Privacy
Santua collects only the information graduates explicitly choose to share when filling out a verified review (their words, rating dimensions, career outcome, optional name and video). Reviews are published according to the consent setting each graduate chooses; anonymous, first name, full name or internal only. Email addresses are used only to send the review invitation.
A graduate can request deletion of their review at any time by contacting hello@santua.ai. We will delete it within 7 days.
For schools: your contact data
When you upload your past or current student contacts to collect reviews, that list stays yours.
- Your contacts are linked only to your school account. They are never sold, never shared with other schools or third parties, and never used for anything other than sending your review requests.
- Review invitations go out on your behalf, from no-reply@santua.ai, and only to ask for a review; nothing else.
- You can pause sending at any time, and you can ask us to delete your uploaded list at any time at hello@santua.ai; we delete it within 7 days.
- For these contacts, Santua acts as your data processor and you remain the data controller.
For schools: enquiries from Facebook and Instagram
A school can connect its Facebook Page to Santua so that enquiry forms it runs on Facebook or Instagram arrive in its Santua account directly. When someone submits one of those forms, we receive exactly the answers they gave: their name, and whichever of email address, phone number and answers to the school's own questions the form asked for. Alongside it we receive the identifiers Meta attaches to the submission, so the school can tell which advert produced the enquiry.
- This data is used for one thing: helping that school reply to that person. It is never sold, never shared with another school, and never used to build any audience or profile across schools.
- The school is the data controller and Santua is its processor, the same relationship as for the contact lists above.
- We read a submission once, when Meta tells us it exists. We do not read the school's Page, its posts, its followers or its messages, and we hold no access to anything on Facebook beyond the forms the school connected.
- A school can disconnect its Page from Santua at any moment, in Ajustes, and Meta stops sending us anything from that instant.
- Anyone who filled in one of these forms can have their data deleted. The data deletion page says how, and what happens in each case.