This Privacy Policy explains how FirstInternships (the "Service") handles personal data. References to "we," "us," "our," or "FirstInternships" mean the operator of the Service.
| Category | Examples | Why |
|---|---|---|
| Account | Name, email address, password | Create and secure your account |
| Profile | School, education level, major, interests, background | Calculate fit scores and personalize your emails |
| Usage | Companies contacted, credits used, emails sent | Provide the Service and prevent duplicate sends |
| Payment | Billing name, card details (via Stripe) | Process subscription payments |
| Email send permission | OAuth send-only token | Send emails from your account on your instruction |
| Device / log | Browser, IP address, timestamps | Security and debugging |
We request a send-only email permission. We do not read, store, or access the contents of your inbox.
When you connect your Google account, we request only the https://www.googleapis.com/auth/gmail.send scope, which lets us send email on your behalf. We cannot read, search, download, or otherwise access any message in your mailbox.
FirstInternships's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, data obtained through Google APIs — including your Gmail send authorization and anything derived from it — is used only to provide and improve the user-facing feature of sending emails you compose, is never sold, shared, transferred, or used for advertising, and is never used to train generalized AI/ML models. Humans do not read this data except where you give explicit consent, where required for security or to comply with law, or as needed for limited internal operations with data de-identified or aggregated.
Where you have given marketing consent, we also use and share your information for marketing as described in Section 3A below.
Our company database contains business contact information used for job and internship outreach, including publicly available role-based addresses (such as careers@) and, in some cases, named contacts and their work emails. Some records are added through an AI-assisted discovery feature that uses Google's Gemini API with Google Search to find these addresses from publicly available sources.
If you are a contact in our database and want your information removed, email contactfirstinternships@gmail.com. We will remove your personal details within 5 business days.
If you opted in to marketing at signup, we may use and share the personal information associated with your account — name, contact details, profile, and outreach activity — to send you opportunities and to share, license, or sell it to vetted third-party partners, advertisers, and affiliated services for their own marketing. Under some US state privacy laws, this sharing may be considered a "sale" or "sharing" of personal information.
This never includes data obtained through Google APIs. Your Gmail send authorization, and any data derived from it, is never sold, shared, licensed, or transferred for marketing or any other purpose — regardless of your marketing settings — and is used only to provide the Service, as described in Section 1A.
Your choices:
We do not knowingly sell or share the personal information of anyone under 18.
Account and profile data is stored in our database (Supabase). When you connect Gmail, Google issues us a send-only authorization token (a refresh token scoped to gmail.send). We store this token securely on our servers, encrypted at rest, with access restricted to the service that sends your emails. We use it solely to send messages at your explicit instruction, and never to read, store, or access your inbox. You can disconnect Gmail at any time, which revokes and deletes the token. We never receive or store your Google password. Payments are handled by Stripe; we never see your full card number.
| Service | Purpose | Policy |
|---|---|---|
| Stripe | Payments | stripe.com/privacy |
| Google (OAuth send) | Sending email | policies.google.com/privacy |
| Supabase | Database / auth | supabase.com/privacy |
| Google (Gemini API) | AI email drafting & firm discovery (with Google Search grounding) | ai.google.dev terms |
To delete your account and associated data, email contactfirstinternships@gmail.com. We process deletion requests within 30 days.
We use HTTPS for data in transit, store your Gmail send authorization token encrypted at rest with access restricted to our sending service, and apply reasonable safeguards. No system is perfectly secure. If a breach affects your personal data, we will notify you as required by law.
You have the right to know, delete, correct, and opt out of the "sale" or "sharing" of your personal information (see Section 3A — sharing only occurs if you opted in), and to non-discrimination for exercising these rights. Submit requests to contactfirstinternships@gmail.com; we respond within 45 days.
You have rights of access, rectification, erasure, restriction, objection, and portability. Our legal basis is contractual necessity and legitimate interests (security, abuse prevention). Contact contactfirstinternships@gmail.com.
FirstInternships is not directed to anyone under 18 and we do not knowingly collect data from minors. If you believe a minor has provided us data, contact contactfirstinternships@gmail.com and we will delete it.
We use session and local storage to keep you signed in and remember preferences. We do not use third-party advertising cookies or cross-site tracking.
We may update this policy. Material changes will be notified by email or in-app at least 14 days before taking effect.
FirstInternships · contactfirstinternships@gmail.com · © 2026 FirstInternships. All rights reserved.