Last updated 2026-10-20
BCGH Limited, trading as Supercharged, company number 16617326, registered office 4 Longhope Close, Redditch, England, B98 0QX (“we”, “us”, “our”), is the controller of the personal data described in this notice. Data protection contact: George Hastings, CTO, BCGH Limited, team@superchargedai.app.
This notice applies to two groups of people. Users are registered users of the Supercharged platform, who must be 18 or over. Discovered Persons are individuals identified and contacted through the platform who are not themselves registered users.
What we collect: profile information provided at registration, including name, course of study, year group, career goals, and email address; CV and writing samples, where voluntarily provided; usage data including searches conducted, messages sent, and credits used; billing and payment data, where you purchase credits; and limited permission data where you connect a personal email account.
Why we use it: to provide your account and the core service, and to personalise search results, compatibility scoring, and drafted outreach, both on the basis of performance of our contract with you. We also evaluate and improve the platform, including during the pilot phase, on the basis of our legitimate interest, balanced against the limited impact on you since any data shared externally for this purpose is aggregated and anonymised first.
How long we keep it: profile information for the duration of your active account, plus a limited period afterward; CV and writing samples for 30 days from your last use of the platform; payment and billing records for 7 years in line with UK tax obligations.
Who we share it with: cloud hosting and infrastructure providers, a payment processor for billing data only, and any partner society you are affiliated with, only in aggregated and anonymised form. Other students on Supercharged see your profile as described below, and startups and firms using Supercharged to hire see it only if you choose to let them.
Compatibility scoring uses your information to suggest and rank matches. No decision with a legal or similarly significant effect is made about you without your own input. Scoring is designed, and reviewed periodically, with the aim of avoiding disadvantage to a protected characteristic under the Equality Act 2010.
Where you purchase credits, payment is processed by a third party payment processor, and we do not store your full card details. Credits have no monetary value and cannot be exchanged for cash, transferred, or resold.
Where the platform sends outreach from your own personal email account, we request only the limited permission needed to send a message you have composed and approved, and we do not read, scan, or store your inbox beyond what is strictly necessary for that.
We do not use your personal data to train or refine the AI models that power the platform.
Other Users can find you in their searches and open your profile. This is on by default, as part of the service we provide to you under our contract with you.
They see your name, headline, location and LinkedIn link, and the profile sections you choose to show: About, Experience, Education, Projects, Societies, Skills (with interests, languages and certifications) and Awards. They never see your email address, your CV file, your writing sample or your career goals.
You can change this at any time in Settings: switch off “Show me in search” to stop appearing to other students, hide any of the sections above, or switch off “Let students email me”. If another student emails you through Supercharged, your address is not shown to them unless you reply.
If you choose to, startups and firms using Supercharged to hire can find your profile for internships and jobs. This is off unless you switch it on: we ask during sign-up, with nothing preselected, and you can change your answer at any time in Settings, under “Startups finding you”.
What they see: your Supercharged profile, which is built from your CV: your name, university, course, year, experience, projects and skills, and the other profile sections you choose to show. Sections you hide from other students are hidden from startups too, and if you switch off “Show me in search” they cannot find you at all. They never see your CV file, your email address, your writing sample or your career goals. They can only message you through Supercharged.
Our lawful basis is your consent (Article 6(1)(a) UK GDPR). You can withdraw it at any time by switching it off in Settings; from then on startups and firms can no longer find you. Withdrawing does not affect anything that happened before. We keep a record of when you said yes or no, and to which wording, so we can show what you agreed to.
If we change what startups can see or do, we will ask you again rather than rely on your earlier answer.
If you connect your Gmail account, Supercharged asks Google for two things only: permission to send email from your Gmail account on your instruction (the gmail.send permission), and your email address (through Google sign-in, the openid and email permissions). We do not ask for, and cannot get, permission to read your mailbox.
What we do with it: we send only the messages you write or approve in Supercharged, at the moment you press Send. Each message goes out from your address, and ends with a short line saying it was sent through Supercharged with a link to this notice. We use your Gmail address to show which account is connected and as the sender of those messages. We do not read, search, scan or delete your emails, and we do not access your contacts.
