Privacy Policy

What we collect

Account details: your username, Georgetown email, and password. Passwords are stored only as a salted hash — we never see or keep the password itself. Your email is used to confirm you have a Georgetown address and to sign you in.

Profile details you choose to add: a work status and a profile photo.

Activity you create: forum posts and comments, saved jobs, the applications you track, and the salary, culture, and interview data points you contribute to the Intelligence workspace.

What's public and what's private

Public: your username, your work status (if you set one), your profile photo, and anything you post in the forum. These are visible to other members, and forum posts are visible to visitors.

Private: your email, the applications you track, and each individual data point you contribute. We never display these tied to your name. Site administrators can see account details, including your email address, when moderating.

How we use your information

• Run and secure the service, and verify Georgetown eligibility.
• Show your public profile details next to your posts.
• Power features like the Intelligence workspace, benchmarks, and job discovery.

Anonymized and aggregated use

We use the data you provide — Intelligence contributions, forum activity, and the applications you track — in anonymized and aggregated form to build features like pay and culture benchmarks and job discovery. Identifying details are removed before data is used this way. No anonymization method is perfect, and we don't guarantee it is.

Reviewing applications for job ideas

Your application tracker is private to you in the product. We may review tracked applications in anonymized form — not tied to who tracked them — to find roles, offices, and internships worth adding to the job board or Intelligence.

Analytics

We use privacy-friendly analytics (Vercel Analytics) to count page views and understand which parts of the site get used. It doesn't set cookies, doesn't track you across other sites, and doesn't collect information that identifies you personally.

Sharing

We don't sell your information. We share it with the service providers that run Capitol Vectors, and when the law requires it. Those providers are:

• Supabase — the database, sign-in system, and file storage where your account and activity are held.
• Vercel — hosting, plus the Vercel Analytics described above.
• Resend — sends confirmation and password-reset email, so it handles your email address.
• Cloudflare Turnstile — the bot check on sign-up and sign-in; it sees your IP address and browser details.
• Sentry — error monitoring. When something breaks it records technical detail about the failure; it is configured not to attach personal information.

Your choices

You control your public work status and photo from your profile, and you can clear them anytime. You can delete your account from your profile page; that removes your profile and the activity tied to it, and can't be undone. See Retention below for the limited cases where some information remains.

Retention and security

We keep your information while your account is active. Some information may remain after an account is deleted — for example, we keep a record of the email address of a banned account so it can't simply re-register, and backups and error logs may hold copies for a period before they age out. We use industry-standard measures to protect your information, though no system is perfectly secure.

Changes and contact

We'll update this policy as the product grows and note the date above. Questions? Email grahamwierzbicki@gmail.com.