What we collect, what we don't, and why.

• Account info: email, password (hashed), and authentication tokens.
• Profile info: name, phone, address, school, major, graduation date, GPA, work authorization, preferred locations, and other fields you choose to save for autofill.
• Resume: the PDF you upload, plus the parsed text we extract from it to populate fields.
• Voice samples: short writing samples you provide at sign-up so AI-drafted answers sound like you.
• Saved jobs and swipes: the internships you save, pass, and apply to, used to improve match quality.

• Usage analytics: page views, button clicks, and feature usage on utern.ai. Anonymized and aggregated to improve the product.
• Device info: browser type, operating system, and a session ID. Used for debugging and to keep you signed in.
• Application form contents (extension only):when you click “Fill All” on a supported ATS apply page, the extension reads the form fields on that page so it can fill them. The form structure and the questions are sent to our AI service to generate draft answers. We don't store the page contents after the fill completes.

• Filling applications: your profile, resume, and voice samples are used to auto-fill ATS apply pages and to draft essay answers.
• Personalizing recommendations: your swipes and saves train the match algorithm to surface better-fit internships.
• Keeping you signed in: auth tokens and session cookies tell the extension which UTern account is yours.
• Sending you product updates: if you opt in. You can unsubscribe from any email with one click.
• Improving the product: aggregated, anonymized usage data helps us understand which features matter.

• We never sell your data to third parties.
• We never share your resume, profile, or application contents with advertisers, recruiters, or data brokers.
• We never train third-party AI models on your personal data. AI drafts are generated per-request and not retained for model training by us or our AI provider (we use zero-data-retention API endpoints).
• We never auto-submit applications. The extension fills the form. You review and click submit yourself.
• We never auto-answer voluntary self-ID or EEO questions (race, gender, veteran status, disability). Those stay yours to fill.
• We never use your datafor purposes unrelated to UTern's single purpose: helping you find and apply to internships.
• We never determine creditworthiness or use your data for lending decisions.

UTern Apply Mode runs on five domains only:

• utern.ai — to read your signed-in session and sync your profile to the extension.
• *.myworkdayjobs.com, *.workday.com — Workday apply pages.
• boards.greenhouse.io, *.greenhouse.io — Greenhouse apply pages.
• jobs.lever.co, *.lever.co — Lever apply pages.
• jobs.ashbyhq.com, *.ashbyhq.com — Ashby apply pages.

The extension does not load on any other website. It does not track your browsing. It does not see what other tabs you have open.

The cookiespermission is requested only when you click “Sign In” in the extension — never at install time. It's used to read the Supabase session cookie from utern.ai so the extension knows which signed-in account to autofill with. You can revoke it anytime in Chrome’s extension settings.

All JavaScript in the extension is bundled at build time. We do not load or execute remote code.

• Database: hosted on Supabase (Postgres) in the United States. Encrypted at rest and in transit (TLS 1.2+).
• Resume files:stored in Supabase Storage with private access — only your signed-in account can retrieve your resume.
• AI inference: AI-drafted answers are generated via zero-data-retention endpoints. Your prompts are not stored by the AI provider beyond the request.
• Local browser storage: the extension caches your profile in chrome.storage.localso autofill is instant. Clearing the extension's data or uninstalling it removes the local cache.

• Access: view everything in your profile at utern.ai/profile.
• Edit: change any profile field, re-upload your resume, update voice samples.
• Delete: email contact@utern.ai to delete your account and all associated data. We process deletion requests within 7 days.
• Export: email contact@utern.ai to request a copy of your data in JSON.
• Revoke extension permissions:right-click the UTern icon in Chrome → Manage Extension → Permissions.

• Supabase— database, authentication, file storage.
• Vercel— hosting and edge functions.
• Anthropic / OpenAI— AI inference for essay drafts (zero-data-retention).
• Adzuna and RapidAPI— internship listing data sources. They never receive your profile or application contents.

Each of these processors is contractually bound to use your data only to provide the service we've hired them for. They do not get rights to resell, share, or train on your data.

UTern is intended for users 16 and older. We don't knowingly collect data from anyone under 16. If you believe we have, email contact@utern.ai and we'll delete it.

If we change this policy, we'll update the “last updated” date at the top and, for material changes, notify signed-in users by email before the change takes effect.

Email contact@utern.ai. We respond within one business day.

UTern is operated by SparkTech Studios. The extension is open source at github.com/SparkTech-Studios/InternshipPlatform.