Currently, no PII is collected from students, and students do not need to create an account in order to use the Assistant. The conversation data we collect is associated with a unique User ID, but Unibuddy has no way of associating that data with any personal information via a secondary key. Therefore data is kept anonymised, meaning GDPR does not apply in this use case.

There is an optional feature that can be activated which asks students for a personal identifier (email address), so that we can register them to Unibuddy. In this instance, we ask students to agree to our Privacy Policy, and your institutions Privacy Policy, so that their data is covered by those agreements as per the requirements of GDPR and our existing account registration flow. Students are able to contact Unibuddy to request a copy of their data, and also to enact their right to deletion.