Privacy Policy

We store the account and authentication information needed to sign you in, including your email address and Supabase session records.

When you use the workspace, we may store profile details, candidate evidence, confirmed resume fragments, private saved jobs and job descriptions, extracted job requirements, applications and their notes or timeline, tailoring-credit records, and immutable tailored resume versions.

Your raw job-description text stays private to your account. It is protected by owner-scoped access controls and is not published to the public job board.

Public board entries are a separate reviewed collection. Saving a private job does not automatically publish it.

When you choose to draft a Master Profile from an uploaded resume, InternshipBC sends the bounded text extracted from that PDF to OpenAI. The returned draft remains unconfirmed and is not saved to your profile in the current review step.

When you choose Analyze and the live provider is enabled, InternshipBC sends the private job-description text to OpenAI to extract structured requirements.

When you choose Generate for tailoring, InternshipBC sends job requirements and context together with the approved candidate source material needed for the request. That material can include your name, email, education, skills, structured candidate evidence, and confirmed manual resume fragments. Unconfirmed entry prose is not a tailoring source.

OpenAI API requests use store: false. OpenAI states that API data is not used to train or improve its models unless the API organization explicitly opts in; InternshipBC does not implement such an opt-in. OpenAI may still keep abuse-monitoring logs containing customer content for up to 30 days by default, unless different approved controls or legal requirements apply.

Supabase authentication uses cookies so the server can recognize your signed-in session. Before sign-up, the public onboarding flow can keep a draft job and lightweight profile in your browser's local storage. That device draft is not an authenticated account record until you choose to import it.

InternshipBC relies on Supabase for authentication and database storage, Vercel for application hosting, configured email and OAuth providers for sign-in, and OpenAI for the AI operations described above. These providers process information needed to deliver their part of the service.

Private account data has no general automatic expiry today. It remains until you remove a record through an available product control or delete your account from Settings. Some individual records cannot be removed while linked history must be preserved.

Self-serve account deletion permanently removes your authenticated account and its private application data. Deleting an individual application or saved job, where permitted, does not delete your account or every related record.

We may revise this policy when the product or its data flows change. The effective date above identifies the current version.