Privacy Policy

1. Data Controller

Transita is operated by Okapi Works, a company registered in Belgium, European Union. As the data controller, Okapi Works determines how and why your personal data is processed. For any privacy-related questions, please contact us at privacy@transita.app.

2. What Data We Collect

We collect only what is necessary to provide the service. Here is a precise breakdown:

• Email address — collected only if you voluntarily submit it via our email sign-up form (for example, to receive your personalised immigration roadmap). This is optional. We never require an email to use the quiz.
• Quiz answers — the answers you provide during the immigration quiz are stored locally in your browser using localStorage. They are never sent to our servers unless you explicitly submit a result or sign up for a roadmap.
• Approximate location (IP-based) — when you first visit the quiz, we use your IP address to auto-detect your current country in order to pre-fill that field for your convenience. This lookup is performed via ipapi.co. We receive only a country code and discard it immediately after use. We do not store your IP address.

We do not collect names, passport details, financial information, or any sensitive personal data categories as defined under GDPR Article 9.

3. Why We Collect It (Legal Basis)

• Email address — collected on the basis of your consent (GDPR Art. 6(1)(a)). You can withdraw consent at any time by clicking "unsubscribe" in any email we send.
• Quiz answers — processed on the basis of contract performance (GDPR Art. 6(1)(b)) to generate your AI-matched immigration pathway results.
• IP-based location — processed on the basis of our legitimate interest (GDPR Art. 6(1)(f)) to improve usability by pre-filling your current country. This data is not retained.

4. How Long We Keep Your Data

• Email addresses are kept until you unsubscribe or request deletion. We do not retain emails longer than necessary.
• Quiz data stays in your browser (localStorage) and is never stored on our servers unless you explicitly request a roadmap. You can clear it at any time by clearing your browser storage.
• IP-based location data is not stored at all — it is used in real-time to determine a country code and then discarded.

5. Your GDPR Rights

If you are located in the European Union, you have the following rights regarding your personal data:

• Right of access — you may request a copy of the personal data we hold about you.
• Right to rectification — you may ask us to correct inaccurate data.
• Right to erasure — you may ask us to delete your data ("right to be forgotten").
• Right to object — you may object to certain types of processing.
• Right to data portability — you may request your data in a machine-readable format.

To exercise any of these rights, contact us at privacy@transita.app. We will respond within 30 days. You also have the right to lodge a complaint with the Belgian Data Protection Authority (GBA — Gegevensbeschermingsautoriteit) at dataprotectionauthority.be.

6. Third-Party Services

We use a small number of third-party services to operate Transita:

• Vercel (hosting and infrastructure) — our application is hosted on Vercel. Vercel acts as a data processor under GDPR and processes data in accordance with EU data protection requirements. See Vercel's Privacy Policy.
• OpenAI (AI matching) — when you submit your quiz, anonymised quiz answers (with no personally identifying information) are sent to OpenAI's API for processing. We do not transmit your email or any identifying details to OpenAI. See OpenAI's Privacy Policy.
• ipapi.co (IP geolocation) — used to detect your approximate country on the quiz's first step. No personal data beyond your IP address is transmitted, and we do not store the result. See ipapi.co's Privacy Policy.

7. Cookies and Local Storage

We do not use tracking cookies, advertising cookies, or analytics cookies. We do not use Google Analytics or any third-party tracking scripts.

We use localStorage (a browser-side storage mechanism) for two purposes:

• To save your quiz progress as you move through the steps, so you do not lose your answers if you accidentally navigate away.
• To remember that you have dismissed our cookie notice, so we do not show it to you again.

localStorage data never leaves your device unless you explicitly submit the quiz. You can clear it at any time via your browser's settings.

8. Data Security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or alteration. All data transmitted between your browser and our servers is encrypted via HTTPS (TLS). Email addresses are stored in access-controlled systems.

9. Children

Transita is not intended for use by persons under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has submitted data to us, please contact us at privacy@transita.app and we will delete it promptly.

10. Updates to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically. The current version is always available at transita.app/privacy.

11. Contact

For any questions about this Privacy Policy or your personal data, please contact us at privacy@transita.app.