Find scholarships to fund your education

This Privacy Policy explains what personal data GrabScholarships collects, why, how long we keep it, who we share it with and the rights you have. GrabScholarships is operated by Jeraissic, Malaysia. We follow Malaysia's Personal Data Protection Act 2010 (as amended in 2024) and, for visitors in the European Economic Area and the United Kingdom, the GDPR and UK GDPR.

Summary

• We only ask for what we need to help you find and apply for scholarships.
• We never sell your personal data.
• Analytics and advertising cookies are only used if you allow them in the cookie banner.
• You can see, correct, download or delete your data at any time. Use your dashboard or the data request form.

What we collect

Information you give us

• Account: your name, email address, password (stored only as a secure hash), and optionally your phone number, education level, study goal and up to five preferred study countries. We also record your age group and, if you are under 18, that a parent or guardian agreed.
• Documents you upload to apply through us: for example certificates, transcripts, language test results, reference letters and identity documents. Upload identity documents only when a scholarship needs them.
• Application requests: the scholarships you choose, your target date, notes, and messages between you and our team.
• Consultation requests: name, email, optional phone number, topic, preferred time and your message.
• Messages you send us by email, WhatsApp or the contact form.
• Email list: your email address, first name if you give it, language, and the date you agreed to receive our emails.

Information collected automatically

• Technical data: our hosting provider's servers record your IP address, browser type, the pages you request and the time, to keep the site secure and working. These logs are kept for a limited period.
• Settings saved in your browser: your language, light or dark theme, saved favourites and similar preferences are stored on your own device (see the Cookie Policy). We cannot see them.
• Analytics and advertising data, only if you allow it: Google Analytics measures how pages are used, and Google AdSense shows ads. See "Who we share data with".

Student tools

Our free tools at /tools/ (PDF, Word, image, spreadsheet and other converters) run inside your own browser. The files and text you put into them are processed on your device and are not uploaded to us or anyone else, and we do not see or keep them. The currency converter fetches the day's exchange rates from frankfurter.app (rates published by the European Central Bank); like any website, that service can see your IP address when the rates load. If we later add tools that need our server or AI, their page will say so clearly before you use them, and files sent to them will be deleted automatically after processing.

Sign in with Google

You can create an account or sign in with your Google account. When you do, Google tells us your name, email address and Google account ID (and that your email is verified). We use these only to create and sign you in to your GrabScholarships account. We never see your Google password, and we don't get access to your Gmail, Drive or contacts. The Google sign-in pop-up is provided by Google, and Google's own privacy policy applies to it. You can change your name and other details in your dashboard at any time.

Tracking your applications

When you press "Apply on the official site", we open the provider's page in a new tab and note that you started that application. We can't see what you do on the other website: when you come back, we ask whether you submitted it, and save your answer in My applications. Before you sign in this is kept only in your browser; once you're signed in it is saved with your account so you can see it on any device. You can remove any entry, and it is deleted with your account.

Comments, likes and the Community feed

Comments you post are public: anyone can read them, shown with your first name and the first letter of your last name, and your stars or crown. Likes are counted, and Community reshares show the same short name. We keep comments until you delete them or your account; comments removed for breaking our Community guidelines are kept hidden for up to 90 days in case of a dispute. Comments are checked automatically for links, contact details, promotions and abusive words before they are published.

Stars and crowns

We record the actions that earn points (for example "comment", "share", "5 active minutes") with the date, to apply daily limits. Your short name and points can appear on the public "Top contributors" list. Active time is measured in your browser (tab open and used in the last minute); we do not record what you read or type.

Jobs, courses, events and conferences

If you post a listing, we keep the details you give us, and our team reviews them. Your contact email is not shown publicly. If you apply for a job through Quick apply, the employer who posted it sees your name, email, phone, level, your note and only the documents you chose to send. Employers must use this only for that hiring process. If you mark "I'm going" on an event, organisers see the number of people going, not who. Course progress is saved with your account so you can continue on any device.

Wellbeing tips

Tips such as "drink some water" are shown by your browser based on how long the site has been open and the local time. Nothing about them is sent to us, and you can turn them off in your profile.

