Privacy Policy

1. Introduction

GtCompass ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our UK Global Talent Visa assessment tool.

2. Data Controller

GtCompass is the data controller responsible for your personal data. We are committed to complying with the General Data Protection Regulation (GDPR) and UK data protection laws.

3. Information We Collect

We collect the following types of information:

3.1 Information You Provide

• Field Selection: Your chosen professional field
• Questionnaire Responses: Information about your professional achievements, publications, awards, and experience
• Documents: CV, recommendation letters, portfolio items (PDF or DOCX format)
• Portfolio URLs: Links to your online portfolio or professional profiles

3.2 Automatically Collected Information

• Session Data: Temporary session identifiers to maintain your progress
• Technical Data: Browser type, device information, IP address (anonymized)

4. How We Use Your Information

We use your information solely for the following purposes:

• Visa Assessment: To analyze your eligibility for the UK Global Talent Visa
• AI Analysis: To process your data using GPT-4 for personalized recommendations
• Report Generation: To create your personalized assessment report and roadmap
• Service Improvement: To improve our analysis algorithms (anonymized data only)

5. Legal Basis for Processing

Under GDPR, we process your data based on:

• Consent: You explicitly consent to data processing when you check the privacy consent box
• Legitimate Interest: To provide and improve our assessment service

6. Data Security

We implement industry-standard security measures:

• Encryption: All data is encrypted in transit (HTTPS) and at rest
• Access Control: Strict access controls limit who can view your data
• Secure Storage: Documents are stored in secure, encrypted cloud storage
• Regular Audits: We conduct regular security audits and updates

7. Data Sharing and Third Parties

We only share data with:

• OpenAI: For AI-powered analysis (subject to their privacy policy and data processing agreement)
• Cloud Providers: For secure data storage (AWS/GCP, subject to data processing agreements)
• Legal Authorities: Only if required by law or to protect our legal rights

8. Your Rights Under GDPR

You have the following rights:

9. Data Retention

We retain your data for as long as necessary to provide our services. Session data is automatically deleted after 30 days of inactivity. You can request immediate deletion of your data at any time by contacting us or using the data deletion feature in your account.

10. Cookies and Tracking

We use essential cookies to maintain your session and provide our services. We do not use advertising or tracking cookies. You can manage cookie preferences through our cookie consent banner.

11. International Data Transfers

Your data may be processed in countries outside the UK/EEA. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) and adequacy decisions.

12. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us: