Clive
The short version: Clive uses what you tell him to find you the right roles, help you run your search and get better at helping graduates. We say how that learning works because it is part of the deal, not something to hide in small print.
Last updated: 22 October 2026Clive is an early-stage service run through Clive Careers Ltd (company no. 17417935, 66 Paul Street, London EC2A 4NA), which is the data controller. This policy covers the website at clive.careers and the app at app.clive.careers. The cookie policy covers cookies.
Privacy questions, rights requests and complaints: legal@clive.careers. ICO registration number: ZC265665.
You tell Clive what you studied and what you want. He turns that into a search, ranks UK graduate schemes against it and explains each match. We keep what you tell him so he can keep helping you, and we learn from how searches go so Clive gets better at helping graduates. We do not sell your information. We do not send employers anything about you unless you ask us to in the app, and today Clive does not do that at all.
Your account. Email address and sign-in method, from you or from Google if you sign in with Google.
What you tell Clive. Your study details, the kind of work you want, where and when, your right to work in the UK, and anything else you add in your own words. Where the app offers a microphone and you use it, your speech is sent to ElevenLabs in the United States to be transcribed to text, and ElevenLabs keeps the recording under its own terms.
What Clive works out. Your search summary, your preferences and the schemes he matched you with.
What you do next. Feedback on matches, the adverts you open, and whatever you put in your job tracker.
On the website. Waitlist details you give us (name, email, and optionally university, course and graduation month), with your consent. When you visit the home page or one of the pages aimed at employers (Employers, Contact), our server records the request: the date and time, the page address, the HTTP method, the site that referred you, your browser's user-agent, your country, and your IP address together with the network operator it belongs to. We use these records to see which organisations, such as employers and universities, take an interest in Clive, and to keep the site secure. We keep them for 90 days and never link them to your use of the app. Website analytics are described in the cookie policy.
Cookies & Analytics. We use cookies and similar browser storage to keep you signed in, remember your choices and more generally to improve our service. We use PostHog to understand how the app is used. In the app, PostHog holds your name and email address with your usage and recordings, so we can tell whose they are, and it keeps the IP address your app use came from. PostHog session recording may also be on by default, but you can turn it off separately. Turning off session recording does not turn off analytics. A session recording may include page content, clicks, scrolling, and the messages in your conversation with Clive, including Clive's replies. We mask every field you type into, so a recording never shows what you type until you send or save it. Sign-in, account, privacy and staff pages are never recorded. On the website, we ask before setting analytics cookies or recording your visit; our cookie policy explains this. You can turn session recording off at any time in Your profile, under Account and privacy. Turning it off stops new recordings; it does not automatically delete recordings made before your choice.
Job information comes from employers' public careers pages and job boards. It is about jobs, not about you.
To provide Clive. Asking your questions, writing your search, ranking schemes, running your tracker, signing you in and sending service emails. Basis: our contract with you.
To make Clive better. We read conversations, matches and feedback to find mistakes; test new features and compare AI models; build evaluation and training data with direct identifiers removed; and link what people wanted at the start with what happened later, which may mean emailing you to ask how your search went. Basis: our legitimate interest in making Clive accurate and useful. You can object at any time and it does not change the service you get.
To find and fix problems in the app. Session recordings, as described above. Basis: our legitimate interest in finding where Clive is confusing or broken. You can object by switching recording off in Your profile.
To keep Clive safe and legal. Security logs, usage limits, investigating misuse, and meeting legal duties. Basis: legitimate interests or legal obligation.
To send you updates you asked for. Basis: consent, which you can withdraw in any email.
Sensitive information. Clive never asks for health, disability, ethnicity, religion, sexuality or similar. If you mention it, it is kept with your conversation so Clive can respond, and we do not deliberately use it for anything else.
You are talking to an AI, not a person. Clive ranks schemes automatically and leaves out ones that clearly cannot work for you. A ranking is a recommendation, not a decision about whether you can apply or be hired: employers decide that, and Clive sends them nothing. If you think a scheme was left out wrongly, email us and a person will look at it. If we ever make an automated decision that significantly affects you, we will tell you first and give you the safeguards the law requires.