Grab AI (our AI assistant)

Grab AI is an AI assistant powered by Claude, a model made by Anthropic. When you chat with it, your messages and the conversation so far are sent through our server to Anthropic to write the reply. If you are signed in, Grab AI can also read your own account details on our server (your profile, saved scholarships, application status and the names of documents you uploaded, never their contents) to answer your questions, and can add scholarships to your list or pass a message to our team when you ask it to.

• We do not store what you say to Grab AI. We only count messages per day to keep usage fair. The conversation stays in your browser tab and is cleared when you close it or press "New chat".
• Anthropic processes the conversation on our behalf to generate replies, under its terms for business customers (see anthropic.com/legal).
• Please don't share passport or ID numbers, bank details or passwords in the chat. Grab AI can make mistakes, so check important details on official websites.
• Before the account server is switched on, the chat is a simple guided menu that runs only in your browser.

Why we use your data, and our legal basis

• To run your account and the services you ask for (finding scholarships, applying through us, consultations): because you asked us to and agreed to our Terms (contract).
• To send you our email newsletter: only with your consent, which you can withdraw at any time with the unsubscribe link in every email.
• To send service emails (verifying your email, password resets, updates on your application): needed to provide the service.
• To keep the site secure and prevent abuse: our legitimate interest in protecting users and the service.
• Analytics and personalised ads: only with your consent in the cookie banner.
• To meet legal obligations, for example responding to lawful requests from authorities.

Who we share data with

We share personal data only when needed, and only with:

• Our team at Jeraissic, who help you with applications and consultations, under confidentiality.
• Universities and scholarship providers, only when you ask us to submit or prepare an application for a specific scholarship, and only what that application needs. We do not contact a provider on your behalf without your instruction.
• Service providers who process data for us under contract: Namecheap (website and server hosting), our email delivery provider (to send service emails and the newsletter), Anthropic (to generate Grab AI replies when you use the chat), and Google (Analytics and AdSense, only with your consent; YouTube when you play a video).
• Authorities, where the law requires it.

We never sell or rent your personal data.

International transfers

Some providers (for example Google and Anthropic) process data outside Malaysia, mainly in the United States. When that happens we rely on providers that offer appropriate protection for personal data, as Malaysian law and the GDPR require.

How long we keep data

• Account, documents and application requests: while your account is open. When you delete your account we delete them within 30 days. Copies in backups are overwritten within a further 30 days.
• Accounts that are never used: if an account has no sign-in for 3 years, we email you and then delete it.
• Consultation requests and messages: up to 24 months after our last contact.
• Email list: until you unsubscribe. We keep a record of the unsubscribe so we don't email you again.
• Grab AI conversations: not stored by us. Daily message counts are kept for 90 days.
• Server logs: a limited period for security, then deleted.

How we protect your data

All pages and data travel over encrypted HTTPS connections. Passwords are stored only as secure hashes. Sign-in uses a protected session cookie that scripts cannot read. Uploaded documents are stored outside the public website and can be opened only by you and our authorised team. If a data breach could harm you, we will tell you and the Personal Data Protection Commissioner as the law requires.

Your rights

You can ask us to:

• access the personal data we hold about you, and get a copy;
• correct data that is wrong or incomplete;
• delete your data;
• move your data to another service (data portability);
• withdraw consent or stop marketing at any time;
• limit or object to some uses of your data.

Use your dashboard (Download my data, Delete my account) or the data request form. You can also email admin@grabscholarships.com. We reply within 21 days. You may also complain to the Personal Data Protection Commissioner of Malaysia (pdp.gov.my), or to your local data protection authority if you live in the EEA or UK.

Children

You must be at least 13 to create an account. If you are 13 to 17, a parent or guardian must agree before you register. Parents or guardians can contact admin@grabscholarships.com to see or delete their child's data. If we learn that we hold data from a child under 13, we delete it.

Preview mode

Until our account server is switched on, accounts, saved scholarships and documents you add on this site are stored only in your own browser. Nothing is sent to us unless you choose to contact us by email or WhatsApp. This section will be removed when accounts move to our server.

Changes to this policy

If we make important changes, we will update the date above and tell account holders by email before the change takes effect.

Contact

Questions about privacy or your data: admin@grabscholarships.com (Data Protection Officer).

GrabScholarships is operated by Jeraissic, Malaysia.