Privacy notice
Version 1 · effective 15 September 2026 · last reviewed 15 September 2026
Who we are
Exodos AI is an immigration information service. It compares your profile with published government rules and shows you where you stand. It does not give immigration advice and it never decides anything on your behalf.
Exodos AI is operated from the United Kingdom by its founder, trading as Exodos AI, who is the data controller. Contact: hello@exodosai.com.
During private preview, accounts are created by invitation only.
What we collect, and why
When you create an account: your email address and a password. We store only a secure hash of the password. Basis: performing our contract with you.
When you build your profile: the details the comparison needs. Your nationality, your date of birth (some published rules depend on age at the date of application), current or expected salary and the currency it is paid in, your occupation and its published classification code, your qualifications and when they were awarded, English-language test results, whether you hold a job offer, and the countries you want to compare. Basis: performing our contract with you. The service cannot compare a profile it does not have.
Nationality is different. Nationality can indicate racial or ethnic origin, which the law treats as special category data. We use it only to look up which published rules apply to you, for example English-language exemptions and visa-nationality requirements. If you want it removed from your profile, contact us and we will remove it; the comparisons that depend on it will then show as not comparable rather than being guessed.
If you include other people’s details, for example a referee’s name on a CV you upload, you are responsible for having the right to share them with us. We use such details only to produce the document you asked for.
What we work out from your profile: your Opportunity Score for the United Kingdom, comparison results for the other countries you chose, the published figures those results were read from, and the steps a profile like yours typically takes. These are information about how your profile compares with published criteria. They are not decisions about you, and they do not affect your legal rights or your application. You decide what to do with them.
When you use the AI tools: the fields those tools need are sent to our AI provider to generate the output. We send the fields a tool needs, not your whole profile.
When you subscribe: payment is handled by Stripe on Stripe’s own checkout page, where Stripe’s privacy notice and cookies apply. We never see or store your card number. We store your subscription tier, its status, and Stripe’s reference for your customer record. Basis: contract; and legal obligation for payment records, which we must keep for six years under UK tax law.
To keep the service running safely: the technical details needed to operate an account. Your sign-in session, request counts that enforce fair-use limits on AI tools, and error records. Our own application logs are designed not to contain personal data. Our hosting and authentication providers record IP addresses and browser details in their access logs for security, on their own retention periods. Basis: legitimate interests, meaning security and preventing abuse.
Email from us: we send account emails only, such as the confirmation message when you create an account and notices about your subscription or this notice. We do not send marketing email. If we ever introduce it, it will be opt-in and separate from account email.
What we do not do
- We do not give immigration advice, and we do not make decisions about your application. The score indicates; you decide.
- We do not sell your data.
- We do not set analytics or advertising cookies. The only cookies we use are the ones that keep you signed in. There is no cookie banner because there is nothing to consent to.
- We do not knowingly provide the service to anyone under 18.
Automated processing
Your Opportunity Score for the United Kingdom and your comparison results for other countries are produced automatically from your profile and published rules. No decision with legal or similarly significant effect is made about you by this processing. The results are information for you to consider; no application is made, refused, or assessed by Exodos AI. If you believe a result is wrong, contact us and a person will look at it.
How long we keep it
- Your account and profile: for as long as your account exists.
- After you delete your account, or ask us to: removed from our live systems. The only exception is the payment records described above, which tax law requires us to keep.
- Payment records: six years, as UK tax law requires.
- Logs: our own application logs are designed to contain no personal data; provider access logs are kept on the providers’ retention periods.
If something goes wrong
If a security incident is likely to put your rights at risk, we will tell you without undue delay and report it to the Information Commissioner’s Office (ICO) as the law requires.
Your rights
You have the right to access the data we hold about you, to correct it, to have it deleted, to receive a copy in a portable format, to restrict or object to processing, and to withdraw consent where consent is the basis.
To use any of these, email hello@exodosai.com. We respond within one month.
You can also complain to the ICO: ico.org.uk · 0303 123 1113 · Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. We would appreciate the chance to help first.
Changes to this notice
We will post changes here with a new version number and date. If a change affects how we use your data in a way that matters, we will email you before it takes effect.