Privacy notice

Aaron Flavien, trading as Graduate Gems, is responsible for how the service uses your personal information. Contact info@graduategems.com or write to 11 Thirlstone Road, Luton, Bedfordshire, LU4 8QT, United Kingdom.

You provide your account details, degree, skills you confirm, career and experience details, vacancy information, application drafts and any support messages. We also receive payment status and references from Stripe, and technical information needed to operate and protect the service, such as request times, browser/network information and error reports. Please do not enter health information, government identifiers, bank details or other sensitive personal information in career answers. Enter payment-card details only in Stripe's checkout.

We use necessary account and career information to provide the service you request, save progress and prepare your application materials: our basis is performing our contract with you or taking requested steps before it. We retain required accounting records to meet legal obligations. We use limited diagnostic, support, transaction and request-handling records for our legitimate interests in security, resolving problems, dealing with claims and respecting your data rights. We balance these interests against your privacy and minimise what we retain. You can object to processing based on legitimate interests by contacting us. Where we rely on consent for an optional use, you can withdraw it without affecting earlier lawful use. The permissions for immediate digital supply at checkout are separate from consent to optional personal-data uses.

The AI uses information you supply or confirm to suggest skills, career directions and application drafts. You choose your direction and review and correct your documents. Graduate Gems does not decide whether an employer hires you or submit an application on your behalf. AI can make mistakes. Providing the necessary account and career details is optional, but without them we cannot provide the relevant saved or tailored service. You do not need to supply unrelated personal information.

Lovable Cloud hosts the application and provides database, authentication and service-email infrastructure through its subprocessors. Our application database is in Ireland; this does not mean every provider processes information only in Ireland. OpenAI processes the information needed to generate skill suggestions and application drafts through its API. We do not use your career content to train our own models. OpenAI states that API content is not used for model training by default; its standard abuse-monitoring records may include requests and responses and are generally retained for up to 30 days, with exceptions described in its data controls. We do not claim zero retention. Stripe handles payments and processes payment information under its own privacy information; Graduate Gems does not store full payment-card details. We use Google Workspace for support email and restricted business, accounting and deletion-request records. The website loads Google Fonts, which sends ordinary connection information to Google. If you opt in, Google Ads also counts completed purchases (see Optional ad measurement). We do not send your career documents to employers through this service.

Our providers can process information outside the UK, including in the EEA and United States. Applicable provider agreements use adequacy arrangements or contractual safeguards, including the UK Addendum to standard contractual clauses where required. Contact us for information or a copy of the applicable safeguards.

Provider details:

• Lovable's data-processing agreement
• Lovable's subprocessor list
• OpenAI's API data controls
• Stripe's privacy policy
• Google Workspace's data-processing terms

We keep account and application information while needed to provide your saved service. You can request account deletion at info@graduategems.com; we may need to verify your identity. Deletion ends hosted access. We remove account access and career content through our controlled process and separately resolve outstanding payments. We retain only justified records for accounting, disputes, security or handling your request, and explain relevant exceptions. Required sole-trader accounting records are normally kept for at least five years after the relevant 31 January tax-return deadline. Minimal purchase/acceptance evidence is normally retained for up to six years from purchase for contract matters, with annual review, earlier minimisation and documented exceptions for active claims or legal obligations. These periods do not justify retaining your CV or career answers as accounting evidence. Support and request records are reviewed at closure and annually; we retain the minimum needed for the unresolved issue or to evidence and respect the request.

Deletion from the live service does not instantly remove every provider backup or security record. Lovable maintains database snapshots that cannot be edited to remove a single account; an exact backup expiry has not been confirmed to us. We keep an independent deletion record and do not deliberately restore an older snapshot containing erased information unless it can be kept out of use while deletions are reapplied. Provider security records have their own purposes and retention rules. We do not promise immediate backup erasure or a fixed expiry that has not been verified. Files you download to your device are under your control.

If you choose to turn it on, we use Google Ads conversion measurement to count completed purchases that came from our ads. It is off unless you accept, and no Google Ads measurement takes place before you do (the site's Google Fonts connection, described above, is separate). When on, Google may set measurement cookies and receives a one-way purchase reference, the amount paid and the currency, together with the page address without query details and ordinary connection information. We do not send your name, email, CV, profile, career answers or vacancy text, and we keep ad personalisation and enhanced conversions switched off, so this information is not meant to be used for remarketing. Our basis is your consent. You can turn it off at any time below; this stops future measurement and clears Google measurement cookies on this site without signing you out or removing your drafts. See how Google uses information from sites that use its services.

Browser storage keeps you signed in and preserves unfinished choices and drafts. Before signup this can include your degree, skills and email. Signed-in profile and vacancy drafts are stored separately for each account. Some browser data remains until the service clears it or you remove the site's data. Clearing site data can sign you out and remove unfinished work; it does not delete information already saved to your account. On a shared device, sign out and clear site data when finished.

Depending on the circumstances, you can ask to access, correct, erase, restrict or receive a portable copy of your information. You can object to uses based on legitimate interests. Contact info@graduategems.com; rights have conditions and legal exceptions, which we will explain where relevant. You can also complain to the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/. We will update this notice when our processing changes and draw material changes to your attention as appropriate.