Privacy Policy

1. Who we are

AfterSxtn ("we", "us", "our") operates a platform helping UK students aged 16–21 discover and apply to university courses and apprenticeships. We are the data controller for personal data collected through our website and app.

2. What we collect

• Account details — name, email, date of birth, school/college.
• Profile information — subjects, predicted grades, interests, location and preferences you add to personalise matches.
• Application activity — saved listings, applications submitted through the platform, and messages with providers.
• Usage data — device type, pages viewed, and interactions, collected via cookies (see our Cookies policy).

3. How we use it

• To match you with relevant courses and apprenticeships and rank results by fit.
• To let you apply directly to providers and track application status.
• To send service updates, deadline reminders and — only with your consent — marketing emails.
• To improve AfterSxtn through aggregated, anonymised analytics.

4. Who we share it with

We share the minimum data needed with universities, employers and training providers when you submit an application through AfterSxtn. We never sell personal data to third parties. Trusted processors (hosting, email delivery, analytics) act only on our instructions and under contract.

5. Gmail integration (optional)

If you choose to connect your Gmail account from your Profile page, we request read-only access (gmail.readonly) and your Google account email address (userinfo.email) — the narrowest scopes available for this feature. Broader Gmail scopes (send, modify, delete) would let us access far more than we need and are not requested.

• What we access — Google grants us read-only access to your inbox. We only look at messages from the last 90 days (or since your last sync) and extract the sender, subject line, received date, and a short text snippet/body needed to detect application-related emails.
• How we use it — Each fetched email is passed to an AI classifier (Anthropic's Claude API) to detect whether it relates to a university or apprenticeship application and, if so, to extract the organisation, role, status (e.g. interview, offer, rejection) and any key date. This powers the automatic application-tracker updates — we do not read your Gmail for any other purpose, and we never send, modify, or delete anything in your Gmail account.
• Who we share it with — Email content is sent to Anthropic solely to run the classification described above, under Anthropic's API terms, which state that API inputs are not used to train their models. We do not share your Gmail content with any other third party, and never with advertisers or data brokers.
• What we store — We store the classification results (sender, subject, snippet, detected status/organisation/role/date) and your encrypted OAuth tokens. We do not store full email bodies.
• Retention — Stored classification results and tokens are kept only while your Gmail connection is active, or until you delete your account.
• Deletion — You can disconnect Gmail at any time from your Profile page. Disconnecting revokes our access token with Google and permanently deletes all stored classification results for that connection immediately.

6. Under-18 users

7. Your rights

Under UK GDPR you can request access to, correction of, or deletion of your data, and can object to or restrict certain processing. Contact hello@aftersxtn.com to exercise any of these rights — we respond within 30 days.

8. Data retention

We keep account and application data for as long as your account is active, plus 24 months after closure to support re-applications and legal record-keeping, unless you request earlier deletion. Gmail-derived data follows the shorter retention period described in section 5.

9. Contact

Questions about this policy: hello@aftersxtn.com. You can also lodge a complaint with the Information Commissioner's Office (ICO).

Last updated: 1 July 2026