Privacy Policy

2.1 Account Information: When your institution provisions access to the Platform, we collect the following for each authorized user: name, email address, organizational affiliation, assigned role, and team membership. This information is provided by your organization's administrator during onboarding.

2.2 Authentication and Session Data: We collect login timestamps, session duration, IP addresses, and browser user agent information for the purposes of security, access management, and troubleshooting.

2.3 Platform Usage Data: We collect data about how Users interact with the Platform, including search queries, job views, contact reveals, saved items, export activity, and credit usage. This data is used to provide the service, generate analytics for your organization, and improve the Platform.

2.4 Publicly Available Data: The Platform aggregates and displays data collected from publicly available sources, including company career pages, public professional profiles, and publicly accessible directories. This includes job listings, employer information, and professional contact details. This data pertains to external individuals and organizations—not to our Client Users. All data collection is performed exclusively on publicly accessible information; we do not access content behind authentication walls or restricted areas.

All data collected from individual Users is used strictly for:

• Service Delivery: Providing access to the Platform, processing searches, delivering job alerts, and enabling team collaboration features
• Internal Administration: Managing your organization's account, credit allocation, team structures, user roles, and subscription status
• Analytics and Reporting: Generating usage analytics and activity reports visible only to your organization's administrators and team leads
• Security and Compliance: Monitoring for unauthorized access, enforcing rate limits, and maintaining platform integrity
• Service Communications: Sending transactional emails such as job alerts, account notifications, and platform updates
• Platform Improvement: Analyzing aggregate, de-identified usage patterns to improve Platform functionality and performance

We do not use individual User data for advertising, profiling, or any purpose unrelated to the delivery and improvement of the Platform.

4.1 Organization-Level Isolation: The Platform implements strict multi-tenant data isolation. Each Client organization's data—including user activity, contact reveals, saved items, analytics, and team configurations—is logically separated and inaccessible to other organizations on the Platform.

4.2 No Cross-Organization Sharing: We do not share, disclose, or make available any individual organization's data, usage patterns, team activity, or operational information to other Client organizations, competitors, or any external party.

4.3 Team-Level Controls: Within an organization, administrators can configure visibility settings to control whether data is shared across all teams, isolated to individual teams, or managed through custom visibility groups. These controls are at the sole discretion of the Client's administrators.

We do not sell, rent, or trade any User or Client data to third parties. We share information only in the following limited circumstances:

5.1 Service Providers: We use trusted third-party service providers to operate the Platform, including:

• Supabase — Database hosting and authentication services
• SendGrid — Transactional email delivery (job alerts, account notifications)
• Amazon Web Services (AWS) — Cloud infrastructure for data processing operations

These providers process data solely on our behalf and are bound by contractual obligations to protect the confidentiality and security of your information.

5.2 Contact Data Sources: When Users perform contact searches or email reveals, queries may be sent to third-party providers that aggregate publicly available professional information. These queries do not include your personal information or organizational data—only the search parameters you specify. All contact information returned is publicly available data.

5.3 Legal Requirements: We may disclose information if required to do so by law, regulation, legal process, or governmental request, or if disclosure is necessary to protect the rights, property, or safety of Intern Insider, our Clients, or others.

We implement industry-standard technical and organizational measures to protect your information, including:

• Row-level security (RLS) enforced at the database level to ensure strict data isolation between organizations
• Encrypted data transmission via HTTPS/TLS for all Platform communications
• Role-based access controls with granular permissions (member, team admin, organization admin, and super admin tiers)
• API rate limiting to prevent abuse and unauthorized bulk data extraction
• Secure session management with automatic timeout after periods of inactivity
• Server-side authentication validation on every request

While we take reasonable measures to protect your information, no method of electronic storage or transmission is completely secure. We cannot guarantee absolute security but are committed to promptly addressing any security incidents.

We retain User account information and organizational data for the duration of the Client's active service agreement. Usage data (such as search history, analytics, and activity logs) is retained to provide ongoing analytics and reporting services to the Client.

Upon termination of a service agreement, the Client may request deletion of their organization's data. We will process such requests within a reasonable timeframe, subject to any legal or regulatory obligations that require continued retention.

8.1 Client User Rights: Depending on applicable jurisdiction, Users and Clients may have certain rights regarding their data, including:

• Access: Request a summary of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data, subject to legal and contractual obligations
• Data Portability: Request a copy of your data in a structured, commonly used format
• Objection: Object to certain processing activities where applicable under law

8.2 Exercising Your Rights: Because the Platform is provided under a B2B arrangement, data access and management requests should be coordinated through your organization's administrator. For requests that require our involvement, please contact us at team@interninsider.me.

8.3 Rights of Third-Party Data Subjects: The Platform surfaces publicly available professional information about individuals who are not Client Users—including recruiters, hiring managers, and employer contacts (“Data Subjects”). If you are a Data Subject and wish to exercise your privacy rights with respect to your information appearing on the Platform, you may contact us at team@interninsider.me with a request to:

• Access the information we hold about you
• Correct any inaccurate information
• Remove your information from the Platform

We will process removal requests within 10 business days. Removed records are suppressed from our index and will not be re-surfaced in future data updates.