Privacy & Data Policy

Last updated: June 2026 · Written to comply with UK GDPR

Gradvo is built privacy-first: our free tools run entirely in your browser, so the CV text, LinkedIn profile and job descriptions you paste or upload are never sent to or stored on our servers. This policy explains the limited data we do process.

1. Who we are

Gradvo ("we") operates gradvo.vercel.app, providing free career tools and paid career services to students in the UK. We are the data controller for the personal data described below. Contact us via the contact form.

2. What we collect and why

a) Tool content — not collected

Text and files you put into the ATS checker, resume builder, LinkedIn scorer, cover letter generator: processed locally in your browser only. Uploaded files are read in-memory on your device and never leave it.

b) Account data

If you create an account we process your name, email address and authentication identifiers. Authentication is provided by Google Firebase Authentication (Google Ireland Ltd / Google LLC), which stores this data on our behalf. Legal basis: performance of a contract (providing your account). Firebase may transfer data outside the UK/EEA under Google's standard contractual clauses.

c) Saved results

Tool scores you choose to save are stored in your browser's local storage on your own device — not on our servers. Clearing your browser data removes them.

d) Quote and contact requests

When you submit the quote form we process the details you provide (name, email, service interest, message) to respond to your enquiry. The form is delivered by Web3Forms to our email inbox. Legal basis: steps prior to entering a contract, and our legitimate interest in responding to you.

e) Job description fetch by link

If you paste a job advert URL, that URL is sent to our serverless function (hosted by Vercel) only to retrieve the page text, which is returned to your browser. We do not log or store the URL or its content.

3. Cookies and local storage

We use essential local storage only: your sign-in session (Firebase), your saved results, and your acknowledgement of our notice banner. We do not use advertising or cross-site tracking cookies.

4. How long we keep data

Account data is kept until you delete your account (request via the contact form, or we can delete it on request). Quote emails are kept as long as needed to handle your enquiry and any resulting service, then deleted. Locally stored data stays on your device until you clear it.

5. Your rights (UK GDPR)

You have the right to access, correct, delete, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. To exercise any right, contact us via the contact form. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

6. Third-party processors

7. Children

The Site is intended for users aged 16 and over.

8. Changes

We will update this page if our data practices change, and revise the date at the top.