LEGAL

Privacy Policy

Please read this document carefully. It explains the terms that apply when you use OfferTrail.

Privacy Policy

_Effective date: 30 July 2026_

OfferTrail is operated by Stefan Stanic, trading as OfferTrail ("we", "us" and "our"). We are the controller of the personal data described in this policy.

This policy explains how we handle personal data when you visit OfferTrail, create an account, use AI Coach or optional email forwarding, purchase a plan, or choose to contribute to Company Response Intelligence.

1. Information we collect

Account and profile information

We collect your email address and any profile information you provide, such as your name. Our authentication provider also processes the information needed to authenticate your account.

Application information

We store the application details, notes and statuses that you add to your private workspace. OfferTrail does not access or connect to your email inbox.

Optional email forwarding

If you create a private forwarding address and choose to forward a job-search email to it, we process that individual message to identify application-related information. We do not connect to or scan your inbox. We retain the plain-text body, sender address and subject of forwarded messages for classification and review. We never retain raw email/MIME, HTML or attachments.

We retain the derived application details needed for your tracker (such as company, role, status and date), a delivery identifier for retry prevention, and a limited processing outcome. If Gmail sends a forwarding-confirmation email, we retain its short confirmation code for up to 24 hours so you can complete the setup.

Documents, AI Coach and job-post information

When you upload a CV or other supported document, we store the document and related file metadata. If you use AI Coach, we process the relevant CV text and job-post text to create the requested analysis and save the resulting packet in your account.

Billing information

Payments are handled by Stripe. We receive subscription and payment status information, customer and subscription identifiers, and plan details. We do not receive or store full payment-card details.

Usage, device and security information

We may collect IP address, browser and device information, logs, approximate location inferred from IP address, and information about how the Service is used. We use this to operate, secure, diagnose and improve the Service.

Company Response Intelligence contributions

Only if you opt in in your Profile settings, we use application outcomes created after your opt-in to calculate aggregated company response signals. The contribution is limited to company, broad outcome and timing bands. We do not publish your name, email address, CV, message content, exact application dates or individual application history. We show a community signal only after minimum sample and contributor thresholds are met.

2. How and why we use your information

We use personal data to:

Our usual legal bases under UK GDPR are performance of our contract with you, our legitimate interests in running, securing and improving the Service, compliance with legal obligations, and consent where we ask for it. You can withdraw Company Response Intelligence consent at any time in Profile settings. Withdrawal does not affect processing already carried out before withdrawal.

3. Who processes your information

We use carefully selected service providers to run OfferTrail. Depending on the feature you use, these include:

These providers process information under their own terms and, where applicable, contractual data-protection commitments. We may also disclose information where required by law, to protect our rights or users, or as part of a merger, financing, sale or reorganisation.

4. International transfers

Some providers may process data outside the United Kingdom. Where this happens, we use an appropriate transfer mechanism and safeguards required by applicable data-protection law, such as adequacy regulations or standard contractual clauses.

5. Retention and deletion

We keep account information, application records, saved analyses and uploaded documents while your account is active. You can delete documents and request account deletion in Profile settings; this deletes account data subject to limited retention required for legal, fraud-prevention, accounting or dispute-resolution purposes.

Stripe retains billing records in accordance with its own legal and operational requirements. Backups may persist for a limited period before being overwritten. We retain de-identified aggregate statistics where they no longer identify you.

6. Cookies and analytics

We use essential cookies or similar technologies required for authentication, security and core Service functionality. We use Google Analytics only if you accept analytics cookies through our cookie banner. You can reject analytics cookies without losing access to the core Service, and you can change your choice by clearing the OfferTrail cookie preference in your browser and revisiting the site.

7. Security

We use reasonable technical and organisational measures designed to protect personal data, including access controls and encryption where appropriate. No internet service can guarantee absolute security.

8. Your rights

Depending on applicable law, you may have the right to request access to, correction of, deletion of, or restriction of your personal data; object to certain processing; receive portable data; and withdraw consent. To exercise a right, email [email protected]. You also have the right to complain to the UK Information Commissioner's Office.

9. Children

OfferTrail is not intended for anyone under 18. Do not use the Service if you are under 18.

10. Changes to this policy

We may update this policy when the Service or applicable law changes. We will post the revised version here and update its effective date. For material changes, we will provide additional notice where appropriate.