Privacy Policy

Fledge is a job-search assistant for UK students and recent graduates aged 16 or older, in any subject. Fledge is run by Apply Logic Ltd, a company registered in England and Wales (number 08051086), registered office 9 Ridgeway, East Grinstead, West Sussex, RH19 4BW. Apply Logic Ltd is the controller of your personal data, which means we decide how it is used and are responsible for it.

For anything about your data, email hello at fledge dot team.

• Account details: your name, email address, and phone number if you sign in by text message, plus your confirmation that you are 16 or older.
• Records of what you agreed to: which version of the Terms and this policy you accepted at sign-up, and, when you pay, that you asked for the service to start straight away; each with the time, your IP address and your browser identification.
• Your preferences: the roles, sectors, region and study details you give us, and a short summary of them (your course, institution, year, the kind of role you want) that we use to brief the AI.
• Your CV: the file you upload and the details extracted from it (education, experience, skills, contact details on the CV).
• Your job search: the job sources we find, the jobs and how well they match you, the jobs you save, dismiss and apply to, your application notes, and company research.
• What you and the AI write: cover letters, tailored CVs, screening answers, interview preparation, the practice answers you type, and emails to employers.
• Companies to approach: employers you or our agents add, and the contact details found for them (see “People at employers” below).
• Connections you choose to make: AI provider keys and, if you connect Gmail, access to send email from it. Both are stored encrypted.
• Plan, payments and credit: your subscription and its status, promo codes, top-ups, refunds, your Fledge credit balance and what each piece of agent work cost. Card and bank details are entered with our payment provider and never reach us.
• Usage and technical data: when you use Fledge and which agents ran, what each AI call cost, and server logs (which include IP addresses and browser identification).
• How you found us: the campaign tag in the link you first arrived from, or the website that referred you, recorded with your sign-up (see “Cookies and analytics”).

This data comes from you, from your CV, from our sign-in and billing service, and from public websites (job adverts, company websites and the business contact details they publish).

• To provide Fledge to you (to perform our contract with you): finding job sources and jobs, matching them to your CV (Rachel, the Recruiter agent), researching companies (Silas, the Spy agent), writing cover letters, CVs, emails and answers (Gabriel, Cleo and Callum, the Ghostwriter, Coach and Closer agents), finding who to contact at employers (Sana, the Scout agent), sending what you choose to send, running your account, taking payment and managing your credit.
• To email you about your account (contract): sign-in codes, receipts, and notices that your credit is low or has run out. These cannot be switched off while you use Fledge credit, because they are about money. New-match alerts and the daily summary are separate and can be switched off in Settings.
• To send email from your Gmail (your consent), only when you press Send. You can withdraw consent at any time by disconnecting Gmail in Settings.
• To keep Fledge secure and working (our legitimate interests): preventing abuse and fraud, fixing faults, and spending limits.
• To help you when you ask (legitimate interests): our staff can view your account read-only, for example to investigate a problem you reported. They cannot change anything while doing so.
• To understand and grow Fledge (legitimate interests): counting sign-ups, activity and where people come from. Our team receives internal reports in Slack that can include a new user’s name or email address.
• To measure visits to the website (your consent), with Google Analytics, only if you press Allow.
• To meet legal obligations: keeping tax and payment records, keeping evidence of what you agreed to, and answering lawful requests.

Match scores and suggestions are produced automatically, but they are only suggestions: you decide what to apply for and what to send. We make no automated decisions that have legal or similarly significant effects on you.

To do their work, our agents send the relevant parts of your data (your CV, the summary of your preferences, job descriptions, company research and your typed answers) to an AI provider. Which one depends on how you pay for AI:

• Your own key: calls go to the provider you connected (Anthropic or OpenAI) on your own account, and, if you connected one, to Voyage AI for job ranking. Your agreement with that provider covers how they handle it.
• Fledge credit: calls go to Anthropic and Voyage AI on our accounts, acting for us.

Under their commercial API terms, Anthropic and OpenAI do not train their models on API data by default, and may keep it for a limited time (typically up to 30 days) to detect abuse. We do not use a zero-retention arrangement. Voyage AI handles data under its own terms.

When a student asks Fledge to find who to contact at an employer, Sana, our Scout agent, searches the employer’s website and other public pages for a business contact: a name, a job title and a work email address or published office inbox. We store what it finds with the student’s list so they can send one job-related email themselves. We do this in the legitimate interest of students looking for work and of employers who publish contacts for this purpose, and we only use business contact details that are publicly available.

If you are one of these contacts and would like your details removed, email hello at fledge dot team and we will delete them from every student’s list. You also have the rights listed below.

