Privacy Policy
The short version — what actually matters to you
We only collect what we need
Name, email, your career profile, and — if you choose to provide it — your CV and visa details, used only to generate your matches, verdicts and application packs. No passport or identity documents, no payment card data; Stripe handles payments independently.
We never sell your data
Your profile and CV content are never sold and are never shared with employers, recruiters, or third parties for their own marketing. Service providers process data only so SponsorMatch can deliver the service.
Phone number — one account per person
Where collected, your mobile number is used to prevent abuse of the free tier and protect account integrity. It is not used for marketing calls.
Delete any time
Close your account from your dashboard or contact us. Your personal data, including CV content, is deleted within 30 days unless law requires a longer record.
Security controls are applied
Passwords are hashed and data in transit is encrypted. Production access is restricted to authorised personnel.
UK GDPR applies — you have rights
You can ask to access, correct, delete, export, restrict or object to processing of your personal data. Contact privacy@proofcapital.co.uk.
Need the full policy wording?
Read the full privacy policy ↓1. Who we are
SponsorMatch is operated by its founder, Emmanuel Chinwendu Ugwumba, trading as SponsorMatch by Proof Capital (“we”, “us”, “our”) — a UK-based platform currently in pre-launch early access.
The founder is the data controller for your personal data and is registered with the Information Commissioner’s Office. ICO registration reference: ZC198151
A UK limited company will assume operation of the platform at commercial launch, and this policy will be updated when it does. Contact us at privacy@proofcapital.co.uk for privacy-related queries.
2. What we collect and why
Account data
- Name, email and hashed password — to create and authenticate your account.
- Phone number, where collected — one account per person and anti-abuse enforcement only. Not used for marketing.
Profile and career data
- Job titles, skills, certifications, locations and salary range — to generate your personalised matches and role verdicts.
- Visa status and expiry date, if you provide them — optional, improves match precision and activates Visa Runway Mode.
- Years of experience and education — for seniority and fit scoring.
- Your CV, if you upload or paste it — used to personalise your matches, improve your CV where you request it, and generate your application packs. Your CV content is retained until you delete it or close your account, and is never shared with employers or recruiters.
Usage data
- Clicks, saved roles, applications, interviews, offers and outcomes — to operate the pipeline and improve scoring in aggregate.
- Digest and email delivery data — to confirm delivery, manage unsubscribes and improve timing.
What we do not collect
- We do not collect your passport or identity documents.
- We do not collect payment card data; Stripe handles payments independently.
- We do not use advertising cookies or cross-site tracking cookies.
3. Legal basis under UK GDPR
- Contract: processing your data to deliver the SponsorMatch service you signed up for.
- Legitimate interest: protecting the service from abuse, improving product reliability, and using anonymised or aggregated outcome data to improve scoring.
- Consent: email digests and optional communications where consent is required. You can unsubscribe at any time.
4. Who we share data with
We do not sell your data. We use service providers only where needed to operate SponsorMatch.
- Stripe — payment processing and billing. Stripe handles payment card data independently.
- Mailgun — transactional email delivery, account notices, password reset emails and digests.
- Commercial AI API providers — generation of application packs, CV improvements, role analysis and outreach drafts. To produce these outputs, relevant parts of your profile and CV content may be processed by the AI service used for the task. Your data is used to provide the requested SponsorMatch functionality and is never shared with employers or recruiters through this process.
AI outputs are advisory and user-controlled. You should review generated CVs, letters, statements and outreach drafts before using them.
5. AI-assisted processing
We use AI-assisted processing to analyse your profile and CV, rank matches, explain role fit, and generate documents such as CV improvements, application packs and outreach drafts.
These outputs are designed to support your decision-making. They are not immigration advice, legal advice, a job offer, or a guarantee of sponsorship. You always see and control generated outputs before acting on them.
You can contact privacy@proofcapital.co.uk to ask questions about how an automated result was produced or to request human review of a privacy concern.
6. International transfers
Some service providers may process data outside the UK or EEA. Where this happens, we rely on appropriate contractual safeguards and provider terms designed to protect personal data in accordance with UK GDPR.
7. Retention
Personal data is deleted within 30 days of account closure, unless we are legally required to retain a limited record for longer.
CV content is retained while your account is active and deleted with the rest of your personal data within 30 days of account closure.
Transaction records may be retained for up to 7 years for tax and accounting purposes. Anonymised aggregate data may be retained indefinitely.
8. Your rights
You have the right to access, rectify, erase, port, restrict or object to processing of your personal data, and to withdraw consent where processing is based on consent. Email privacy@proofcapital.co.uk.
You can also complain to the Information Commissioner’s Office.
9. Security
Passwords are hashed. Data in transit is protected using TLS. Production database access is restricted to authorised personnel. We apply security headers, audit logging and access controls appropriate for a pre-launch SaaS platform.
10. Cookies
We use essential session and functional cookies only. We do not use advertising cookies or third-party tracking cookies. If we introduce analytics cookies in future, we will update this policy and implement any required consent controls.