Privacy policy

Last updated: 3 Oct 2026. This is a starting template, not legal advice — have it reviewed by a lawyer before launch, especially if you serve users in the EU/UK (GDPR) or California (CCPA/CPRA).

Who we are

Paratus is operated by Paratus, [registered address]. Contact us at contact@paratus.work for any privacy question or request.

What we collect

We collect only what's needed to run your account:

• Workers: full name, mobile number and personal email when you create a Skills Passport; the certificates, licences, training, work history, education, achievements and projects you choose to add; and a profile photo if you upload one.
• Google sign-in (optional): if you continue with Google, we receive your name and email address from Google. We don't receive your Google password.
• Employers and training partners: work email, password and organisation name when you request access.
• Talent pool (optional): if you opt in, a contact email, preferred roles and location so employers can reach you.
• Pathways and career tools: the career goals, interests and background you give during sign-up (your date of birth and gender are optional and never shown on your Skills Passport), the pathways and courses you follow, opportunities you save or apply to, application notes, and the resume and cover letter drafts you write.
• Certificate documents: PDF or image files (up to 5 MB) you upload. They're private: only you, and the training partner reviewing that specific verification request, can open them.
• Applications: when you apply to a Paratus listing, the employer receives a snapshot of your Skills Passport. Your phone and email are included only if you tick the box to share them.
• Who viewed your passport: when an approved employer opens your passport from Talent search or an application, we record the organisation's name, and we count opens of your public link without recording who opened it. Only you can see this history, and we delete it after 90 days.
• Demo requests: if you request a demo, the name, work email, organisation, role type, team size and message you enter, used only to reply to you.
• Security logs: a short-lived record of how often your account uses AI drafting and listing imports, kept for one day to prevent abuse.
• Employer-managed accounts: if your employer manages your training records on Paratus, we record which employer manages your account.

Why we collect it and the legal basis

We use this information to run your Skills Passport, let training partners verify credentials they issued, and (only if you opt in) let vetted employers find and message you. This is necessary to provide the service you asked for, or based on your consent where noted (e.g. the talent pool).

Cookies and local storage

We don't use tracking, advertising or analytics cookies. Your sign-in session is kept in your browser's local storage, not in a cookie. If that changes in the future, this page and a consent banner will be updated first.

AI drafting

If you use “Generate with AI” for a resume summary, cover letter or career reflection, we send the details needed for that draft (for a cover letter: the opportunity's title, organisation and description, and the parts of your Skills Passport listed in the request, such as your name, headline, experience, education, certificates and skills) to our AI provider, Groq, which returns the draft. We don't send your date of birth, gender, phone or email. Drafts are suggestions you can edit; review them before sending.

Service providers

We use these providers to run Paratus: Supabase (database, sign-in and file storage), Vercel (website hosting), Groq (AI drafting, only when you ask for a draft) and Google Fonts, jsDelivr and cdnjs (fonts and code libraries, which receive your IP address when your browser loads them). They process data on our behalf to provide the service.

Who we share it with

Training partners see the courses you list as theirs, so they can confirm and verify them. Employers only ever see your Skills Passport if you've opted into the talent pool, and see your phone number and personal email only if you turn on “Show my phone and email to vetted employers” in your profile. Otherwise they message you through Paratus. Your resume link never shows them. We don't sell your data.

How long we keep it

We keep your account and passport data for as long as your account is active, or until you ask us to delete it. Passport view history is deleted after 90 days, and AI-usage security logs after one day. Demo requests are kept until we've responded and no longer need them, or until you ask us to delete them.

Your rights

You can ask us to access, correct, export or delete your data at any time by emailing contact@paratus.work. We don't yet have a self-serve delete/export button in the product — until we do, this is the way to make that request, and we'll action it promptly.

Children's privacy

Paratus is intended for people old enough to work or train in their jurisdiction. We don't knowingly collect data from children below that age.

Changes to this policy

If we make a material change to this policy, we'll update the date at the top of this page.

Contact

contact@paratus.work