IsoLaunch

Privacy Policy

Last updated: August 2026

1. Who we are

IsoLaunch ("IsoLaunch", "we", "us") is the seller and operator of the IsoLaunch career workspace for engineering students pursuing roles in the medical device industry. IsoLaunch is the data controller for the personal data described in this policy: we decide what is collected and why. This policy explains what we collect, the legal basis we rely on, who we share it with, and the choices you have. It applies to the IsoLaunch web application and public portfolio pages.

Payments for IsoLaunch Pro are processed by Paddle.com, our online reseller and Merchant of Record. For payment and billing data, Paddle acts as an independent controller under its own privacy notice. See section 5 below.

2. Data we collect

  • Account data — email address and, if you sign in with Google, the name and profile identifier Google returns.
  • Profile data — university, major, graduation date, degree level, optional GPA, target roles, and locations you enter during onboarding or in Settings.
  • Career content — resume text, applications you track, portfolio projects, interview answers, learning progress, notes, and quiz results.
  • Subscription data — your plan status, renewal dates, and the customer/subscription identifiers Paddle returns to us. We never receive or store your full card number; card details are collected and held by Paddle.
  • Support messages — anything you send us through the contact form or by email.
  • Technical data — basic request logs and error reports (including IP address and device/browser information) used to keep the service running and secure.

2a. Why we process it, and our legal basis

  • Account and profile data — to create your account and provide the service. Legal basis: performance of a contract.
  • Career content — to generate AI feedback, track applications, and publish portfolio projects you mark public. Legal basis: performance of a contract.
  • Subscription data — to give you access to the plan you bought, and to meet tax and accounting obligations. Legal basis: performance of a contract and legal obligation.
  • Support messages — to answer you. Legal basis: legitimate interests in supporting our users.
  • Technical data — to keep the service secure, debug faults, and prevent abuse. Legal basis: legitimate interests in a secure, working service.
  • Optional marketing email, if we ever send it. Legal basis: consent, withdrawable at any time.

3. How resumes are processed, stored, and deleted

This is the part most students ask about, so we spell it out plainly:

  • Parsing happens in your browser. When you upload a PDF or DOCX, the file is read and converted to plain text locally on your device. The original file is never uploaded to our servers.
  • Only text is sent for analysis. The extracted text and the role type you select are sent over an encrypted connection to our AI provider to generate feedback.
  • Your resume is not used to train AI models. Analysis requests are processed and discarded by the model provider; they are not retained for training.
  • Storage. We store the extracted resume text and the resulting feedback in your account so your history and analytics work. It is protected by row-level security — only your authenticated account can read it.
  • Deletion. Deleting a review removes its text and feedback. Deleting your account removes all resume data, permanently, within 30 days of the request. Email us and we will confirm when it is done.

4. What is public and what is private

Everything in IsoLaunch is private by default. Portfolio projects become publicly readable only when you explicitly toggle a project to Public, at which point its content, images, and the profile details shown on your portfolio page can be viewed and indexed by anyone with the link. You can switch a project back to Private at any time; search engines may take time to drop cached copies.

5. Who we share data with

  • Paddle.com — Merchant of Record. Paddle is our reseller and handles all orders for IsoLaunch Pro: checkout, payment processing, subscription management, invoicing, sales tax/VAT compliance, refunds, and billing support. When you buy a plan, your name, email, billing address, country and payment details are collected and processed by Paddle; Paddle returns a customer and subscription identifier and plan status to us. Paddle processes this data as an independent controller under its own privacy notice and buyer terms.
  • Service providers / subprocessors — hosting, database, authentication, file storage, and email delivery providers, plus an AI provider for resume, interview, and feedback generation. They process data on our instructions only.
  • Professional advisers — legal and accounting advisers, where necessary.
  • Authorities — where we are required to disclose by law.

We do not sell your data, and we do not share it with recruiters, schools, or advertisers. Some of these providers operate outside your country, including in the United States; where data leaves the UK/EEA we rely on adequacy decisions or Standard Contractual Clauses.

5a. How long we keep data

Account, profile, and career content is kept while your account is active and deleted or anonymised within 30 days of account deletion. Technical logs are kept for up to 12 months. Transaction and invoice records held for tax and accounting purposes are retained by us and by Paddle for as long as the law requires, typically 6–10 years.

5b. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, encrypted storage, row-level security so only your authenticated account can read your records, and least-privilege access controls for our own team.

6. Cookies and local storage

We use strictly necessary cookies and browser local storage to keep you signed in and to remember interface preferences. We do not run advertising or cross-site tracking cookies. Clearing your browser storage signs you out.

7. Your rights

Depending on where you live, you have the right to access, correct, erase, restrict, or object to our processing of your personal data, to receive a portable copy, to withdraw consent at any time, and to complain to your local data protection supervisory authority. You can access and correct your data in Settings, export your resume feedback as Markdown, and request deletion of your account and all associated content. Contact us and we will respond within one month.

8. Students under 16

IsoLaunch is intended for university-level students and is not directed at children under 16. We do not knowingly collect data from them.

9. Contact

Questions, deletion requests, or privacy concerns: get in touch.