacy Policy explains how Ivy Tower ("Ivy Tower," "we," "our," or "us") collects, uses, stores, shares, and protects personal information when you use the Ivy Tower website, mobile applications, and related services (collectively, the "Platform"). By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy.
1. Who We Are
Ivy Tower is a technology platform designed to connect applicants, employers, educational institutions, referees, and other participants within the educational and employment ecosystem. Depending on the circumstances and the nature of the information processed, Ivy Tower generally acts as the data controller for information collected through the Platform.
Questions relating to this Privacy Policy or requests concerning your personal information may be directed to:
Ivy Tower AB
Email: support@ivytower.me
2. Information We Collect
The information we collect depends on how you use the Platform.
Information you choose to provide may include your name, email address, telephone number, profile photograph, educational background, degrees, transcripts, grades, publications, grants, awards, patents, CV or résumé, work history, career preferences, cover letters, candidate videos, badges, supporting documents, recommendation requests and letters, employer profiles, institutional information, job advertisements, survey responses, communications with us, and payment information relating to premium services, if applicable.
We may also collect information automatically when you use the Platform, including your IP address, browser type, device information, operating system, login activity, usage patterns, search activity within the Platform, pages viewed, session duration, referring websites, cookie information, and diagnostic or analytics information that helps us understand how the Platform is being used.
3. How We Use Information
We use personal information to provide and maintain the Platform, create and administer accounts, facilitate applications and recruitment processes, support recommendation workflows, match applicants with opportunities, generate AI-assisted recommendations and insights, process payments (when applicable), improve our products and services, detect and prevent fraud, maintain security, communicate with users, respond to support requests, enforce our agreements, and comply with applicable legal obligations.
We continually seek to improve the user experience, and information may be used in aggregated or de-identified form to understand trends, improve our technology, and enhance the effectiveness of our services.
4. You Control Your Information
At Ivy Tower, we believe that your personal information belongs to you.
You remain in control of the visibility of your information through the settings made available on the Platform. You may choose which aspects of your profile are publicly visible, which are visible only to selected employers or institutions, which are shared with specific users, and which remain entirely private. Recommendation letters and candidate videos may also be subject to confidentiality or visibility settings selected by users.
Except as described in this Privacy Policy, Ivy Tower does not sell, rent, trade, or disclose your private information to third parties without your consent. We share information only where necessary to provide the services you request, where you instruct us to do so, where disclosure is required by law, or where another lawful basis for processing exists under applicable data protection legislation.
Certain information required for the operation, security, support, and administration of the Platform may remain accessible to authorized Ivy Tower personnel and trusted service providers acting on our behalf solely for legitimate business purposes.
5. How We Share Information
When you choose to apply for an opportunity or otherwise engage with other users, information that you elect to share may become available to employers, institutions, referees, or other authorized recipients. For example, employers may receive the information you submit as part of an application, and referees may receive requests to provide recommendations.
We may also share information with carefully selected service providers that assist us in operating the Platform, such as cloud hosting providers, payment processors, email and communication providers, analytics providers, and professional advisors. These service providers are permitted to access personal information only to the extent necessary to perform services on our behalf and are expected to protect such information appropriately.
We may disclose information where required by law or court order, upon governmental request, or where we reasonably believe disclosure is necessary to protect our users, enforce our agreements, investigate fraud, or defend legal rights.
Ivy Tower does not sell your personal information to third parties.
6. Artificial Intelligence and Automated Processing
Ivy Tower may use artificial intelligence and automated systems to generate match scores, rankings, opportunity suggestions, cover letters, analytical insights, and career recommendations intended to assist users and employers.
These tools are designed to support decision-making rather than replace human judgment. Employers and institutions remain solely responsible for recruitment and admissions decisions, and users remain responsible for decisions made in reliance upon AI-generated outputs.
We may use aggregated and de-identified information derived from user interactions to improve our algorithms, provided that such information can no longer reasonably be linked to an identifiable individual.