What we store: the access and refresh tokens Google gives us, their expiry time and your Gmail address. They are kept in our database, which is encrypted at rest by our hosting provider, are used only by our servers to send the messages you ask us to send, and are never sent to your browser. We also keep the messages you send through Supercharged (recipient, subject and text) as part of your outreach records, so you can see what you sent. We never store your inbox, your other emails or your contacts.
We do not sell information we receive from Google, we do not use it for advertising, and we do not use it to develop, improve or train AI or machine learning models. We do not transfer it to anyone else, except as needed to send your messages through Google and to host the service. No one at Supercharged reads it unless you ask us to for support, it is needed for security (such as investigating abuse), or the law requires it.
You can disconnect Gmail at any time in Supercharged, under Settings, Security, Connected mailboxes. That withdraws our access with Google and deletes the stored tokens and address straight away. You can also withdraw access at https://myaccount.google.com/permissions; once you do, we can no longer send from your account, and you can ask us at team@superchargedai.app to delete what we stored.
Supercharged’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
If a User has searched for and identified you through the platform, we hold limited professional information about you, typically your name, job title, employer, and business contact details, obtained from publicly available information and vetted third party data providers. We do not collect this information directly from you, and we do not guarantee that information sourced from third parties is accurate, complete, or current.
We rely on legitimate interests as our lawful basis, supported by a documented Legitimate Interests Assessment and Data Protection Impact Assessment, summaries of which are available on request. If you have been contacted through Supercharged, you should have received notice of this processing at the point of first contact.
You have an absolute right to object to this processing at any time, for any reason. This right arises under both UK GDPR and the Privacy and Electronic Communications Regulations 2003. If you object, your information is added to a permanent suppression list, and no further outreach will be generated or sent to you. You can exercise this right by replying to any message you receive, or by contacting us at team@superchargedai.app.
Your information is kept only for as long as necessary to support outreach to you, and is deleted after a period of inactivity or immediately if you object. We share it only with the User who initiated the search and the providers described above, and we do not sell it to any third party.
We do not seek to collect special category data, such as data concerning health, religion, ethnicity, or sexual orientation. Users must not submit special category data, government identification numbers, or financial account details to the platform.
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse.
Certain third party services we use are based outside the United Kingdom. Where this applies, we put appropriate legal safeguards in place, such as standard contractual clauses, before engaging those services.
Both Users and Discovered Persons have the right to access the personal data we hold, request correction of inaccurate data, request erasure in certain circumstances, request restriction of processing, object to processing based on legitimate interests including an absolute right to object to direct marketing, receive certain data in a portable format, and lodge a complaint with the Information Commissioner’s Office. To exercise any of these rights, contact us at team@superchargedai.app.
We use a minimal set of cookies, limited to keeping you signed in and understanding how the platform is used. We do not use third party advertising or tracking cookies, and we do not track your activity across other websites.
We use PostHog, hosted in the EU, to understand how Supercharged is used so we can improve it. It only sets cookies, or stores anything on your device, once you press Accept on the cookie banner. Until you choose, or if you decline, we count visits without cookies and without any identifier that follows you from one day to the next.
With your consent we collect usage events (such as starting a search or generating a draft), your device and browser type, the pages you visit, and recordings of your sessions. Recordings hide everything you type, and the names, emails, profiles and messages of the people you look up or write to. We never send PostHog your CV, your search wording or the content of your emails.
We keep this data for as long as is configured in our PostHog project, and delete it with your account on request.
You can change your choice at any time in Settings, under Security, or here:
The platform is intended for users aged 18 and over and is not directed at children. We do not knowingly collect personal data from anyone under 18. If we become aware that we have inadvertently collected data from a person under 18, we will delete it promptly.
We may update this notice from time to time to reflect changes in our processing or in the law.
This notice is governed by the laws of England and Wales.
For any question about this notice, contact us at team@superchargedai.app. You also have the right to contact the Information Commissioner’s Office directly at any time.
BCGH Limited (Company No. 16617326) — 4 Longhope Close, Redditch, England, B98 0QX — Registered in England and Wales