We do not sell your data. We share it only with the service providers below, who process it for us under contract, or as the law requires:

• Neon (database), in London.
• DigitalOcean (our servers, including sign-in and billing, uploaded files and server logs), in London.
• Cloudflare (delivering the website, and storing our encrypted database backups).
• Resend and Twilio, which deliver the emails and text messages Fledge sends you (sign-in codes, receipts and notifications).
• Mollie (payments), in the Netherlands.
• Anthropic, OpenAI and Voyage AI (AI, as described above).
• Google: the Gmail API, only if you connect Gmail (we can send email as you, and read your Gmail address; we cannot read your inbox), and Google Analytics, only if you allow it.
• Slack (our team’s internal reports and alerts).
• Airbyte (copying data from our database into our internal reporting).
• Ready4AI, which supplies the search-engine description of our home page and receives only the browser identification of whoever loads that page.

Employers receive only what you choose to send them. We may also disclose data where the law requires it, or to a buyer if the business is ever sold, under this policy.

Several of these providers (Anthropic, OpenAI, Voyage AI, Google, Slack, Resend, Twilio, Airbyte and Cloudflare) are based in, or may process data in, the United States or elsewhere outside the UK. Where they do, the transfer is protected by the UK’s data bridge with the US for providers certified to it, or by the UK International Data Transfer Addendum to standard contractual clauses.

• While your account is open, we keep your data so the service works.
• If you delete your account (Settings, Your data), it is deleted straight away, with the files you uploaded and your sign-in. If you ask us by email instead, at hello at fledge dot team, we delete it within 30 days. Copies in our daily database backups and in our database provider’s restore history roll out within 30 days after that.
• Payment records are kept by our billing platform and payment provider for as long as tax law requires, normally six years.
• Server logs, kept for security and fixing faults, are deleted automatically: web access logs, which record IP addresses, within about 30 days, and other logs once they reach a fixed size.
• AI providers keep data for their own limited periods, as described above.

Under UK data protection law you have the right to:

• get a copy of the data we hold about you;
• have anything inaccurate corrected;
• have your data deleted;
• ask us to restrict how we use it;
• receive the data you gave us in a machine-readable form, or have it sent to another service (portability);
• object to anything we do on the basis of legitimate interests, including the internal reports;
• withdraw consent at any time: for analytics, by clearing this site’s data in your browser; for Gmail, from Settings.

You can download a copy of your data and delete your account yourself, in Settings under Your data. For anything else, or if you prefer, email hello at fledge dot team. We reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113), though we would like the chance to put it right first.

Fledge is for people aged 16 and over, and you confirm your age when you sign up. If we learn that someone younger has an account, we delete it.

We use Google Analytics 4 to understand which pages people find useful and where they give up. It measures nothing until you allow it: the Google tag loads with consent set to denied, so no analytics cookie is written and no measurement is kept unless you press Allow on the banner. Choosing “No thanks” leaves it denied.

Because the tag is part of the page, your browser does contact Google when you open the site. What it does not do, unless you allow it, is store a cookie or keep anything that measures your visit. Our fonts are served by us, not by Google.

When it is on, Google receives:

• the page addresses you visit, with record identifiers stripped out (a CV review page is reported as/cv/versions/:id/review, never the actual id);
• what Google Analytics collects itself: device, browser, referring site, and an approximate location that Google works out from your IP address. Google Analytics 4 does not store the IP address itself.

We never send Google your name, your email address, your account id, your CV, or anything you have typed into Fledge.

You can change your mind at any time by clearing this site’s data in your browser, which forgets the choice and asks again.

If you allow analytics, we also remember in your browser where your first visit came from (the campaign tag in the link, or the website that referred you), and record it with your sign-up, so we can tell which channels bring people who sign up. Without your consent this is kept only for the current visit.

To count how many people reach each step of signing up, the signup page sends us a random id for your browser, with nothing else about you, and your sign-up carries the same id. With your consent the id is kept in your browser; without it, it lasts only for the current visit.

Apart from that, we store in your browser only what makes the product work: the sign-in session (a secure cookie), your analytics choice, a promo code from a link you followed, and small preferences such as dismissed banners. These are strictly necessary, so they do not need your consent.

All traffic to Fledge is encrypted (HTTPS), and so is the connection to our database. AI provider keys and Gmail access are encrypted with AES-256-GCM before they are stored. Our database provider encrypts data at rest, and our backups are stored encrypted by Cloudflare. Access to production systems is limited to the people who run Fledge. No system is perfectly secure, and if a breach puts your data at risk we will tell you and the ICO as the law requires.

We may update this policy as Fledge changes. If a change matters, we will email you before it takes effect. The date at the top shows when it last changed.