7. Recommendation Letters and Confidential Evaluations
The Platform may facilitate the submission and management of recommendation letters and confidential evaluations. Users acknowledge that certain recommendations may be designated as confidential and therefore may not be visible to the individuals to whom they relate.
Referees are responsible for the content they submit, and Ivy Tower does not independently verify the accuracy, completeness, fairness, or truthfulness of recommendation letters.
8. Legal Bases for Processing
Where applicable under the General Data Protection Regulation and similar legislation, Ivy Tower processes personal information on the basis of the performance of a contract, user consent, legitimate interests, compliance with legal obligations, and, where relevant, the protection of vital interests.
Our legitimate interests include operating and improving the Platform, protecting users and systems from misuse, preventing fraud, and maintaining the security and integrity of our services.
9. International Transfers
Because some of our service providers and technical infrastructure may operate in multiple jurisdictions, personal information may be transferred to and processed in countries outside your country of residence.
Where required by applicable law, Ivy Tower implements appropriate safeguards designed to protect personal information during such transfers, including contractual protections and other legally recognized transfer mechanisms.
10. Data Retention and Deletion
We retain personal information only for as long as reasonably necessary to provide our services, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, prevent fraud, enforce agreements, and maintain the integrity and security of the Platform.
You may request deletion of your account and personal information at any time. Upon receiving a valid deletion request, Ivy Tower will take reasonable steps to delete or anonymize your information from active systems within a reasonable period of time.
Users acknowledge, however, that copies of such information may continue to exist temporarily within backup systems, disaster recovery systems, security archives, and other retained records. These copies will be securely deleted or overwritten in accordance with Ivy Tower's ordinary backup retention schedules and legal obligations.
Where information has already been shared by you with employers, institutions, referees, or other users through the normal operation of the Platform, Ivy Tower may not be able to retrieve or delete copies retained by those parties, and such parties remain responsible for their own handling of that information.
11. Your Rights
Subject to applicable law, you may have the right to access the personal information we hold about you, request correction of inaccurate information, request deletion of your information, restrict certain processing activities, object to processing carried out on the basis of legitimate interests, withdraw consent where consent forms the basis of processing, request portability of your information, and lodge a complaint with an appropriate supervisory authority.
We will respond to requests concerning your rights in accordance with applicable legal requirements.
12. Cookies and Similar Technologies
Ivy Tower uses cookies and similar technologies to operate the Platform, remember user preferences, enhance security, understand how users interact with our services, and improve the overall user experience.
Where required by law, users may manage cookie preferences through available consent mechanisms and browser settings.
13. Security
We implement administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, misuse, and destruction.
While we strive to use commercially reasonable measures to safeguard information, no method of electronic transmission or storage can be guaranteed to be completely secure. Accordingly, Ivy Tower cannot guarantee absolute security.
14. Children's Privacy
The Platform is not intended for children under the age of sixteen (16) without parental consent where such consent is required under applicable law. If we become aware that information has been collected in violation of this provision, we will take reasonable steps to delete such information.
15. Business Transfers
If Ivy Tower undergoes a merger, acquisition, reorganization, financing transaction, bankruptcy proceeding, or sale of assets, personal information may be transferred as part of that transaction, subject to applicable legal requirements and appropriate safeguards.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the evolution of the Platform.
Material changes may be communicated through the Platform, by email, or through other reasonable means. Continued use of the Platform following the effective date of an updated Privacy Policy constitutes acknowledgment of the revised policy.
17. Contact Information
If you have questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact us at:
Ivy Tower AB
Email: support@ivytower.me
If you are located within the European Economic Area, you also have the right to lodge a complaint with your local supervisory authority. Swedish users may contact the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY).
At Ivy Tower, our goal is to give users meaningful control over their information while maintaining the security, integrity, and functionality of the Platform. We recognize that trust is earned, and we are committed to handling your information with care and respect.