Employers. We do not send employers your profile, your answers or your contact details. When you open an advert you go to the employer's own site, which sees your visit like any website does. If we ever offer to pass something on to an employer for you, it will only happen when you ask for it in the app.
Service providers run parts of Clive for us and may use your information only for that.
| Provider | What they do for Clive | Where |
|---|---|---|
| Amazon Web Services | Hosts the app and its database; sends emails | London, UK |
| Supabase | Runs sign-in | London, UK |
| Lets you sign in with your Google account, if you choose to | Global | |
| Microsoft Azure | Runs the AI model that reads your answers | European Union (an EU data zone) |
| ElevenLabs | Turns speech into text, where the app offers a microphone | United States and EU |
| PostHog | Counts how the app and website are used and may record sessions, with every field you type into masked in the app. In the app this is linked to your name and email address, so we can tell whose sessions they are | European Union |
| logo.dev | Supplies employer logos shown next to roles; your browser fetches them, so logo.dev sees your IP address and which employers are shown | United States |
| Cloudflare | Carries traffic to the website and app and protects them | Global network |
| Google Workspace | Our email: it receives sign-up alerts and the messages you send us, including rights requests | Global |
| Anthropic | Provides the AI tools our team uses to investigate problems and improve Clive, which may process your records when a named member of staff looks at them through our audited access, under business terms | United States |
| OpenAI | Provides AI tools our team uses in the same way, under business terms | United States |
Our AI providers are not allowed to use your information to train their own models. We may also share information with advisers and authorities where the law requires, and with a future owner of the business, who would be bound by this policy. We may publish or license genuinely anonymised statistics and insights about graduate careers.
Outside the UK. Your account and records are stored in London, with an encrypted backup copy in Ireland. Analytics and session recordings are stored in the EU (PostHog), and the AI model that reads your answers runs in an EU data zone (Microsoft Azure), so it may be processed in any EU country. Our team's AI tools (Anthropic and OpenAI) and our email (Google Workspace) may process information in the United States. Where a provider processes data in the EU, the UK recognises that as adequate. Where one is US-owned or runs a global network, we rely on the UK-US data bridge or the UK's approved contract terms.
| What | How long |
|---|---|
| Your account and everything in the app | While your account is open. We may close an unused account after emailing you first. |
| After you delete your account | Access ends immediately and your sign-in identity is removed; everything else is erased 30 days later |
| Session recordings | 30 days, and removed sooner when you delete your account |
| Product analytics events | While your account is open; erased from PostHog and our own copy when you delete your account |
| Database backups | Up to 90 days, in London and in Ireland. A deleted account can stay in a backup until it expires; we never restore it into Clive, and if a backup is ever restored we erase deleted accounts again straight away |
| App request logs | 90 days |
| App server logs | 14 days |
| Website visit logs | 90 days |
| Deletion receipts | Up to 400 days: a record that an account was deleted, with no content from it |
| Waitlist entries | 24 months, unless you leave sooner |
| Anonymised statistics | Indefinitely, because they no longer identify you |
If you ask us to erase your information rather than just closing your account, we do that on request. Deletion does not undo improvements already made using information that no longer identifies you.
In the app, under Your profile, you can change your answers, download your data (Account and privacy) and delete your account (Delete account). To change your email address, email us. By email you can also object to a use based on legitimate interests (for example, to keep your conversations out of training data), ask us to restrict a use while we look into a concern, withdraw consent, or ask a person to review a match. We reply within one month and do not charge, and we may ask you to confirm your identity first.
If you are unhappy with how we handle your information, please tell us first. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Clive is for people aged 18 and over; if we learn we hold a younger person's information, we delete it. Your data is encrypted in our database and access is limited to named staff who need it. If a breach puts you at risk, we will tell you and the ICO as the law requires. The current version of this policy and its date are always on this page, and we will tell you about a material change before it takes effect.