Legal

Privacy Policy

Last updated: 21 June 2026

Who we are

SponsorRoute (“we”, “us”) operates the website at sponsorroute.com. We help jobseekers find UK roles from employers on the Home Office register of licensed visa sponsors. Questions about this policy can be sent to support@sponsorroute.com.

SponsorRoute is operated by Geemon Palissery Yesudas, based in Croydon, London, UK. We are registered with the Information Commissioner's Office (ICO), registration number ZC178688, and are the data controller for your personal data.

Data we collect

Account data — when you create an account we collect your email address and, if you use Google sign-in, your Google profile name and avatar. We do not store your Google password.

Usage data — page views, search queries, and clicks are collected in aggregate to improve the service. We do not build individual behavioural profiles.

AI tool input — two features send data to Anthropic's API: (1) the Resume Tailoring tool sends your CV text and the job description you paste; (2) the AI chat assistant sends your chat messages (up to the last 10 turns) and, when you are viewing a specific job listing, the job title, employer name, location, and a portion of the job description. Neither input is stored by SponsorRoute beyond the duration of your request. Anthropic's API policy does not train on API inputs.

Cookies — we use a session cookie for authentication (Supabase). We do not use advertising or tracking cookies.

How we use your data

We use your data to:

  • Provide and maintain your account
  • Send email alerts you subscribe to
  • Improve the site based on aggregate analytics
  • Comply with legal obligations

We will not sell your data to third parties or use it for advertising purposes.

Third-party services

We share data with the following processors to operate the service:

  • Supabase — database and authentication (data stored in the EU)
  • Anthropic — AI processing for the Resume Tailoring tool and the AI chat assistant (no training on your inputs per Anthropic's API policy)
  • Stripe — payment processing (we receive payment confirmation and subscription status; we do not store your card details)
  • Resend — sending the job-alert emails you subscribe to
  • Vercel — website hosting (data may transit through the US)

Your rights (UK GDPR)

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Object to processing based on legitimate interests
  • Lodge a complaint with the ICO (ico.org.uk)

To exercise any of these rights, email support@sponsorroute.com. We will respond within 30 days.

Data retention

Account data is retained while your account is active. If you delete your account, we remove your personal data within 30 days, except where retention is required by law.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email (if you have an account) or by a prominent notice on the site.