Privacy Policy
Last updated: 3 November 2026
Draft — pending legal review. This document has been prepared for the Abrodio V2 launch and has not yet been finally approved.
This policy explains how Abrodio collects, uses and protects your personal information when you use abrodio.com. Abrodio is operated by ABRODIO GROUP LTD, which is the data controller for the personal information described in this policy.
1. Who we are
Abrodio is operated by ABRODIO GROUP LTD, a private limited company registered in England and Wales.
- Company number: 17488534
- Registered office: Apartment 912, Goods Yard, Glebe Street, Stoke-on-Trent, England, ST4 1AF
- Contact: admin@abrodiogroup.com
2. Information we collect
We collect only what we need to run the features Abrodio offers:
- Account information — your name, email address and password when you create an account, or your name and email address from Google if you choose to sign in with Google. Passwords are handled by our authentication provider (Supabase) and are never visible to us.
- Profile information — the display name shown with your Community posts and, if you choose to set it, whether you are an international or home student.
- Community content — posts, replies, reactions, reports and feedback you submit. Published posts and replies are public: they can be seen by anyone, including people who are not signed in, together with your display name.
- Job searches — the keywords, location and filters you enter when searching for jobs. We use them to run the search and do not save the text of your searches in our database (like any web request, a search can appear in our hosting provider’s short-lived technical logs). Our usage records note only whether a keyword or location was entered and how many results were found. Identical searches may be briefly cached on our servers (for a few minutes) so that job boards are not asked the same question repeatedly.
- Shared job links — when you share a job, we store a copy of that job advert (title, company, location, description and link) so the shared page keeps working. We do not store who shared it.
- ApplyPilot information — if ApplyPilot is enabled and provisioned for your account, ApplyPilot stores the job opportunity, application status, prepared-material metadata, private candidate documents you choose to upload, candidate actions, submission-authorisation history, submission evidence, assessments, interviews, outcomes and workflow notifications needed to provide the assisted-application service.
- Usage information — first-party analytics events such as pages viewed and features used. These are linked to your account when you are signed in; anonymous visits are counted without any cookie or browser identifier (see our Cookie Policy).
- Technical logs — standard server logs (such as IP address, browser type and time of request) created when you use the site, used for security and reliability. To prevent abuse we also count requests per visitor: for this we keep a one-way, keyed hash of your IP address (or of your account ID when you are signed in) — never the address itself — together with a request count, for no more than about two days.
Saved jobs are kept only in your own browser on your own device. They are not sent to or stored by us.
ApplyPilot sensitive data. ApplyPilot is not designed to store passwords, MFA codes, assessment or test answers, criminal-offence information, or special-category information such as health, ethnicity, religion or sexual-orientation data. If an employer asks for sensitive information or credentials, complete that step yourself on the employer or job-board website unless Abrodio has separately confirmed a lawful and appropriate process.
Contact form — our contact form prepares an email in your own email app addressed to admin@abrodiogroup.com. Nothing is sent until you send that email, and we then receive what you include in it (for example your name, email address, optional phone number and message).
3. How we use your information and our lawful bases
- To provide Abrodio — your account, sign-in, job search, sharing and the Community (performance of a contract).
- To display third-party job adverts from WhatJobs, pass the visitor IP address and optional browser user-agent for feed delivery, valid traffic attribution and anti-fraud checks (legitimate interests in delivering and protecting the job-discovery service). We limit this to job search requests and do not share account credentials or candidate documents.
- To provide ApplyPilot when you choose and are provisioned to use it, including candidate-controlled preparation, application-specific authorisation, submission handling and workflow tracking (performance of a contract).
- To keep a reliable record of ApplyPilot instructions, authorisations, submission activity, complaints and security events where necessary to operate and protect the service and our users (legitimate interests and, where applicable, legal obligations).
- To respond to your enquiries and support requests (legitimate interests).
- To send you updates by email, only if you have opted in. You can opt out at any time (consent).
- To keep the platform safe — moderating Community content, preventing abuse, rate limiting and security monitoring (legitimate interests and legal obligations).
- To understand how Abrodio is used and improve it, using first-party analytics (legitimate interests).
