Legal
Privacy Policy
Last updated: 14 August 2026
1. Who we are
Event Horizon Lab ("we", "us") operates eventhorizonlab.com, a career-preparation platform for international students. For questions about this policy or your data, contact privacy@eventhorizonlab.com.
2. Data we collect
- Account data: email address, password (hashed), student-verification status.
- Profile data you provide: career track, education and work information, uploaded resumes and the analyses generated from them.
- Usage data: pages viewed, practice activity, saved jobs, application-tracking entries you create, and anonymised analytics (Google Analytics 4).
- Payment data: subscriptions are processed by Stripe; we store only your subscription status and Stripe customer identifier β we never see or store full card numbers.
3. How we use your data
To provide and improve the service: matching you with jobs, powering practice and coaching features, personalising recommendations, processing payments, verifying student status for discounts, and communicating service updates. We do not sell your personal data.
4. Legal bases (GDPR / UK GDPR)
- Contract: account, subscription and core feature data.
- Consent: analytics and optional marketing communications (withdrawable at any time).
- Legitimate interests: fraud prevention, service security and product improvement.
5. Processors and sharing
We share data only with service providers necessary to run the platform:
- Supabase β database and authentication hosting.
- Stripe β payments and subscriptions.
- Resend β transactional email (e.g. verification codes).
- Zhipu AI / GLM β AI features (resume analysis, daily coaching). Content sent is limited to what is needed for the feature.
- Google (Analytics, Sheets) β anonymised analytics and job-data aggregation.
- Vercel β application hosting.
Some providers process data outside the UK/EEA; we rely on appropriate safeguards such as Standard Contractual Clauses where required.
6. Your rights
You may request access, correction, deletion, restriction, or portability of your data, and object to processing based on legitimate interests. You can withdraw consent for analytics or marketing at any time. To exercise any right, email privacy@eventhorizonlab.com β we respond within 30 days. You also have the right to complain to your local data-protection authority (e.g. the UK ICO).
7. Retention
Account data is kept while your account is active. Resumes and generated analyses are deleted when you delete them or close your account. Anonymised analytics may be retained in aggregate. You can request deletion at any time via the contact above.
9. Children
The service is not directed at children under 16, and we do not knowingly collect their data.
10. Changes
If we change this policy we will update the date above and, for material changes, notify you in the product. Continued use after a change constitutes acceptance. See also our Terms of Service.