Your information.
Your career workspace.

Who is responsible for your information?

KAB Group Ltd is the controller for CHNGE Life. KAB Group Ltd is registered in England and Wales, company number 16964841, with registered office at 82a James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE.

For privacy questions or personal-data requests, email info@chnge.life.

Information we use

Depending on how you use CHNGE, we may process your account and authentication details, career history, achievements and evidence, CVs and uploaded documents, role and salary preferences, location and work-pattern preferences, saved vacancies, assessments, application history, interview notes, notification choices, billing records and information you deliberately provide to AI features.

We also process technical and operational information needed to secure and run the service, such as session information, request and error records, security events, usage counts and consent choices.

CHNGE is not designed to require sensitive personal information that is unrelated to a career search. If a CV or other document you choose to upload contains sensitive information, it can be processed as part of that document when necessary to provide the feature you requested.

Why we use it

We use information to create and maintain your account and Career Profile, find and assess potential roles, prepare documents you request, preserve your saved work, provide interview and career support, send essential account or billing communications, deliver optional notifications you choose, process purchases, prevent abuse, investigate failures and improve service reliability.

Our main UK GDPR lawful bases are performance of a contract or steps you ask us to take before entering one, our legitimate interests in operating, securing and improving CHNGE, consent where the product asks for it, and legal obligations that apply to matters such as accounting, tax, consumer rights or regulatory requests.

Optional analytics and marketing communications rely on your choice where consent is required. You can change analytics choices using the site's Privacy choices control and notification choices in Account.

AI processing

When you request an AI-assisted feature, CHNGE sends the relevant career material, vacancy information and instructions needed for that request. The current implementation uses OpenAI models routed through Vercel AI Gateway.

Generated text is a draft for you to review. It does not automatically become a confirmed career fact, and CHNGE does not automatically submit applications or make employment decisions on behalf of an employer.

Analytics

Optional analytics is loaded only after you accept analytics. CHNGE uses PostHog's European Union data region to understand public-site and product journeys, together with Vercel Web Analytics and Speed Insights for public marketing-page traffic and performance.

Session replay and automatic click capture are restricted to public marketing pages and are disabled in sign-in, onboarding and private workspace areas. Form inputs are masked and analytics URLs are stripped of query strings before events are sent.

CHNGE does not deliberately send CV text, career evidence, application writing, passwords or authentication tokens to analytics providers.

Service providers

CHNGE currently uses Supabase for authentication, database services and private document storage; Vercel for hosting, application processing, performance services and AI routing; OpenAI models for AI-assisted features; Resend for email; PostHog EU for consent-gated analytics; and Stripe for payments when paid purchasing is available.

The production Supabase database project is hosted in London. Other providers may process information in the UK, EEA, United States or other locations according to their service arrangements. CHNGE therefore does not claim that all processing is UK-only.

We may also disclose information where required by law, to protect users or the service, or as part of a genuine corporate transaction subject to appropriate confidentiality and legal requirements.

Employer and recruiter access

There is currently no employer or recruiter account area with access to candidate profiles, salary information, CVs, searches or applications. CHNGE does not sell candidate records or operate an advertising-profile or recruiter-export integration.

If you choose to send a downloaded document to an employer, recruiter or job site, that recipient becomes responsible for its own handling of the information you provide to it.

How long we keep information

Your account, Career Profile and saved workspace are retained while your account remains open so you can return to previous work, including after paid access ends. If you request deletion, we remove or de-identify information that we no longer need to retain, subject to identity verification, technical backup cycles and records we must keep for legal, accounting, fraud-prevention or dispute purposes.

Operational and security records are retained only for as long as reasonably needed for service operation, security, troubleshooting and audit. Billing and transaction records may be kept for longer where tax, accounting, consumer or legal obligations require it. Provider-side retention is also subject to the terms of the services listed above.

Your rights

Depending on the circumstances, UK data protection law may give you rights to access, correct, erase or restrict personal information, object to certain processing, receive portable information, and withdraw consent where processing relies on consent.

You can download CVs and cover letters in My CV, manage available notification preferences in Account, and request a fuller export, correction or deletion from Account or by emailing support from your signed-in email. We may verify identity before acting on a request.

You can also raise a concern with the Information Commissioner's Office.

Security

CHNGE uses account access controls, private document storage, signed-in session checks and server-side service boundaries to protect personal information. Security and privacy controls are described on the Security & Privacy page.

Changes to this notice

We may update this notice when CHNGE changes, when suppliers change or when legal requirements require clearer information. The date at the top shows the current published version. Material changes affecting existing users will be communicated where appropriate.