Legal
Privacy Policy
The short version
EnDev is an AI-powered career platform. To provide it we process your account details, the documents you upload (such as your CV), the job descriptions you supply, your live interview audio and transcripts, your performance scores, and how you use the service. We rely on trusted providers for sign-in, payments, AI analysis and hosting. We don't sell your data, and you have rights over it — set out below.
1.Who we are
EnDev ("EnDev", "we", "us", "our") provides an AI-powered career development and recruitment platform at endev.co.uk and app.endev.co.uk.
For the personal data of our individual users, the data controller is ENDEV LIMITED, a company registered in England & Wales under company number 17246575, registered office Blazegate, Gedney, Lincolnshire PE12 0AD. We are registered with the Information Commissioner's Office (ICO) under registration number [ICO REG NUMBER — to be added].
Questions about this policy or your data: contact@endev.co.uk.
2.The data we collect
- Account & identity — name, email, password (handled by our authentication provider), and profile details you add.
- Documents you upload — your CV and any other files or text you provide for analysis.
- Job descriptions & role information — the roles you supply so we can tailor practice and analysis.
- Live interview audio & transcripts — voice recordings from AI mock interviews and the transcripts and analysis generated from them.
- Performance & progress data — scores, rankings, skill-quest progress, and STAR/Vault content you create.
- Payment data — handled by our payment provider; we receive confirmation of purchases and credit balances, not your full card details.
- Usage & technical data — device, browser, IP address, and how you interact with the platform.
- Support communications — messages you send us.
Your CV and interview content may reveal special category data (for example health, ethnicity or beliefs). We don't ask for it, but where it appears we handle it under the additional protections in §5.
3.Controller & processor roles
EnDev is a dual-sided platform, and our role depends on how data reaches us:
When you use EnDev for yourself
If you sign up as an individual to develop your own career, we are the controller of your personal data and this policy governs how we use it.
When an employer or recruiter runs a campaign
Where an enterprise customer uses our Recruiter Hub to assess candidates, that organisation is the controller and EnDev acts as a processor, handling candidate data on their instructions under a Data Processing Agreement. In that case the employer's own privacy notice governs the processing, and candidate rights requests are directed to them; we will assist as required.
4.Why we use your data
- To create and run your account and deliver the features you use.
- To analyse CVs, run AI mock interviews, and generate scores, rankings and feedback.
- To process purchases and manage your credit balance and any subscription.
- To provide support, keep the service secure, and prevent fraud and abuse.
- To improve and maintain the platform.
- To send service messages relating to your account and the platform.
5.Lawful bases
Under UK GDPR we rely on the following:
| Purpose | Data | Lawful basis |
|---|---|---|
| Provide the service & your account | Account, documents, interview, performance data | Contract (Art. 6(1)(b)) |
| Payments & credits | Payment confirmation, balances | Contract (Art. 6(1)(b)) |
| Security, fraud prevention, improvement | Usage & technical data | Legitimate interests (Art. 6(1)(f)) |
| Special category data in CVs/interviews | Any sensitive content you include | Explicit consent / your manifestly-made-public data (Art. 9) |
| Legal & accounting obligations | Transaction records | Legal obligation (Art. 6(1)(c)) |
Where we rely on consent you can withdraw it at any time; where we rely on legitimate interests you can object (see §14).
6.AI & automated processing
EnDev uses automated analysis to produce CV feedback, interview transcripts, and candidate scores and rankings. These outputs are designed to support and inform people — they are decision-support, not automatic decisions.
In recruiter campaigns, scores and rankings are presented to a human recruiter who makes the hiring decision; EnDev does not make hiring decisions and does not output a final "hire" determination. Where any decision would produce legal or similarly significant effects, a human reviews it, and you have the right to obtain human intervention, to express your point of view, and to contest the outcome under Article 22 UK GDPR.
We do not use special category data to make significant automated decisions without explicit consent.
7.AI models & your content
We use Google's Gemini API (Gemini Flash) to deliver CV and interview analysis, and Google's Speech-to-Text (Chirp) to transcribe live interview audio. We do not permit your content — including CVs, interview audio and transcripts — to be used to train third-party AI models. Your uploaded content and interview data are used only to provide the service to you, in line with Google's terms for paid API services, under which Google acts as our data processor and does not use prompts or responses to improve its products.
8.Live AI voice interviews
Live mock interviews capture your voice audio and generate a transcript and analysis. We treat this as higher-sensitivity data:
- Recording begins only when you start an interview session.
- Your audio is streamed in real time to Google's Speech-to-Text (Chirp) to produce a transcript. We do not store the audio itself — only the resulting transcript, scores and feedback are saved to your account.
- Transcripts and analysis are used to give you feedback, scores and progress tracking; you can delete a session at any time from your account.
- Interview analysis uses Google's Gemini API; voice transcription uses Google's Speech-to-Text (Chirp).
10.International transfers
Our database provider, Supabase, stores your account and platform data in the EU (Ireland), so this transfer is covered by UK adequacy regulations for the EU.
Some of our other providers — including Clerk, Lemon Squeezy, Vercel and Google — process data outside the UK, principally in the United States. Where they do, we rely on an appropriate safeguard: UK adequacy regulations where available, or the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses.
11.How long we keep data
| Data | Retention |
|---|---|
| Account data | While your account is active, then deleted within 90 days of closure |
| Interview audio | Not stored — processed in real time for transcription only, never retained |
| Transcripts, scores & CVs | While your account is active; deleted when you remove them, or within 90 days of account closure |
| Payment & transaction records | As required by tax/accounting law (typically 6 years) |
| Support messages | 24 months |
12.Security
We use technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, and reputable infrastructure providers. No system is perfectly secure, but we work to protect your information and will notify you and the ICO of a breach where the law requires.
14.Your rights
Under UK GDPR you have the right to: access your data; correct it; erase it; restrict or object to processing; data portability; and to withdraw consent at any time. Where decisions are made by automated means with significant effect, you also have rights under §6.
To exercise any right, email contact@endev.co.uk. We'll respond within one month. If you're unhappy with how we handle your data you can complain to the ICO at ico.org.uk or 0303 123 1113 — though we'd appreciate the chance to put things right first.
15.Children
EnDev is intended for users aged 18 and over and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has provided us data, contact us and we'll delete it.
16.Changes to this policy
We may update this policy from time to time. We'll change the "last updated" date above and, for significant changes, let you know. Continuing to use EnDev after an update means you accept the revised policy.
17.Contact us
For any questions, requests or concerns about this policy or your personal data:
- Email: contact@endev.co.uk
- Post: Blazegate, Gedney, Lincolnshire PE12 0AD