Privacy Policy

Last updated: September 16, 2026

1. Introduction

CareerPath BN ("we", "our", "us") respects your privacy and is committed to protecting your personal data. This policy explains what we collect, why we collect it, who can see it, and how you can control it. It applies to all users of the Platform.

2. Information We Collect

We collect the following categories of information:

• Account information: first name, last name, email address, password (stored as a one-way hash), role (student / lecturer / administrator), and account timestamps.
• Student profile: student ID, programme, CGPA, phone number (stored in international E.164 format), date of birth, nationality, address, short biography and profile picture.
• Academic records: institution, programme name, level, dates, subjects, grades and achievements.
• Competencies and skills: BIICF competencies with proficiency levels, and any additional skills you enter yourself.
• Interests: predefined interests and any additional interests you enter.
• Projects: titles, descriptions, roles, technologies used, dates, achievements and project URLs.
• Certifications: certification name, issuing organisation, issue date, and any evidence file you upload (stored on a private disk).
• Aspirations: career goals, preferred industries, preferred work activities, vision, mission and long-term goals.
• Milestones: milestone titles, categories, target dates, completion status, and any proof file you upload (stored on a private disk).
• Career recommendations: the AI-generated recommendations, match scores, readiness scores, matched skills, competency gaps and development plans produced for your account.
• Career Adviser conversations: the questions you ask and the answers returned, stored against your account.
• Usage and activity: notifications generated for your account, feature usage records (used to enforce plan quotas), and a "last active" timestamp (used to display an online indicator on staff dashboards).
• Advertising preferences: whether you have opted in to seeing advertisements.

3. How We Use Your Information

• To provide the core service: generating career recommendations, running the Career Adviser, and displaying your profile and progress.
• To calculate your profile completion and career readiness scores.
• To enforce plan and sponsorship entitlements (for example, how many recommendations you can generate).
• To allow authorised staff (lecturers and administrators) to review student progress on an aggregate and per-student basis.
• To send you notifications about your account and progress.
• To improve the Platform and diagnose problems.
• To display advertisements, but only if you have opted in.

4. AI Processing and Third-Party Sharing

When you generate career recommendations or ask the Career Adviser a question, relevant parts of your profile are sent to Groq, Inc., a third-party AI inference provider, to produce the response. This includes your programme, CGPA, academic records, competencies, interests, projects, certifications, aspirations, and — for the Career Adviser — your recent message history within the current conversation.

Your name, email address, student ID, phone number, profile picture and uploaded files are never sent to the AI provider. We send only the information the AI needs to give career guidance.

Groq processes this data under its own terms of service. If you do not wish your profile data to be sent to Groq, you should not use the recommendation or Career Adviser features.

5. Who Can See Your Data

• You — full access to your own profile, recommendations, conversation and files.
• Lecturers and administrators — can view your profile, academic information, competencies, projects, certifications, milestones, career recommendations and generation history. They can also see that you have used the Career Adviser and how many messages you have exchanged, but they cannot read the contents of your Career Adviser conversation.
• Other students — cannot see your data at all.
• Sponsoring organisations — provide funding for a group of students but do not receive any individual student data, recommendations or conversations.
• Third-party AI provider (Groq) — receives the anonymised career-relevant subset of your profile described in section 4, only when you use an AI feature.

6. Advertising

Advertising is disabled by default. If you enable it in Settings, the Platform may display advertisements from partner organisations. Advertisements are selected based on your organisation group (for example, your school or programme), not on your personal profile. You can turn advertising off at any time.

7. Data Storage and Security

Your data is stored in the Platform's database and on the servers that host it. Passwords are hashed using bcrypt. Certification evidence and milestone proof files are stored on a private disk and only served to you or to authorised staff through authenticated routes. Profile pictures are stored on a public disk so that they can be displayed alongside your name.

We take reasonable technical and organisational measures to protect your data, but no system is completely secure. Please use a strong, unique password.

8. Data Retention

Your data is retained for as long as your account exists. If you delete your account from the Settings page, your profile, recommendations, conversations, milestones, certifications and uploaded files are permanently removed from the database. Certain aggregated or anonymised records may be retained for reporting purposes.

9. Your Rights

You have the right to:

• Access your personal data at any time through your profile page.
• Correct your personal data by editing your profile.
• Export your data as a PDF report from your profile page.
• Delete your account and all associated data from the Settings page.
• Withdraw consent for advertising at any time from Settings.
• Request information about how your data is processed by contacting us at the address below.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated through the Platform. Continued use after an update constitutes acceptance of the revised policy.

11. Contact

For questions about this Privacy Policy or to exercise your data rights, contact:
School of Information and Communication Technology
Politeknik Brunei, Block 2E, Ong Sum Ping Condominium, BA1311
Email: contact@pb.edu.bn
Phone: +673 2234630

← Back to Registration