Last updated: June 28, 2026

This Privacy Policy explains how GlobalExpath collects, uses, shares, stores, and protects personal data when you use globalexpath.com, AiThor-powered job-search tools, account dashboards, subscription checkout, support tickets, email communications, guided job-search services, Hire Me Abroad services, and any other feature that links to this Policy (collectively, the "Services").

GlobalExpaths is a company brand. In this Policy, "GlobalExpath", "we", "us", and "our" mean the GlobalExpaths brand and service. "AiThor" means our AI job-search model and workflow used to support work abroad, remote, hybrid, on-site, relocation-friendly, international, and local job searches.

Any capitalized term not defined in this Policy has the meaning given in our Terms of Use. If you do not want us to process personal data as described here, you should not use the Services.

1. Data Controller and Contact

For users in the United Kingdom, European Economic Area, and other regions with data-controller concepts, GlobalExpaths is the controller of personal data processed for the Services unless a separate written agreement states otherwise.

You can contact us about privacy and legal notices at support@globalexpath.com.

2. Personal Data We Collect

The personal data we collect depends on how you use the Services, which plan you buy, and what information you choose to provide. You are not required to provide every type of data, but some data is necessary to create an account, process payment, provide AiThor outputs, deliver guided support, or respond to support requests.

3. Sources of Personal Data

We collect personal data from you directly when you create an account, buy a plan, complete onboarding, upload documents, use AiThor, submit a support ticket, contact us, or interact with the Services. We also collect data automatically from your device and browser through logs, cookies, analytics, and security tools.

We may receive data from service providers, payment processors, email delivery providers, analytics providers, fraud-prevention tools, job boards or third-party platforms you interact with through the Services, and other sources you authorize. If you connect, submit, or reference third-party professional profiles or job platforms, you are responsible for ensuring you have the right to provide that information.

4. How We Use Personal Data

4.1 Provide Accounts, Profiles, and Plans

We use personal data to create and manage accounts, verify users, personalize dashboards, provide subscription access, allocate credits, process renewals or cancellations, and maintain plan history.

4.2 Provide AiThor and AI Features

We use career data, prompts, uploaded documents, preferences, and usage data to generate job-search recommendations, CV or resume feedback, cover letters, recruiter messages, interview preparation, search strategies, summaries, and other AI-assisted outputs. AI technology is evolving and may produce inaccurate or unsuitable content, so you should review outputs before relying on them or sending them to third parties.

We may use service providers, including AI infrastructure providers, to process inputs and outputs for the purpose of providing, securing, monitoring, and improving AI features. We do not use automated processing to make decisions that produce legal or similarly significant effects about you without an appropriate opportunity for human review where required by law.

4.3 Deliver Guided Support and Hire Me Abroad Services

We use personal data to review your profile, prepare strategy, organize your search, respond to support requests, provide human-guided feedback, track progress, and communicate about next steps. If you ask us to prepare or review materials, we process the information needed to perform that work.

4.4 Job Search, Matching, and Third-Party Opportunities

We use your job interests, career background, search filters, and activity to show or prepare relevant opportunities, countries, sectors, work models, and application materials. If you choose to apply to a third-party opportunity or share materials outside GlobalExpath, the receiving employer, recruiter, job board, or platform will process your data under its own privacy policy.

4.5 Payments, Fraud Prevention, and Security

We use payment and security data to process transactions, prevent fraud, manage chargebacks, secure accounts, detect abuse, enforce usage limits, investigate suspicious activity, comply with law, and protect GlobalExpath, users, providers, and third parties.

4.6 Communications

We use contact and account data to send service emails, account notices, payment confirmations, onboarding messages, support replies, security notices, plan information, product updates, and policy notices. Where allowed by law, we may send marketing communications. You can unsubscribe from non-essential marketing emails through the link in those emails where available.

4.7 Analytics, Research, and Improvement

We use usage data, support feedback, de-identified data, aggregate data, and technical signals to understand how the Services perform, improve user experience, improve AiThor workflows, monitor errors, develop new features, measure campaigns, and keep the Services reliable.

4.8 Legal Compliance and Enforcement

We use personal data to comply with law, respond to lawful requests, enforce our Terms of Use and policies, resolve disputes, maintain records, protect rights and safety, and support audits, accounting, tax, and compliance obligations.

5. Legal Bases for Processing

Where GDPR, UK GDPR, or similar laws apply, we rely on one or more of the following legal bases:

• Contract: processing needed to provide the Services, manage your account, deliver plan features, process checkout, provide support, and perform our Terms of Use.
• Legitimate interests: improving the Services, securing the platform, preventing fraud, understanding usage, communicating with users, protecting legal rights, and operating a sustainable business, balanced against your rights and expectations.
• Consent: optional cookies, certain marketing communications, optional sensitive data where required, or other processing where we ask for consent.
• Legal obligation: tax, accounting, lawful requests, consumer protection, regulatory, safety, and compliance requirements.
• Vital interests: rare situations where processing is necessary to protect someone from serious harm.

