Privacy Policy
Last updated 5 July 2026
Gradux (“we”, “us”) is a graduate career operating system that helps you manage applications, build a knowledge base of your experience, and prepare for interviews. This policy explains what information we collect, how we use it, and the choices you have.
Information we collect
Account information. When you sign up, we collect your email address and authentication details via our identity provider (Supabase Auth). We also collect your phone number solely to verify your account and prevent duplicate free accounts: it is used to send a one-time verification code, and a hashed version is kept to enforce one account per number.
Usage information. We record product events (for example, that an application was created or an AI draft was generated) in our own database to understand how Gradux is used and improve it. This stays in our systems: no third-party analytics service is involved. If you choose to attach a screenshot or screen recording to feedback, it is stored securely and used only to understand and fix the issue you reported.
Profile and career information. Information you add about your background, skills, target roles, and experience, including STAR stories, competencies, and writing preferences.
Documents you upload. CVs, cover letters, assessment evidence, and profile photos that you choose to add to your vault.
Application and workspace data. Details about the companies and roles you track, pipeline stages, notes, interview prep, and related activity.
How we use your information
We use your information to:
- Provide and maintain your account, vault, and application workspaces.
- Generate AI-assisted content such as cover letters, interview answers, and STAR story extraction, based on the information and documents you provide.
- Look up company logos and information to personalise your workspaces.
- Keep the product secure, diagnose issues, and improve reliability.
AI processing
Where you use AI-assisted features (for example, drafting a cover letter or interview answer, or extracting STAR stories from a document), the relevant text is sent to Anthropic's Claude API for processing. This content is used only to generate the response shown to you and is not used by us or Anthropic to train models. Anthropic processes this data in the United States under safeguards set out in its data processing agreement.
Cookies and similar technologies
Gradux uses a minimal set of cookies and browser storage, all of which are essential:
- Authentication cookies (set by Supabase Auth) keep you signed in and secure your session.
- Theme preference(light or dark mode) is stored in your browser's local storage so the app remembers your choice between visits.
We do not use third-party analytics, advertising, or tracking cookies. The usage information described above is recorded server-side in our own database and involves no additional cookies. If this ever changes, we'll update this policy and ask for your consent where required.
Third-party services
We rely on the following third-party services to operate Gradux:
- Supabase: authentication, database, and file storage for your account and documents.
- Anthropic: AI processing for AI-assisted features, as described above.
- Logo.dev: company logo lookups used to personalise your workspaces.
- Vercel: application hosting.
- Stripe: payment processing for Pro subscriptions. Card details are handled by Stripe and never touch our servers.
- Twilio: delivers the phone verification code by SMS and processes the phone number for that purpose only.
Data retention and deletion
We retain your information for as long as your account is active. You can permanently delete your account and all associated data at any time from Settings → Account. You can also export a copy of your data from the same page. If you need assistance, contact us using the details below.
Your rights
If you are in the UK, you have rights under UK GDPR, including rights of access, rectification, erasure, portability, restriction and objection. To exercise any of these rights, contact us using the details below. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk.
Changes to this policy
We may update this policy from time to time. If we make material changes, we'll let you know within the app.
Contact us
If you have questions about this policy or want to exercise your data rights, email us at privacy@gradux.app.