1. What We Collect

• Account info — your name, email address, and university.
• CV data — modules, work experience, skills, projects, and any other content you add to your profile.
• Application tracking data — the jobs, statuses, and notes you record in the tracker.
• Payment info — billing is processed by Stripe. We never see or store your card number.

2. Why We Collect It

• To generate CVs tailored to the specific roles you're applying for.
• To let you track and organise your graduate applications in one place.
• To process your subscription and send you receipts and account emails.

We collect only what we need to run the service. Nothing more.

3. Where We Store It

Your data is stored with the following services, all operating under GDPR-compliant terms:

• Supabase — account and CV data stored in the EU West (Ireland) region.
• Stripe — payment processing. Your card details never touch our servers.
• Resend — transactional emails (receipts, account notifications). Only your email address is shared.

We never sell your data to anyone.

4. How Long We Keep It

• Your data is kept for as long as your account is active.
• When you delete your account, all personal data is permanently removed within 30 days.
• Anonymised, aggregated usage statistics may be retained indefinitely — they can't be linked back to you.

5. Legal Basis (GDPR)

• Contract performance — we need your data to provide the CV tailoring and job search service you signed up for.
• Consent — you agree to these terms when creating an account.
• Legitimate interests — improving reliability and fixing bugs.

6. Your Rights

Under GDPR you have the right to:

• Access — request a copy of everything we hold about you.
• Rectification — correct anything that's wrong or out of date.
• Erasure — delete your account and all your data at any time.
• Portability — export your data in a machine-readable format.
• Withdraw consent — stop processing at any time by contacting us or deleting your account.

To exercise any of these rights, email hello@gradroute.ie.

7. Cookies

We use functional cookies only — no tracking, no advertising.

• Supabase session cookie — keeps you logged in. Deleted when you sign out.
• Stripe cookies — set by Stripe during checkout for fraud prevention.

No analytics or third-party advertising cookies are used on GradRoute.

8. Contact

Questions about this policy or how your data is handled? Reach us at hello@gradroute.ie.