Last updated: 22 October 2026
This notice explains what we do with your data and the rights you have over it under the EU and UK GDPR and the other data-protection laws that apply to us.
Draft. This text was written for the pre-launch prototype and has not yet been reviewed by a lawyer. The data controller's legal name and address, and the exact law that governs it, will be added once the company is incorporated. Last updated: 22 October 2026.
Pathlift (being incorporated). The legal name and address will be added after incorporation. Contact: hello@pathlift.co (temporary address).
| Data | Why |
|---|---|
| Your CV text (name, contact details, education, experience, skills) | To match you with postings and prepare applications |
| Preferences (location, level, role) | To filter matches |
| Application board entries and drafts | So you can track your applications |
| Master's programmes you follow | To tell you when a call opens |
| Email address (at launch) | Account and notifications |
| Optional: job-related messages in a connected mailbox (at launch) | To update application status automatically |
Please keep special categories of data such as religion, health or ethnic origin out of your CV; they aren't needed to apply. If they are there, we don't process them separately.
Your data is processed to provide the service you ask for (performance of a contract) and for our legitimate interests in running and securing it. For optional features such as connecting a mailbox, we rely on your consent, which you can withdraw at any time. When data goes to a provider in another country, we use the safeguards the law requires there, such as standard contractual clauses.
We don't sell your data or share it for advertising. To provide the service, it may be shared with these providers:
| Provider | For | Location |
|---|---|---|
| Vercel | Hosting the site and server, storing job data (CVs are not stored) | Germany (Frankfurt); company based in the US |
| Anthropic (Claude API) | CV tailoring and cover letters, only when you ask | US |
| Google Fonts | Page fonts; sees your browser's IP address | US |
| The company you apply to | When you press submit, through the company's own form | Depends on the company |
Email and payment providers will be chosen before launch and added to this table. Transfers to providers in other countries use the safeguards described in section 3.
Your CV, the profile built from it, your application board and the programmes you follow are kept only in your own browser (localStorage). Our server doesn't store them: your CV is sent to the server only for the request that computes matches or, when you ask, prepares an application, and is let go when that request ends. One consequence is that your data doesn't move to another device or browser.
We don't use cookies, and there are no analytics, advertising or tracking cookies either. There are no third-party pixels (Google, Meta or others) on the site, which is why we don't show a cookie banner.
We log which button was clicked on which page in our server logs, with only the page and the button name (for example “home · start free”). These log lines contain no cookie, IP address or anything that identifies you. Our hosting provider keeps technical request logs (including IP addresses) for a short time for security and error tracking.
You can delete the data in your browser with one click at any time; clearing your browser data has the same effect. There is no record of you left on our server. Records we must keep by law (invoices, for example) are kept for the legal period.
Send your request to hello@pathlift.co with the subject “Data protection request”. We reply within 30 days at the latest.
Pathlift is not designed for people under 18.