Privacy Policy

Last updated: 5 April 2026

1. Who we are

Mave is a job navigation and career development platform operated by Altair Tech Solutions Ltd, a company registered in England and Wales.

Privacy contact: info@mavejob.com

We are the data controller for the personal data you provide when using Mave. This means we are responsible for deciding how and why your personal data is processed, and we are accountable for doing so in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What data we collect and why

We collect only the data necessary to provide the Mave service. Below is a full account of each category of data we collect, why we collect it, and the legal basis under UK GDPR.

2.1 Account data

2.2 Professional data

2.3 Job activity and behavioural data

2.4 AI-generated content

2.5 Payment data

Payment processing is handled entirely by Stripe. We do not store, see, or have access to your full card number, CVV, or bank details. Stripe processes this data as a data controller in its own right, governed by Stripe's Privacy Policy.

2.6 Usage and analytics data

Analytics in both the Mave app and on the public marketing website are provided by Google Analytics 4. See Section 4 (Cookies and tracking) for further detail.

2.7 Communications preferences

3. How we process your data

3.1 AI processing (OpenAI)

Each time you request a job match analysis, tailored CV, cover letter, or gap analysis, your resume content, supplementary background information, and the relevant job description are sent to OpenAI — our AI sub-processor — to power those features.

OpenAI processes this data solely on our instructions under a Data Processing Agreement. By default, OpenAI retains API inputs and outputs for 30 days before deletion. OpenAI does not use data submitted via the API to train its models.

3.2 Database storage (Supabase)

All user account data — including your email address, resume content, AI-generated documents, and job activity — is stored by Supabase, our database hosting provider, on servers located in London, United Kingdom (AWS eu-west-2). As this is within the UK, no international data transfer occurs for your stored data.

Supabase acts as a data processor under a Data Processing Agreement and does not have independent access to your data.

3.3 Authentication (Google)

We use Google OAuth to handle sign-in. We receive only your email address from Google. Google's own Privacy Policy governs how Google handles your information during the sign-in process.

3.4 Payment processing (Stripe)

Credit purchases are processed by Stripe. You are redirected to Stripe's secure payment interface; we never handle your card details directly. Stripe acts as an independent data controller for payment data. See Stripe's Privacy Policy.

4. Cookies and tracking

4.1 Mave app

The Mave app uses Google Analytics 4 to collect anonymised usage data (such as which features you use and how long you spend in the app). This helps us improve the product. No personally identifiable information is included in these analytics events. Google Analytics 4 uses cookies to collect this usage data.

4.2 Public marketing website

Our public website (mavejob.com) uses Google Analytics 4 to collect anonymised information about visitors, including pages viewed, traffic sources, device type, and approximate location (country/city level). This data is used to measure the effectiveness of our marketing and improve the website.

Google Analytics uses cookies. When you first visit the website, you will be presented with a cookie consent banner giving you the choice to accept or decline analytics cookies. You can change your preferences at any time via the cookie settings link in the website footer.

If you decline analytics cookies, Google Analytics will not be loaded and no tracking data will be collected from your session.

5. Marketing communications

We may send you the following types of email communications, but only if you have explicitly opted in:

Product update newsletters — news about new Mave features, improvements, and announcements
Personalised daily job alerts — a curated digest of new job listings matched to your profile

You can opt in to these communications during the sign-up or onboarding process, and you can withdraw your consent and unsubscribe at any time by:

Clicking the unsubscribe link in any marketing email, or
Contacting us at info@mavejob.com

Withdrawing consent does not affect your ability to use Mave, and it does not affect the lawfulness of any processing that took place before you withdrew consent.

We do not send marketing emails based on legitimate interests — all marketing is consent-based.

6. Sharing your data

We do not sell, rent, or trade your personal data with third parties for their own marketing purposes.

We share your data only with the sub-processors listed below, all of whom are contractually bound to process it only on our instructions and to maintain appropriate security standards.

Sub-processors

7. International data transfers

Some of our sub-processors are based outside the United Kingdom. Where personal data is transferred outside the UK, we ensure that appropriate safeguards are in place as required by UK GDPR Chapter V.

8. How long we keep your data

The 30-day tail after account deletion gives us a short window to handle accidental deletions or resolve any outstanding queries before data is irreversibly purged.

9. Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

How to exercise your rights:

The easiest way to delete your account is to use the "Delete my account" option in the Account Settings panel within the Mave app. This immediately and permanently removes all your data from our systems.

For any other request, or if you prefer to contact us directly, email info@mavejob.com. We will acknowledge your request within 3 working days and respond in full within 30 days.

Right to complain:

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk/make-a-complaint
Phone: 0303 123 1113

We would, however, appreciate the opportunity to address your concerns directly before you contact the ICO — please reach out to us first at info@mavejob.com.

10. Age restrictions

Mave is intended for users aged 18 and over. By creating an account and purchasing credits, you confirm that you are at least 18 years of age.

Payment for credits is processed through Stripe, which requires a valid payment card. This serves as a practical age gate, as payment cards issued to individuals under 18 are uncommon in the UK.

If we become aware that a user is under 18, we will delete their account and all associated data promptly.

11. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

Row-Level Security (RLS) on all database tables — each user can only access their own data, enforced at the database level
Encrypted connections (HTTPS/TLS) for all data in transit between your browser and our servers
Environment variable storage for all API credentials and database keys — these are never stored in source code
Service-role key isolation — the database service role is not exposed to the front end

No method of transmission or storage is 100% secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where required, notify affected users without undue delay.

12. Changes to this policy

We will update this policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page will always reflect the most recent revision.

For material changes — such as a new category of data being collected or a new sub-processor being added — we will notify you by email at least 14 days before the change takes effect, using the address associated with your account.

13. Contact us

If you have any questions about this Privacy Policy, wish to exercise any of your rights, or have a concern about how we handle your data, please contact us:

Email: info@mavejob.com

This policy is governed by the laws of England and Wales and has been prepared in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.