We do not sell your personal information. We may display sponsored third-party job adverts supplied by providers such as WhatJobs, but do not provide your account details or candidate documents to advertisers through the ordinary Jobs search. ApplyPilot does not make employment, immigration, offer or application-outcome decisions about you solely by automated processing. Any match score or workflow status is used to organise the service, not to decide whether an employer should hire you.
4. Who we share information with
- Service providers who host and run Abrodio on our instructions — our website hosting provider and Supabase (database and authentication).
- Google — only if you choose to sign in with Google, in which case Google confirms your identity to us. Our fonts and other page assets are served from our own website, not from Google.
- Job data providers, including WhatJobs — when job listings load, our servers may send your search terms and location to the third-party job boards supplying those listings. In particular, the WhatJobs FeedAPI requires us to send the public IP address associated with your visit and, where provided, your browser user-agent to WhatJobs Limited. WhatJobs uses this information to supply job adverts and for legitimate traffic attribution and fraud prevention. We do not send WhatJobs your Abrodio account email, password, CV or profile through a normal job search. WhatJobs handles information it receives under its own privacy policy. WhatJobs searches are per-visitor and are not cached for other users.
- Job boards and employers — for ordinary job-search use, you choose whether to visit and apply on the original website. If you separately authorise a specific ApplyPilot submission, authorised ApplyPilot staff may send the approved application information and materials to the relevant employer or job board on your instruction. Anything received by that third party is then governed by its own terms and privacy notice.
- Authorised ApplyPilot staff — only staff with the operational access needed for an assigned ApplyPilot application can view the relevant workflow and candidate documents. V2 administrators are supervisory/read-only.
- Authorities and advisers — where the law requires it, or to protect the rights and safety of Abrodio and its users.
When you authorise a specific application, authorised ApplyPilot staff may use the materials and information shown in ApplyPilot to complete that application on the relevant employer or job-board website. That third party then processes the information under its own terms and privacy notice.
5. International transfers
Some of our service providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or the UK International Data Transfer Agreement / Addendum.
6. How long we keep information
- Account and profile data — for as long as your account is active. When an account is deleted, its Community posts, replies and reactions are deleted with it.
- ApplyPilot workflow records and private document versions — ApplyPilot records are kept only for as long as needed to provide the service, show your application history, preserve evidence of candidate instructions and submission activity, resolve complaints or disputes, protect legal rights, and meet applicable legal obligations. We periodically review whether those records are still needed. Private document versions that are no longer current may be archived and access-restricted; records linked to an authorisation or submission may need to be retained as part of the audit trail.
- Community content — while it remains published. If you delete a post or reply that nobody has reported, it is deleted straight away. If it has been reported, it is hidden from everyone immediately but kept, visible only to moderators, until those reports have been dealt with and have expired (see below).
- Moderation records — content removed by moderators, and resolved or dismissed reports, are kept for 12 months and then deleted.
- Feedback you send us — kept for 12 months after you submit it, then deleted.
- Shared job links — the stored job copy expires after 90 days.
- Enquiry emails — for as long as needed to handle your enquiry and for a reasonable period afterwards.
- Analytics events — deleted after 90 days; if your account is deleted sooner, they are no longer linked to it.
- Abuse-prevention counters (a one-way hash of your IP address or account ID, and daily Community posting counts) — about two days.
7. Your rights
Under UK data protection law you have the right to:
- Access the personal information we hold about you.
- Ask us to correct inaccurate information.
- Ask us to delete your information, including your account.
- Object to or restrict certain processing.
- Receive a copy of your information in a portable format.
- Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, email admin@abrodiogroup.com. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.
8. Security
We protect your information with access controls, encryption in transit and per-user database access rules. ApplyPilot candidate documents are kept in a private storage bucket and access is limited to the candidate, the staff member managing the relevant application and authorised supervisory access. No online service can be completely secure, so please use a strong, unique password and tell us at admin@abrodiogroup.com if you think your account has been compromised.
9. Age of users
Abrodio is intended for users aged 16 or over. Users aged 13 to 15 should only use Abrodio with the involvement of a parent or guardian. Abrodio is not intended for children under 13.
10. Changes to this policy
We may update this policy from time to time. We will post any changes on this page and, for significant changes, tell you through the service or by email.
11. Contact us
Questions about this policy or your data? Email admin@abrodiogroup.com or use our contact form.