Privacy Policy
Last updated: July 25, 2025
Introduction & Purpose
GRW Scout ("we," "us," or "our") is committed to protecting your privacy and providing a secure experience on our website and mobile applications (collectively, "Services"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use GRW Scout to receive career advice, generate personalized 5-year career plans, and match with opportunities based on your skills, values, and personality.
By using our Services, you consent to the practices described in this policy. If you have any questions or wish to exercise your data rights, please contact hello@grwscout.com.
1. Data Controller
- GRW Scout is the data controller for GRW Scout.
- Contact email: hello@grwscout.com
2. Information We Collect
1. Account & Profile Data
- Full name, email address, phone number
- Highest education level and degree subject
- Current role, career goals, dream role
2. Personality & Assessment Data
- Open-ended responses to three text prompts (≥120 characters each)
- Big Five personality scores
- Derived T-scores and normalized vectors
3. Skills & Values Data
- Self-reported hard and soft skills
- Ranked values and motivators captured through conversational onboarding
4. Usage & Analytics Data
- Usage logs, IP addresses, device and browser information
- Session duration, clickstream data, feature usage metrics
5. Career Plan & AI Coach Data
- Generated 5-year career plans (milestones, learning resources)
- Chat transcripts, AI coach prompts, progress and feedback logs
- Notification preferences and nudge history
6. Optional Data
- Uploaded CV or resume file (if used)
- Consent to third-party integrations (e.g., learning platforms)
3. How We Use Your Data
- Career Planning & Matching: Generate and display personalized career plans and match you to relevant job opportunities aligned to your values and profile.
- AI Coach & Notifications: Power the AI career coach to deliver reframes, learning suggestions, and daily/weekly nudges.
- Communication: Send account-related notices, new feature announcements, and notification reminders.
- Analytics & Optimization: Analyze usage patterns to improve functionality and user experience.
- Security & Compliance: Ensure platform integrity, fraud prevention, and compliance with legal obligations.
4. Legal Bases for Processing
- Consent: For personality assessments, AI coaching, notifications, and marketing communications.
- Contract: To deliver Services you request.
- Legitimate Interests: To operate, improve, and secure our platform, and to match you with relevant job opportunities.
- Legal Obligation: To comply with applicable laws and regulations.
5. Sharing Your Data
5.1 With Employers
We share relevant candidate information with employers for matching and recruitment purposes, including:
- Professional profiles and qualifications
- Assessment results (where consented)
- Skills and experience data
- Contact information (when both parties agree to connect)
5.2 Service Providers
- We may share your data with trusted third-party service providers who assist us in:
- Cloud hosting and data storage
- Analytics and platform improvement
- Customer support services
- Payment processing
- Credential verification
5.3 Legal Requirements
- We may disclose your information when required by law, court order, or to:
- Protect our rights and property
- Ensure user safety and platform security
- Prevent fraud or illegal activities
- Comply with regulatory requirements
6. Data Retention
- Assessment, profile, and AI coach data retained for up to 6 years after last activity.
- Usage logs: retained for up to 2 years.
- You may request deletion of your data at any time by contacting hello@grwscout.com.
7. Your Rights
- Under UK GDPR, you have the right to:
- Access and receive a copy of your personal data.
- Rectify inaccurate or incomplete data.
- Erase your personal data ("right to be forgotten").
- Restrict or object to processing.
- Data portability.
- Withdraw consent.
- Lodge a complaint with the ICO.
- To exercise these rights, contact hello@grwscout.com.
8. Security Measures
We implement appropriate technical and organizational measures, including encryption (TLS 1.3 in transit, AES-256 at rest), access controls, and regular security assessments.
9. Cookies & Tracking
We use cookies to authenticate users, collect analytics, and provide personalized content. You may control cookie preferences via your browser settings or our cookie banner.
10. Changes to This Policy
- We may update this Privacy Policy periodically. Significant changes will be communicated via email (hello@grwscout.com) or in-app notification. Continued use after changes constitutes acceptance of the updated policy.
- For any questions or data requests, please email hello@grwscout.com.