Privacy Policy

Last Updated: 2026-02-18

Internia ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using Internia, you consent to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide: • Account Information: Email address, password (encrypted), university name, program of study, year of study, and number of past internships • Profile Information: Optional recruiting term preference • User Content: Interview experiences, company names, role titles, interview outcomes, GPA ranges, interview descriptions, and selected interview type tags • Communications: Any messages, reports, or feedback you send us 1.2 Information Collected Through Google Sign-In: If you sign in with Google, we receive your Google email address and display name from Google OAuth. We do not access your Google contacts, calendar, or any other Google account data. 1.3 Interaction Data: • Like Activity: When you like or unlike an interview as an authenticated user, we record your user ID, the interview ID, the interview author's user ID, and a timestamp in our database • Local Storage: If you use the Service without an account, we store your liked interview IDs in your browser's local storage. This data stays on your device and is not sent to our servers 1.4 Automatically Collected Information: • Authentication Data: Login timestamps and session information managed by Supabase Authentication • Essential Cookies: Supabase Authentication uses cookies and local storage to maintain your login session. We do not use analytics cookies, advertising cookies, or any other non-essential tracking technologies at this time 1.5 Information from Third Parties: • Supabase: Authentication and database services provided by Supabase (hosted on AWS)

2. How We Use Your Information

We use collected information for the following purposes: • Provide and maintain the Service • Create and manage your account • Authenticate users and prevent fraud • Display your User Content to other users • Personalize your experience (e.g., recruiting term filter defaults) • Respond to inquiries and provide customer support • Detect, prevent, and address technical issues and security threats • Enforce our Terms of Service • Improve and develop new features • Send administrative notifications (e.g., policy changes) • Comply with legal obligations and protect legal rights

3. Legal Basis for Processing (Canada)

Under Canadian privacy law (PIPEDA), we process your personal information based on: • Consent: By using the Service and providing information, you consent to collection and use as described • Contractual Necessity: Processing required to provide the Service under our Terms • Legitimate Interests: Improving the Service, preventing fraud, and ensuring security • Legal Obligations: Compliance with applicable laws and regulations

4. How We Share Your Information

4.1 Public Information: The following information is publicly visible to all users: • Interview experiences (company, role, outcome, term, questions/comments, tags) • Educational background (university, program, year, past internships) • GPA range (unless you select "Prefer not to say") Your email address and password are NEVER publicly visible. 4.2 Service Providers: We share information with third-party service providers: • Supabase: Cloud hosting, authentication, and database services • Vercel: Web hosting and serverless deployment platform Service providers are contractually obligated to protect your information and use it only for specified purposes. 4.3 Legal Requirements: We may disclose information if required by law or in good faith belief that disclosure is necessary to: • Comply with legal process, court orders, or government requests • Enforce our Terms of Service • Protect our rights, property, or safety • Protect users or the public from harm or illegal activity • Investigate fraud, security issues, or technical problems 4.4 Business Transfers: If Internia is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred. We will notify you of any such change and choices you may have. 4.5 With Your Consent: We may share information for purposes not described in this policy with your explicit consent.

5. Data Retention

We retain your information for as long as necessary to: • Provide the Service and fulfill purposes described in this policy • Comply with legal, accounting, or reporting obligations • Resolve disputes and enforce agreements • Maintain security and prevent fraud Account Information: Retained while your account is active. We may delete accounts and associated data at our discretion, including for inactivity, abuse, or operational reasons. User Content: Interview experiences may be retained to maintain historical data for the community. If your account is deleted, your submissions may be anonymized (personal identifiers removed) rather than fully deleted. Legal Hold: Information may be retained longer if required by law or for legitimate legal purposes.

6. Your Privacy Rights

Under Canadian privacy law (PIPEDA), you have the following rights: 6.1 Access: You may request information about what personal data we hold about you 6.2 Correction: You may update your profile information through your account settings, or contact us to request correction of other inaccurate information 6.3 Withdrawal of Consent: You may withdraw consent for certain uses of your information by contacting us. This may limit Service functionality or require account closure 6.4 Lodge a Complaint: You may file a complaint with the Office of the Privacy Commissioner of Canada Please note: We do not currently offer self-service account deletion or data export. If you wish to have your account or data removed, contact us at internia.team@gmail.com and we will handle your request within 30 days.

7. Data Security

We implement reasonable security measures to protect your information: • Encryption: Passwords are hashed and encrypted; data transmitted over HTTPS • Authentication: Supabase Authentication for secure login • Third-Party Security: Supabase maintains industry-standard security practices and SOC 2 Type II compliance However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

8. Cookies and Local Storage

We use the following browser storage technologies: • Essential Cookies: Supabase Authentication uses cookies and local storage to maintain your login session. These are strictly necessary for the Service to function. • Browser Local Storage: We store non-sensitive preferences (e.g., guest liked interviews) in your browser's local storage. This data is not transmitted to our servers. We do not use analytics cookies, advertising cookies, or any third-party tracking technologies at this time. If this changes, we will update this policy. We do not currently respond to "Do Not Track" signals.

9. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect information from children under 13. If we learn we have collected information from a child under 13, we will delete it immediately. If you believe we have collected information from a child under 13, contact us at internia.team@gmail.com.

10. International Data Transfers

Your information may be transferred to and processed in countries other than Canada, including the United States (where Supabase and Vercel servers are located). These countries may have different data protection laws. By using the Service, you consent to such transfers. We take steps to ensure your information receives adequate protection in accordance with this policy.

11. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of third parties. We encourage you to read third-party privacy policies before providing them with information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be effective immediately upon posting. We will notify you of material changes by: • Posting a notice on the Service • Updating the "Last Updated" date Your continued use after changes constitutes acceptance of the updated policy.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA): • Right to know what personal information is collected, used, and shared • Right to delete personal information • Right to opt-out of sale of personal information (we do not sell your information) • Right to non-discrimination for exercising privacy rights To exercise CCPA rights, contact us at internia.team@gmail.com.

14. Information Accuracy

You are responsible for ensuring information you provide is accurate and up-to-date. You can update your profile information through account settings. We are not responsible for inaccuracies in User Content submitted by other users.

15. Anonymized Data

We may create anonymized, aggregated data from your information that cannot reasonably identify you. We may use and share anonymized data for any purpose, including research, analytics, and product development.

16. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: Email: internia.team@gmail.com You may also reach us through the Contact Us page on the Service. We will respond to privacy inquiries within 30 days. If you are not satisfied with our response, you may file a complaint with: • Office of the Privacy Commissioner of Canada: www.priv.gc.ca • Your local data protection authority (if applicable)

IMPORTANT: By using Internia, you acknowledge that you have read and understood this Privacy Policy. You consent to the collection, use, and disclosure of your information as described. Interview experiences and educational information you share are publicly visible to all users. We take reasonable measures to protect your information but cannot guarantee absolute security.