Beta

We're in beta. Send feedback

Legal

Privacy Policy

Last updated 14 October 2026

This policy explains what personal data Campus to Corporation collects when you use our website, dashboard, Focus Mode and browser extension, why we process it, how long we keep it, and the rights you have over it.

Delete your data at any time

You can request deletion of your Personal Data whenever you like, and we complete it within one month.

Curriculum data trains our AI

Data collected from the University Curriculum is stored and used for AI training.

Audit logs expire after 2 years

Audit logs are retained for a maximum of 2 years, then purged automatically.

Who we are

Campus to Corporation is owned and run by students, job seekers and professionals who went through the entire process themselves. Campus to Corporation is responsible (the “controller”) for the personal data described in this policy. For any privacy question or request, email support@campustocorporation.com.

Data we collect and why

We only collect what the features you use need. Here is each category, why we process it and for how long.

Account and profile

What we collect
Your name, email address and sign-in details (handled by Clerk); whether you're a student or a job seeker; city, postcode and university; and, if you verify your student status, your university email, ID number and the document you upload.
Why
Creating and securing your account, personalising the app and verifying student status.
Legal basis
Performance of our contract with you (Art. 6(1)(b) GDPR).
How long we keep it
Until you delete your account.

API keys (Bring Your Own Key plan)

What we collect
If you subscribe to the Bring Your Own Key plan, the Gemini and/or Groq API keys you add. We check each key with its provider when you save it, store it encrypted, and never display it again (only its last four characters).
Why
Running your AI requests on your own provider account. While a key is active, the text, documents and audio you submit to AI features are sent to that provider under your key, and your provider's terms apply to that processing.
Legal basis
Performance of our contract with you (Art. 6(1)(b) GDPR).
How long we keep it
Until you remove the key or delete your account.

University Curriculum

What we collect
Your degree and courses, the class schedules you upload, lecture materials and notes, notebook entries, reports and Study Canvas boards, the study plans, summaries, flashcards, quizzes and mind maps generated from them, your Study Calendar sessions, and your quiz answers and flashcard ratings.
Why
Running the study tools, generating study content and study schedules with AI, and AI training (see below).
Legal basis
Contract (Art. 6(1)(b) GDPR); AI training on the basis of legitimate interests (Art. 6(1)(f) GDPR).
How long we keep it
Until you delete it or your account. Quiz and flashcard answers also clear when you reset your progress.

Resume Hub

What we collect
Resumes and cover letters, job applications (including jobs saved with our browser extension), match scores and AI analyses, and AI interview practice sessions. In voice mode your microphone audio is streamed to our AI provider in real time; we store the text transcript, not the recording.
Why
Building your documents, analysing applications and running interview practice.
Legal basis
Contract (Art. 6(1)(b) GDPR).
How long we keep it
Until you delete it or your account.

Language Hub

What we collect
Your ratings of German vocabulary flashcards.
Why
Tracking your learning progress.
Legal basis
Contract (Art. 6(1)(b) GDPR).
How long we keep it
Until you reset your progress or delete your account.

Feedback

What we collect
What you send us: your name, email address, message and any screenshot you attach.
Why
Replying to you and improving the product.
Legal basis
Legitimate interests (Art. 6(1)(f) GDPR).
How long we keep it
Until you delete your account.

Website analytics

What we collect
Anonymous page-view data through Vercel Web Analytics: the page you visited, the referring site, and your country, browser, operating system and device type. It sets no cookies; visitors are counted using a short-lived hash that is discarded after 24 hours.
Why
Understanding which pages are used so we can improve the site.
Legal basis
Legitimate interests (Art. 6(1)(f) GDPR).
How long we keep it
Kept only as aggregated statistics, not linked to your account.

Newsletter

What we collect
Your email address.
Why
Sending the newsletter you signed up for. We first email a confirmation link and only subscribe an address once that link has been clicked.
Legal basis
Consent (Art. 6(1)(a) GDPR).
How long we keep it
Until you unsubscribe. An address that is never confirmed is deleted after 14 days.

Audit logs

What we collect
Records of which features you used and when (for example a resume scan or a deep AI analysis) and of the reminder emails we sent you.
Why
Enforcing plan limits, keeping the service secure and showing your usage counters.
Legal basis
Legitimate interests (Art. 6(1)(f) GDPR).
How long we keep it
A maximum of 2 years, then purged automatically.

