Back to home

Privacy Notice

Last updated: September 19, 2026

The short version

  • We collect only what the app needs to compare your coursework with job postings.
  • We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the past 12 months, including for anyone under 16.
  • You can download everything we hold about you, erase parts of it, or delete your account at any time.
  • We never ask for Social Security numbers, medical records or other sensitive documents — uploads containing them are blocked and not stored.

Notice at collection: what we collect and why

CategoryExamplesWhy we use itHow long we keep it
IdentifiersName or display name, email address, account ID.Create and secure your account, sign you in, send results you ask us to email.Until you delete your account.
Education informationSchool, degree path, degree level, graduation year, courses, syllabus or transcript text you upload.Compare your coursework with job postings and build your gap, learning and career plans.Until you erase it on the Erase and Reset page or delete your account.
Professional or employment informationResume and cover letter text you paste or upload, saved job postings, match reports.Score your fit for postings, critique your resume, and find matching jobs.Until you erase it or delete your account.
Internet or app activityPages used in the app, assistant chat messages you send, saved preferences such as theme and language.Run the app, remember your settings, answer your help questions, and fix errors.Chats until you delete them; preferences stay on your device until you clear them.
InferencesAlignment scores, skill gaps, recommended courses and roles.Show you your match results and suggestions.Until you erase it or delete your account.

We collect this information from you and from your use of the app. We use it only for the purposes listed above and compatible purposes such as security, troubleshooting and preventing abuse. We do not use it for profiling that produces legal or similarly significant effects, and we do not use automated decision-making in place of your own judgment — every result is a suggestion for you to review.

Sensitive personal information

We do not ask for or intentionally collect sensitive personal information such as Social Security numbers, government identifiers, financial account numbers, health or medical records, or immigration documents. Documents you upload are scanned before processing, and any file containing that kind of information is rejected and never stored. Because we do not use or disclose sensitive personal information beyond what is necessary to provide the app, no separate right-to-limit request is required.

Who we disclose information to

We do not sell or share your personal information. We disclose limited information to service providers who process it only on our instructions and are contractually barred from using it for their own purposes:

  • Our cloud hosting and database provider, which stores your account and app data.
  • Our AI processing provider, which analyzes course, posting, resume and chat text to produce your results.
  • Our job-listing search provider, which retrieves public postings you search for.

We may also disclose information if required by law or to protect the rights and safety of users. Emails you send from the app (sharing results or a link with a friend) are composed in your own email program and are sent by you, not by us.

Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect, use and disclose.
  • Access and port a copy of your information in a portable format.
  • Delete your personal information.
  • Correct inaccurate personal information.
  • Opt out of sale or sharing — we do not sell or share, so there is nothing to opt out of.
  • Limit use of sensitive personal information — we do not collect it.
  • Non-discrimination: exercising any right never changes the price or quality of the app.

Most rights are self-service and take effect immediately: Your Privacy Choices explains how to download, correct, erase or delete your data. Because these tools run inside your signed-in account, signing in is how we verify your request. You may also use an authorized agent; we will ask for written permission and verify your identity directly. We respond to requests within 45 days.

We also honor browser Global Privacy Control (GPC) signals. Since we never sell or share personal information, an incoming GPC signal requires no change to how we treat your data.

Do Not Sell or Share My Personal Information

California residents can exercise their right to opt out of the sale or sharing of personal information, including for targeted advertising, by visiting Your Privacy Choices. Because Gaps2Bridges does not sell personal information and does not share it for cross-context behavioral advertising, there is currently no sale or sharing to opt out of. We honor Global Privacy Control signals and will never discriminate against anyone for exercising their privacy rights.

Your rights in the EU, EEA, UK and Switzerland (GDPR)

Gaps2Bridges is the controller of the personal data described above. If you are in the European Economic Area, the United Kingdom or Switzerland, the UK GDPR and EU GDPR give you the rights below, free of charge, and we answer within one month:

  • Access a copy of your personal data.
  • Rectification of data that is wrong or incomplete.
  • Erasure (“right to be forgotten”) of your data or your whole account.
  • Restriction of processing while a dispute about your data is resolved.
  • Portability — your data as a machine-readable file you can take elsewhere.
  • Objection to processing based on our legitimate interests.
  • Withdraw consent at any time, without affecting processing already carried out.
  • Complain to your local data protection authority (for example the UK ICO or your national supervisory authority).

Use Your Privacy Choices to access, correct, export or erase your data instantly, or email us for anything else. We never make decisions about you by automated means alone that produce legal or similarly significant effects — every match score and suggestion is advisory.

Our legal bases for processing (GDPR Article 6)

  • Performance of a contract — creating and running your account, comparing your coursework with job postings, and producing the plans and reports you request.
  • Consent — optional actions you choose, such as uploading a syllabus or resume, using the AI assistant, or emailing results. You can withdraw consent by deleting that content at any time.
  • Legitimate interests — keeping the app secure, preventing abuse and fixing errors, balanced against your rights.
  • Legal obligation — where we must keep or disclose information to comply with the law.

International data transfers

Our hosting, database and AI processing providers operate servers in the United States, so your data may be transferred outside the EEA and the UK. Those transfers rely on the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, together with encryption in transit and access controls that restrict each record to your own account. Our providers act as processors and may use your data only on our instructions.

Cookies and tracking

We do not use advertising cookies, third-party trackers or cross-site analytics. The app stores a small amount of information on your own device — your sign-in session, theme, language and background choice — so it keeps working between visits. Clearing your browser or app storage removes it.

Children

Gaps2Bridges is intended for college students and adults. We do not knowingly collect personal information from children under 13, and we do not sell or share the personal information of anyone under 16.

Security and retention

Your data is protected by account-level access rules so that only you can read or change your own records, and all traffic is encrypted over HTTPS. We keep your information only as long as your account exists or until you erase it, whichever comes first. Deleted data is removed from our active systems immediately.

Contact us

To ask a privacy question or make a request another way, email support@gaps2bridges.co.site. Tell us it is a California privacy request and we will verify your identity before responding. If we deny a request, we will explain why and how to appeal.

This notice describes our actual practices. If we ever change them, we will update this page and the date at the top.