Last updated: 16 May 2026. This reflects the live product and has been reviewed by our solicitor.

What we collect

• Your email address: to create your account (email and password sign-in), and if you ask to be notified when data for a university, course or module goes live.
• Advisor activity: your advisor conversations and credit balance, stored in our database (Supabase) so you can return to them. Advisor prompts are processed by our model provider to generate a response; we never send raw FOI figures into that context.
• Billing: credit-pack payments are processed by Stripe. We never see or store your card details; we keep a record of the purchase and your credit balance.
• An anonymised hash of your IP address for rate-limiting and abuse prevention. The raw IP is never stored.
• Aggregated visitor analytics via Google Analytics (GA4), first-party cookies only; not shared with advertising networks.

What we don't do

• Sell your data.
• Pass it to advertising networks or use it for retargeting.
• Collect any personal data beyond what is listed above.

Retention

We keep account, conversation and billing records for as long as your account is active or as needed for legal and accounting obligations. Data-request emails are kept until the data goes live and you've been notified, then periodically cleared.

Your rights

Under UK GDPR you can request a copy of any personal data we hold about you, ask us to correct it, or ask us to delete it (including closing your account). Email hello@gradehack.com, we'll respond within 30 days, usually much sooner.