Privacy Policy

Last updated: 6 July 2026

This policy explains how The Intern Desk ("we", "us", "the App") collects, uses and protects your information when you use our mobile application and this website. The Intern Desk is a recruiting copilot for finance students: it helps you track applications, draft cover letters and follow-ups, and prepare for interviews.

1. Information we collect

• Account data: your name, email address and password (or Google sign-in identity) when you create an account.
• Profile and CV data: information you provide about your studies, experience and target roles, used to draft applications and personalise coaching.
• Application data: the firms, roles and stages you track in your pipeline, and the documents the App generates for you.
• Google user data: if you choose to connect your Google account, the data described in section 2.
• Waitlist data: if you apply for the beta on this website, your name, email, university, target track and answers you give in the form.

2. Google user data

The Intern Desk's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

If you connect your Google account, the App requests the following scopes, each for a single, user-facing purpose:

• Gmail read (gmail.readonly): to identify recruiting-related threads (applications you sent, replies from firms, interview invitations) so your pipeline stays current and the App can detect when a firm has not replied. We do not read, store or process email unrelated to your recruiting.
• Gmail send (gmail.send): to send a follow-up or thank-you email from your own address, only when you explicitly tap send. The App never sends email automatically.
• Google Calendar read (calendar.readonly): to recognise interviews and coffee chats and remind you to prepare for them.

In line with Limited Use, Google user data is used only to provide these user-facing features. It is never used for advertising, never sold, never used to train generalized AI or machine-learning models, and never transferred to third parties except as necessary to provide the feature (see section 4), to comply with law, or as part of a merger or acquisition with prior notice to you.

You can disconnect Google access at any time from the App's settings or at myaccount.google.com/permissions. Disconnecting revokes our tokens; deleting your account removes the stored data.

3. How we use your information

• To operate the product: track your pipeline, detect unanswered applications, draft follow-ups and cover letters, and coach you for interviews.
• To generate content with AI: relevant excerpts (for example, a job description or a recruiting thread) are sent to our AI provider to draft text for you (see section 4).
• To send you service notifications you have enabled (for example, interview reminders).
• To contact you about the beta, if you joined the waitlist.

We do not sell your personal data, and we do not use it for third-party advertising.

4. Service providers

• Supabase: hosts our database, authentication and server functions. Your data is stored in Supabase-managed infrastructure and protected by row-level security, so each account can only access its own records.
• Anthropic: provides the AI model (Claude) that drafts letters, follow-ups and coaching content. Only the excerpts needed for the specific task are sent, via our servers; our API keys are never exposed to your device.
• Google: provides sign-in, Gmail and Calendar integration as described in section 2.
• Expo: delivers push notifications you have enabled.

5. Data retention and deletion

Your data is retained while your account is active. You can delete your account at any time from the App's settings; this permanently removes your profile, CV data, applications, generated documents and stored Google tokens from our systems. Waitlist entries are deleted once the beta programme ends, or earlier on request.

6. Security

Data is encrypted in transit (TLS) and at rest. Access tokens are stored server-side, protected by row-level security, and are never exposed to other users. AI processing happens through our servers so that no API credentials live on your device.

7. Your rights

Depending on where you live (including under the GDPR if you are in the EU/EEA or UK), you have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. Most of these you can exercise directly in the App; for anything else, contact us and we will respond within 30 days.

8. Children

The Intern Desk is intended for university students and is not directed at children under 16. We do not knowingly collect data from children.

9. Changes to this policy

If we make material changes, we will update this page and notify you in the App or by email before the changes take effect.

10. Contact

Questions or requests: lucapivetti9@gmail.com