Privacy · Notice

    Your draft,
    your data.

    What we collect, why we collect it, and how long it stays around. Written in plain English — the same plain English we expect from the visa caseworker who'll one day read your application.

    Last updated · 25 April 2026

    Who we are

    Global Talent AI is an AI-assisted drafting studio for the UK Global Talent visa. We are not a law firm, not affiliated with the Home Office, and we do not provide legal advice. For regulated immigration advice, consult an OISC-registered adviser.

    For the purposes of UK GDPR, the data controller is Global Talent AI · London. To exercise any right described below, email privacy@ukglobaltalentvisa.org.

    What we collect

    Three categories — nothing else, no third-party data brokers, no profile enrichment.

    Account
    What
    Email address and a hashed password (or your OAuth provider's user ID if you sign in with Google).
    Why
    So you can come back to a saved draft. Authentication is handled by Supabase.
    Kept
    Until you delete your account.
    Drafts
    What
    The free-text and structured answers you enter into the application wizard, the strength-grading tool, and the rate-my-application form.
    Why
    To save your progress, generate suggestions via large language models, and grade the draft against endorsing-body criteria.
    Kept
    Until you delete the draft or your account. Drafts are private to your account by default.
    Payments
    What
    Stripe Checkout collects card details directly — we never see your full card number. We retain the Stripe customer ID, the amount, currency, and the date of purchase.
    Why
    To unlock paid features for your account, issue refunds, and keep statutory tax records.
    Kept
    Six years from the end of the relevant accounting period (UK HMRC requirement).

    Analytics & cookies

    We use Google Analytics 4 (property G-DB0ZL9QP10) via Google Tag Manager to understand which routes and tools people actually use. IP addresses are truncated by Google before storage, and we have not enabled Google Signals, advertising-personalisation features, or cross-site tracking.

    We do not run third-party advertising pixels, social-network trackers, session-replay tools, or fingerprinting scripts. Aside from cookies set by Google Analytics and a strictly necessary session cookie set by Supabase when you sign in, we set no other cookies.

    You can opt out of Google Analytics with the official browser add-on or by enabling "Do Not Track" / blocking third-party cookies in your browser. The studio works without analytics enabled.

    How we use AI

    The drafting wizard, strength grader, and rate-my-application tool send your input to large language models hosted by third-party providers (currently OpenAI, Anthropic, and OpenRouter, depending on the feature). These providers process your text on a no-training, zero-retention API basis — your drafts are not used to train their models.

    Outputs are AI-generated drafts, not legal advice. Always have a qualified adviser review the final application before you submit it to an endorsing body or the Home Office.

    Sharing

    We share data with a small number of named processors:

    • Supabase — authentication, database hosting, and file storage (EU region).
    • Stripe — payment processing.
    • OpenAI / Anthropic / OpenRouter — LLM inference for drafting and grading features.
    • Google (Analytics, Tag Manager, Fonts) — aggregated traffic analytics and font delivery.

    We do not sell personal data, ever. We do not share your draft content with employers, endorsing bodies, the Home Office, or any other third party — that is for you to do, when and if you choose.

    International transfers

    Some processors (notably OpenAI, Anthropic, and Stripe) may process data outside the UK and EEA. Where they do, transfers are protected by the UK International Data Transfer Addendum, Standard Contractual Clauses, or an adequacy decision — as appropriate for each provider.

    Your rights

    Under UK GDPR you have the right to access, correct, export, or delete the personal data we hold about you, and to object to or restrict our processing. To exercise any of these rights, sign in and use the controls in your dashboard, or email privacy@ukglobaltalentvisa.org. We respond within 30 days.

    If you are not satisfied with our response, you can complain to the UK Information Commissioner's Office at ico.org.uk.

    Changes to this notice

    We update this notice when our practices change. The "Last updated" date at the top reflects the latest revision. For material changes that affect data already collected, we will notify signed-in users by email.

    Questions on your data? Just ask.

    Email privacy