Privacy Policy
Last updated: 14 September 2026
1. What We Collect
We collect only what you provide:
- Account information: email address (for authentication only)
- Profile data: education, skills, interests, nationality — entered by you
- Evidence items: projects, achievements, experiences — entered by you
- Application data: saved opportunities, tasks, answer drafts, notes
- Payment information: processed by Razorpay; we do not store card details
2. What We Do NOT Collect
- We do not store your essays or application answers on our servers in production mode
- We do not track your browsing behavior across other websites
- We do not use advertising cookies or third-party trackers
- We do not collect location data beyond what you enter in your profile
- We do not store payment card details (handled by Razorpay)
3. How We Use Your Data
- To provide the service (profile management, opportunity matching, context export)
- To authenticate your account
- To process payments (via Razorpay)
- To improve the product (aggregated, anonymized usage patterns only)
4. Data Storage
Your data is stored in a Supabase (PostgreSQL) database. Supabase infrastructure is hosted on AWS. We do not operate our own servers.
5. Data Sharing
We do not sell, rent, or share your personal data with third parties except:
- Razorpay: for payment processing only
- Supabase: for database hosting
- OpenAI (optional): if you configure an API key, your opportunity text is sent for extraction — we do not send your profile data to AI services without your explicit action
6. Your Rights
- You can export all your data at any time (Settings → Download all my data)
- You can delete your account and all associated data (Settings → Delete my account)
- You can request access to or correction of your data by contacting us
7. Data Retention
We retain your data only while your account is active. When you delete your account, all personal data is permanently removed. Payment records may be retained for legal/compliance purposes as required by applicable law.
8. Security
We use industry-standard security measures including encrypted connections (HTTPS), database-level access controls (Row Level Security), and server-side authentication verification. However, no method of transmission is 100% secure.
9. Changes to This Policy
We may update this policy. Significant changes will be communicated via email or in-app notification.
10. Contact
For privacy-related inquiries, contact us at privacy@opportunityworkspace.com. This email address is a placeholder — update it with your actual contact before launch.