Privacy Policy

1. What We Collect

We collect information you provide and limited usage diagnostics:

• Account information: email address (for authentication only)
• Profile data: education, skills, interests, nationality, entered by you
• Evidence items: projects, achievements, experiences, entered by you
• Application data: saved opportunities, tasks, answer drafts, notes
• Payment information: processed by Razorpay; we do not store card details

2. What We Do NOT Collect

• We do not collect form contents for analytics. Drafts you choose to save in your workspace remain part of your account data.
• We do not track your browsing behavior across other websites
• We do not use advertising cookies or third-party trackers
• We do not collect location data beyond what you enter in your profile
• We do not store payment card details (handled by Razorpay)

Connections and usage diagnostics

Your social profile contains only the introduction, interests and projects you choose to publish. Private eligibility answers, income, documents and application drafts are not shared with friends. Activity is private by default; you choose its audience. Invite links reveal your social introduction to anyone who has the link, expire after 30 days and can be revoked.

Public social profiles and inclusion in people recommendations are separate opt-in settings, both off by default. Public means visible to other signed-in members in the app. Suggestions use shared social interests, with other opted-in profiles as a fallback; private eligibility details are not used. Following shows only explicitly public updates. Connections require acceptance and can receive updates shared with connections or selected friends. Taking a profile private removes followers and makes its existing public updates private; enabling it again does not restore them. You can skip discovery, hide suggestions, unfollow, block or report people.

Opportunity share links contain the published opportunity only by default. Including a connection invitation explicitly reveals your social display name to anyone holding that link. These links expire after 30 days and can be revoked. Revocation cannot recall information someone already viewed. Opening a link never connects accounts or shares eligibility answers.

Anonymous browser identifiers help estimate visits, referring domains, navigation clicks and active page time. We also measure invitation steps, such as starting a check, signing in, saving and creating another share link, within a browser session. We do not attach account IDs, eligibility answers or invitation tokens to those observations. Error diagnostics may include a redacted message, stack trace, browser and release reference. We do not record form contents or session replays. Observations have a roughly 50,000-record cap; records older than 30 days are removed in batches as new observations arrive. Access is limited to authorised owners and admins. You can turn off browser diagnostics in settings. We respect Do Not Track and Global Privacy Control signals.

3. How We Use Your Data

• To provide the service (profile management, opportunity matching, context export)
• To authenticate your account
• To process payments (via Razorpay)
• To improve the product (aggregated, anonymized usage patterns only)

4. Data Storage

Your data is stored in a Supabase (PostgreSQL) database. Supabase infrastructure is hosted on AWS. We do not operate our own servers.

5. Data Sharing

We do not sell, rent, or share your personal data with third parties except:

• Razorpay: for payment processing only
• Supabase: for database hosting
• OpenAI (optional): if you configure an API key, your opportunity text is sent for extraction: we do not send your profile data to AI services without your explicit action

6. Your Rights

• You can export all your data at any time (Settings → Download all my data)
• You can delete your account and all associated data (Settings → Delete my account)
• You can request access to or correction of your data by contacting us

7. Data Retention

We retain your data only while your account is active. When you delete your account, all personal data is permanently removed. Payment records may be retained for legal/compliance purposes as required by applicable law.

8. Security

We use industry-standard security measures including encrypted connections (HTTPS), database-level access controls (Row Level Security), and server-side authentication verification. However, no method of transmission is 100% secure.

9. Changes to This Policy

We may update this policy. Significant changes will be communicated via email or in-app notification.

10. Contact

A support contact has not been published yet.