What happens to your data.

Who we are

Student Assist is run by Qayum Software Ltd, a company registered in England and Wales (number 17432547). It is the data controller for anything you save to an account. Write to hello@constellation.careers with any question about your data.

Without an account

Your CV file is read on your device; the file itself is never uploaded. Its text, your modules, projects, work, goals, study-plan ticks, applications and course feedback are kept in this browser's storage. We can't see any of it. Clearing your browser's site data, or Remove everything from this browser on your profile, deletes it.

Searching for jobs sends our server only the role you picked and the place you typed. Matching an advert against your lines happens in your browser.

With an account

Signing in is optional. If you do, we keep:

• Your email address, to send you a sign-in link and to know which account is yours.
• Your plan, when you press Save: the course, modules, projects, work, goals and CV text you entered, so it can be rebuilt when you come back.
• Your profile: the name, course, year and finishing month you give, and whether you share with your careers service.
• Your applications: job titles, employers, links, dates, stages and your notes.
• Course feedback you send: the module, your rating and what you wrote.

Only you can read these. The database enforces that for every table: each row belongs to one account and no other account can read it.

What your university sees

Nothing about you by name unless you choose to share with your careers service, which is off until you turn it on. If you share, confirmed staff on your course see your name, your year, how your plan is going and how many applications, interviews and offers you have. They don't see your CV, your notes or your plan's text.

Course feedback is anonymous unless you untick that box; staff see your name with it only if you do. A module's feedback stays hidden from staff until at least three students have rated it, so one early comment can't be traced back. What you write is shown to staff word for word, so leave out names.

Counts of what students apply for include only students who share. An employer is named only once at least three sharing students on the course have applied there.

Who handles it for us

• Supabase. Stores your account and anything you save to it. The database is in London (eu-west-2).
• Resend. Sends the sign-in email. It sees your email address and the email's contents. We use its Ireland (EU) region, but Resend is a US company, so its staff may be able to reach this data from the US.
• Vercel. Hosts the site. Like any web host it sees your IP address and the pages you request. It also counts page views (Vercel Web Analytics) without cookies. For each view it gets the page address with anything after the path removed, the page you came from, and the general device, browser, operating system and rough location details its analytics collect. It gets nothing you type: no CV, plan or form content.
• Reed and Adzuna. Supply live job adverts when they're switched on. Our server asks them for a role and a place only; they never see you or your plan.

We don't use advertising or tracking cookies, and we don't sell or share your data with anyone else.

Your rights

Under UK data protection law you can ask for a copy of your data, have it corrected, or have it deleted, and you can withdraw a sharing choice at any time on your profile. Download my data on your profile gives you what this browser holds. Deleting a saved account isn't self-service yet: email hello@constellation.careers and we'll delete it and everything saved to it.

We keep account data until you ask us to delete it. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office (ico.org.uk).

This is a pilot

Student Assist is in an early pilot. If what we do with data changes, this page will change first, with a new date at the top. See also the terms.