Privacy Policy

GradBlueprint ("we", "us", "our") provides a platform to help students track graduate scheme applications, review CVs, prepare for interviews, and discover graduate schemes (the "Service"). This policy explains what personal data we collect, why, and how we handle it.

We are committed to complying with UK GDPR and the Data Protection Act 2018.

Who we are

GradBlueprint is currently operated by the GradBlueprint team, based in the UK. Contact: hello@gradblueprint.co.uk

What data we collect

We collect only what's needed to provide the Service:

• Account information: name, email address, password (encrypted — we never see it in plain text)
• Profile information: university, course/graduation year (if you provide it)
• Application data you enter: company names, role titles, application stage, deadlines, interview dates, notes you write, offer/rejection outcomes
• CV Toolkit data: any CV content or documents you upload for review or AI feedback
• Career Match / AI Copilot data: any career preferences, questions, or messages you submit to AI-powered features
• Payment information (Pro subscribers only): handled entirely by Stripe — we do not store your card details. We retain only your subscription status and billing history reference.
• Technical data: login timestamps, IP address, and basic device/browser information, collected automatically for security and to keep the Service running

Why we collect it

We process your data because it's necessary to provide the Service you've signed up for, we have a legitimate interest in keeping the Service secure and improving it, and where you've paid, we need certain data to process that transaction and comply with tax obligations. We do not sell your personal data, and we do not use your application or CV data for advertising purposes.

Who we share it with

Supabase (our database and authentication provider), Stripe (our payment processor, Pro subscribers only), and any third-party AI provider used to power features like CV review or the AI Copilot, solely to generate the response you've requested. We do not share your data with any other third party, and we do not sell it.

How long we keep your data

We keep your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where legally required to retain certain records for longer.

Your rights

Under UK GDPR, you have the right to access, correct, delete, and export your personal data, and to object to certain processing. To exercise any of these rights, email us at hello@gradblueprint.co.uk. We'll respond within 30 days. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

Security

We take reasonable technical measures to protect your data, including access controls that ensure only you can see your own application and CV data. No system is 100% secure, but we work to keep your information safe and will notify you and, where required, the ICO, in the event of a data breach.

Children's privacy

The Service is intended for university students (typically 18+). We do not knowingly collect data from anyone under 13.

Changes to this policy

We may update this policy as the Service evolves. We'll update the 'last updated' date above, and for significant changes, we'll let you know directly.

Contact

Questions about this policy or your data? Email hello@gradblueprint.co.uk.