6. How We Share Personal Data

We do not sell your account profile, CV, resume, or job-search documents as a standalone product. We share personal data only as needed for the Services, as described in this Policy, or when you direct us to share it.

• Service providers: hosting, cloud infrastructure, security, analytics, email delivery, customer support, payment processing, fraud prevention, AI infrastructure, data storage, development, and operational vendors.
• Payment processors: providers such as Stripe process payment details, authentication, fraud checks, refunds, and transaction records under their own terms and privacy notices.
• AI providers: providers may process prompts, uploaded data, outputs, metadata, and related information to deliver AiThor features, subject to contractual and technical controls where applicable.
• Third parties you choose: employers, recruiters, job boards, career platforms, or other recipients when you apply, share materials, authorize disclosure, or use external links.
• Professional advisers and compliance providers: lawyers, accountants, auditors, insurers, banks, and compliance consultants.
• Legal, safety, and enforcement recipients: courts, regulators, law enforcement, government authorities, dispute processors, or other parties where disclosure is necessary or permitted by law.
• Business transfers: if we are involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, data may be disclosed or transferred subject to appropriate commitments.

We may share aggregate, anonymized, or de-identified information for research, analytics, reporting, or business purposes where it cannot reasonably identify you.

7. Cookies, Analytics, and Ad Choices

We use cookies, pixels, local storage, and similar technologies to keep you signed in, secure the Services, remember preferences, measure performance, understand traffic, diagnose errors, improve features, and measure marketing. Some cookies are strictly necessary and cannot be disabled through our site without affecting functionality.

Depending on your location, we may ask for consent before using analytics, advertising, or non-essential cookies. You can control cookies through your browser settings and, where available, through our cookie banner or settings tool. Blocking cookies may reduce functionality or prevent some Services from working correctly.

Third-party tools may set their own cookies or identifiers when they provide analytics, payment, embedded content, ads, or other services. Those third parties process data under their own privacy notices.

8. International Transfers

GlobalExpath is operated from the United Kingdom and may use service providers located in other countries. Your personal data may be processed in the UK, European Economic Area, United States, and other locations where we or our providers operate.

Where applicable law requires transfer safeguards, we use appropriate mechanisms such as adequacy decisions, standard contractual clauses, UK international data transfer addendums, contractual commitments, technical safeguards, and other lawful transfer tools.

9. Retention

We keep personal data for as long as needed to provide the Services, maintain your account, deliver purchased plans, support users, comply with law, resolve disputes, prevent fraud, enforce agreements, protect rights, and meet tax, accounting, security, and operational needs.

Retention periods vary by data type. For example, account and subscription records may be kept while your account is active and for a period after closure; payment and tax records may be kept for legally required periods; support tickets may be kept to manage service history and disputes; security logs may be kept for a shorter operational period unless needed for investigation. When data is no longer needed, we delete, anonymize, aggregate, or de-identify it where practical.

10. Security

We use technical, organizational, and administrative safeguards designed to protect personal data, including access controls, encryption where appropriate, monitoring, backups, provider controls, and security review. No online service can guarantee perfect security. You are responsible for using a strong password, keeping your login credentials confidential, and telling us promptly if you suspect unauthorized access.

11. Your Privacy Rights

Depending on your location, you may have rights to access, download, correct, delete, restrict, object to processing, request portability, withdraw consent, opt out of certain marketing, opt out of certain targeted advertising or sale/share concepts, and complain to a data protection authority.

To make a privacy request, contact support@globalexpath.com using the email linked to your account where possible. We may need to verify your identity before fulfilling a request. Authorized agents may submit requests where allowed by law, but we may require proof of authority and user verification.

You can update some account details through your dashboard. You can unsubscribe from non-essential marketing emails using the unsubscribe link where available. Essential service, security, billing, legal, and account notices may still be sent while your account remains active.

We do not discriminate against users for exercising privacy rights. If you are dissatisfied with our response, you may contact us again to appeal, and you may have the right to contact your local data protection authority.

12. Minors

The Services are intended for users who are at least 18 years old or the age of majority in their jurisdiction, whichever is higher. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact support@globalexpath.com so we can take appropriate action.

13. Third-Party Websites and Services

The Services may link to employers, recruiters, job boards, career pages, payment processors, social networks, analytics providers, embedded tools, or other third-party websites and services. This Policy does not cover third-party privacy practices. Review the privacy policy of any third party before providing personal data to them.

14. Updates to This Policy

We may update this Policy from time to time. When we make material changes, we will use reasonable efforts to notify active users by email, dashboard notice, website notice, or another appropriate method. The updated version applies from the effective date shown on this page. Your continued use of the Services after an update means the current Policy applies.