Last updated: June 2026
At GradVox, we are committed to protecting the privacy of UK & Ireland graduates and employers. This Privacy Policy details how we collect, store, share, and delete your data under the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.
Our platform implements “Privacy by Design” to protect candidate graduates from uninvited outreach. This includes:
- Data Minimisation: We collect only the absolute minimum data required to establish candidate quality. We do not collect phone numbers, dates of birth, or home addresses.
- Contact Control: Recruiter access is gated. Recruiters see only first name and university/graduation details. A candidate's email address is revealed only when a recruiter actively adds that candidate to their shortlist.
For Candidates, we collect and store:
- Email address (used solely for magic-link authentication).
- First name, university name, graduation year, and degree category.
- The video pitch recorded in-browser. Video streams are uploaded directly to Bunny.net and never touch our primary application server.
We believe you should have absolute control over your digital footprint. Our platform offers two methods of data deletion:
- Manual Hard Delete: You can delete your account from your Settings page at any time. When triggered, all database records, notifications, shortlisted references, and CDN video files are completely and permanently erased within seconds.
- Inactivity Auto-Deletion: To ensure we do not retain graduate data longer than necessary, any candidate account that is inactive for a period of 12 consecutive months is automatically scheduled for a hard delete.
We do not sell, rent, or trade user data. Candidate video pitches and basic academic details are shared only with registered and verified Recruiters on the platform. Email details are only disclosed to recruiters who shortlist you.