Privacy Policy

GradBlueprint ("we", "us", "our") provides a platform to help students track graduate scheme applications, review CVs, prepare for interviews, and discover graduate schemes (the "Service"). This policy explains what personal data we collect, why, and how we handle it.

We are committed to complying with UK GDPR and the Data Protection Act 2018.

Who we are

GradBlueprint is currently operated by the GradBlueprint team, based in the UK. Contact: hello@gradblueprint.co.uk

What data we collect

We collect only what's needed to provide the Service:

• Account information: name, email address, password (encrypted — we never see it in plain text)
• Profile information: university, course/graduation year (if you provide it)
• Application data you enter: company names, role titles, application stage, deadlines, interview dates, notes you write, offer/rejection outcomes
• CV Toolkit data: any CV content or documents you upload for review or AI feedback
• Career Match / CV review data: any career preferences, CV text or answers you submit to AI-powered features
• Payment information (Pro subscribers only): handled entirely by Stripe — we do not store your card details. We retain only your subscription status and billing history reference.
• Technical data: login timestamps, IP address, and basic device/browser information, collected automatically for security and to keep the Service running
• Usage and traffic data: which pages and features you use, and where you first arrived from (for example a link on Reddit or a search engine). We use our own analytics only — no advertising cookies or third-party trackers.

The free instant CV check on our CV checker page runs entirely in your browser: the CV you paste or choose there is not uploaded to us or stored.

Why we collect it

We process your data because it's necessary to provide the Service you've signed up for, we have a legitimate interest in keeping the Service secure and improving it, and where you've paid, we need certain data to process that transaction and comply with tax obligations. We do not sell your personal data, and we do not use your application or CV data for advertising purposes.

Who we share it with

Supabase (our database and authentication provider), Stripe (our payment processor, Pro subscribers only), and any third-party AI provider used to power features like CV review, career match or mock interviews, solely to generate the response you've requested. We do not share your data with any other third party, and we do not sell it.

Emails we send and how to opt out

We send two kinds of email:

• Essential emails — sign-up confirmation, welcome, password resets, billing and security notices. These are needed to run your account and can't be turned off.
• New scheme digests — new graduate schemes that match the sectors and locations you chose.
• Come-back and CV re-check nudges — occasional reminders if you haven't visited for a while or your CV is due a fresh check.
• Deadline reminders — alerts before applications you track (or popular schemes) close.

We send the optional emails because they help you hit deadlines and find schemes — that's our legitimate interest in providing the Service you signed up for. Every optional email has a one-click unsubscribe link in its footer that works straight away with no login, and only turns off that type of email. You can also switch each type on or off, or turn off all non-essential emails at once, under Settings → Email preferences. We keep a dated record of each change so we can honour it.

Where your data is stored

Your account and application data is stored in a managed cloud database operated by Supabase, with access restricted so only you can see your own applications and CV data. Payments are processed by Stripe. Emails are sent through our managed email delivery provider.

How long we keep your data

We keep your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where legally required to retain certain records for longer. To request deletion, email hello@gradblueprint.co.uk from the address on your account and we'll confirm once it's done.

Your rights

Under UK GDPR, you have the right to access, correct, delete, and export your personal data, and to object to certain processing. To exercise any of these rights, email us at hello@gradblueprint.co.uk. We'll respond within 30 days. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Security

We take reasonable technical measures to protect your data, including access controls that ensure only you can see your own application and CV data. No system is 100% secure, but we work to keep your information safe and will notify you and, where required, the ICO, in the event of a data breach.

Children's privacy

The Service is intended for university students (typically 18+). We do not knowingly collect data from anyone under 13.

Changes to this policy

We may update this policy as the Service evolves. We'll update the 'last updated' date above, and for significant changes, we'll let you know directly.

Contact

Questions about this policy or your data? Email hello@gradblueprint.co.uk.