Privacy policy

1. Data controller

Tworld — Global Mobility Intelligence Platform acts as the data controller for data collected via the platform. Contact: contact@tworld.com.

2. Data collected

• Account data: name, email, encrypted password, phone number, notification preferences.
• Mobility profile data: nationality, residence, family situation, travel objective, target countries, occupation, declared budget.
• Uploaded documents: passport, qualifications, transcripts, certificates, solely at the client's initiative.
• Usage data: journey within the application, activities completed, PDFs generated, case history.
• Technical data: connection logs, IP address, device type, for security purposes.

3. Purposes and legal bases

• Performance of the contract: account creation, calculation of the success score, checklists, budgets, AI assistant, PDF generation.
• Legitimate interest: security, prevention of document fraud, statistical improvement of assessment models (aggregated data).
• Consent: marketing alerts, WhatsApp notifications, sharing of a case via a secure link.
• Legal obligation: invoicing, accounting, response to a lawful request from a competent authority.

4. What Tworld does not do

• Tworld does not sell, rent or exchange any personal data.
• Tworld does not send any document to an embassy, a consulate or a government body: this step belongs solely to the client.
• Tworld carries out no profiling that produces a legal effect: the score is an advisory indicator, never an automated decision that can be relied upon against the client.

5. Processors and hosting

Tworld uses technical providers for hosting, database services, authentication, payment, email delivery and artificial intelligence inference, contractually bound to equivalent confidentiality and security guarantees.

Some processing may involve a transfer outside the client's country of residence, governed by standard contractual clauses or an equivalent mechanism.

6. Retention periods

• Account and mobility case file: for the duration of the subscription, then 24 months of archiving to allow the project to be resumed.
• Uploaded documents: until deleted by the client, or 12 months after the account is closed.
• Secure sharing links: until their expiry date, then deletion.
• Accounting records: for the applicable statutory period.

7. Security

• Encryption of exchanges, data isolation per account and access policies at database level.
• Internal access limited to authorised staff and logged.
• Report a vulnerability: contact@tworld.com.

8. Your rights

The client has the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw consent. These rights may be exercised from the Account area or by contacting contact@tworld.com. A response is provided within a maximum of 30 days.

The client may also lodge a complaint with the data protection authority competent for their place of residence.