University Curriculum and AI training

Data collected from the University Curriculum will be stored and used for AI training.

This covers your degree and course details, class schedules, the lecture materials and notes you upload, and the study plans, summaries, flashcards and quizzes generated from them. We use it to train and improve the AI behind our study tools, relying on our legitimate interest in making those tools more accurate.

You can object to this use at any time by emailing support@campustocorporation.com. Once you object, we stop using your curriculum data for future training. Information that has already shaped a trained model cannot always be separated from it afterwards.

How long we keep data

We keep personal data only as long as we need it for the purposes above. Audit logs are retained for a maximum of 2 years before they are purged automatically.

DataRetention period
Account and profile dataUntil you delete your account
Content you create (curriculum, Resume Hub, Language Hub, notes, reports)Until you delete it or your account
API keys you add on the Bring Your Own Key planUntil you remove them or delete your account
Audit logsMaximum 2 years, then purged automatically
Technical diagnostics (AI timeout events, background job records)24 hours and 7 days respectively
Newsletter subscriptionUntil you unsubscribe (an unconfirmed sign-up: 14 days)
Your cookie choice12 months, then we ask again

Your rights

You have these rights over your personal data. To use any of them, email support@campustocorporation.com; we reply within one month.

  • Access

    Ask for a copy of the personal data we hold about you (Art. 15 GDPR).

  • Rectification

    Have inaccurate data corrected (Art. 16 GDPR) — most of it you can edit yourself in your profile.

  • Erasure

    Have your personal data deleted (Art. 17 GDPR) — see “Deleting your data” below.

  • Restriction

    Ask us to limit how we use your data while a question is resolved (Art. 18 GDPR).

  • Portability

    Receive the data you gave us in a machine-readable format (Art. 20 GDPR).

  • Objection

    Object to processing based on legitimate interests, including AI training (Art. 21 GDPR).

  • Withdraw consent

    Withdraw any consent at any time, without affecting earlier processing (Art. 7(3) GDPR).

  • Complain

    Lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

Deleting your data

You can request the deletion of your Personal Data at any time.

Delete individual items — a resume, a cover letter, a note, a course — wherever the app offers a delete option, and reset quiz and flashcard answers from the Focus Mode sidebar. To delete your account and all personal data linked to it, email support@campustocorporation.com from the address on your account. We confirm the request and complete the deletion within one month, except for anything we are legally required to keep.

Cookies

We use essential cookies and similar browser storage that the site needs to work, and one optional preferences cookie that is only set if you allow it. We don't use advertising or tracking cookies. You can change your choice at any time under “Cookie settings” in the footer.

NameCategoryPurposeDuration
Clerk session cookies (e.g. __session, __client_uat)EssentialKeep you signed in and protect your account.Session to 1 year, set by Clerk
cc-cookie-consent (local storage)EssentialRemembers the cookie choice you made.12 months
cc-site-theme (local storage)EssentialStores the light or Late-Night theme, only when you choose one with the theme toggle.Until you clear it
sidebar_statePreferencesRemembers whether the Focus Mode sidebar is expanded. Only set if you allow preferences.7 days

Service providers

We use these providers to run the service. They process personal data on our behalf and only for the purposes listed. Some are based outside the EU/EEA; where data leaves it, we rely on safeguards such as the EU Standard Contractual Clauses.

  • ClerkSign-in and account management
  • SupabaseDatabase and file storage (uploaded documents, lecture PDFs, report images)
  • RailwayHosting for our application servers
  • VercelHosting for this website and cookieless page-view analytics (Vercel Web Analytics)
  • Google (Gemini API)AI processing for resume analysis, study tools and AI interviews, including voice mode audio
  • GroqBackup AI processing of the text you submit when Gemini can't answer
  • ResendDelivering reminder emails
  • OpenPLZ APICity and postcode suggestions — your browser sends what you type in those profile fields directly to it

Changes to this policy

When we change how we handle personal data, we update this page and the date at the top. For significant changes we will let signed-in users know. Questions? See our help guides or email support@campustocorporation.com.