Privacy Policy

Last updated: November 9, 2026

Website: https://internly.site

Privacy contact: privacy@internly.site

1. Introduction

Internly AI is an independent, student-led career guidance platform designed to help university students and recent graduates understand their strengths, explore career opportunities, identify skills gaps, and make informed professional development decisions. This Privacy Policy describes the processing of personal data through the platform under applicable data protection law, including the GDPR.

2. Data Controller

  • Data Controller: Uma Pérez - Pla Cañellas
  • Operating name: Internly AI
  • Country of operation: Netherlands
  • General contact: info@internly.site
  • Privacy contact: privacy@internly.site
  • Website: https://internly.site

3. Eligibility

The platform is intended for individuals aged 18 or older. We do not knowingly offer accounts to individuals under 18.

4. Personal Data We Process

Account and authentication data: email address, name or display name where supplied, account identifier, authentication and session information, and information received from Google sign-in where selected.

Educational and professional profile: educational background, field of study, qualifications, languages, technical and transferable skills, work and volunteering experience, career interests, preferences, and self-assessment responses, including optional free-text entries.

Career discovery and platform activity: career discovery profile, strengths and assessment results, eligibility indicators, saved opportunities, learning recommendations, and progress information where available.

Technical and security data: depending on the deployed services, IP addresses, device and browser information, timestamps, authentication logs, technical errors, and security-related data may be processed.

Documents and certificates: certificate uploads are not available in the initial public beta. Previously stored files, if any, may still exist in private storage and remain subject to applicable deletion procedures.

5. Purposes and Legal Bases

  • Account creation, access, assessments, recommendations and saved opportunities: performance of a contract (GDPR Article 6(1)(b)), to the extent necessary to provide the requested service.
  • Security, abuse prevention and certain essential operational diagnostics: legitimate interests (Article 6(1)(f)), where applicable.
  • Compliance with applicable legal obligations and privacy requests: legal obligation (Article 6(1)(c)), where applicable.

We do not intend to send promotional newsletters or marketing emails during the initial beta. Necessary account, security, and service messages may be sent.

6. Recommendations and Profiling

The platform uses information supplied by users and structured assessment and matching logic to generate career guidance, learning suggestions and opportunity eligibility indicators. Eligibility indicators compare available profile information against selected opportunity requirements; they are not hiring probabilities or guarantees of recruitment, admission or employment. The beta does not intend to make solely automated decisions producing legal or similarly significant effects.

7. Special Categories of Personal Data

Internly AI does not intentionally request special-category personal data such as health information, political opinions or religious beliefs. Nevertheless, users may voluntarily enter sensitive information into free-text fields. Users should avoid submitting unnecessary sensitive information.

8. Providers and Recipients

Internly AI uses third-party technology services, potentially including Lovable Cloud for application infrastructure, storage, database and authentication; Google for optional sign-in; Inngest for scheduled opportunity updates; and email services for essential communications and inbound messages. The exact roles and entities depend on the deployed configuration. Individual student profiles are not intentionally shared with employers merely because their listings appear on the platform. We do not sell personal data.

9. International Transfers

Some providers or subprocessors may process or access personal data outside the European Economic Area. Where applicable, international transfers must satisfy GDPR requirements and use appropriate mechanisms and safeguards.

10. Data Retention

Personal data should be retained only for as long as necessary for the relevant purpose and applicable legal obligations. Different criteria may apply to accounts, profiles, assessments, saved opportunities, logs, support correspondence, backups and deleted-account records.

11. Your GDPR Rights

Subject to applicable conditions, users may request access, correction, erasure, restriction, portability, object to certain processing, withdraw consent where relevant, and exercise applicable rights regarding automated decisions. Contact privacy@internly.site. We may request reasonable identity verification and will respond within applicable statutory deadlines, generally one month subject to lawful extensions.

12. Account Deletion

Users may request deletion through account controls or by contacting privacy@internly.site. Deletion may remove associated profiles, assessments and saved opportunities, subject to lawful retention requirements and backup processes.

13. Cookies and Platform Telemetry

Essential authentication, security and hosting technologies may be used. Hosting-level page-view telemetry, a hosting-level __dpl cookie, and error monitoring are present. No additional optional analytics scripts are included in the application's own code. For questions about these technologies and your personal data, contact privacy@internly.site.

14. Data Security

We aim to implement appropriate technical and organisational measures, including authentication, user-specific access controls, secure connections and appropriate storage permissions. No online system can guarantee absolute security.

15. External Opportunities

The platform may link to employer, recruitment, educational and training websites. Their own privacy practices apply when users leave Internly AI. We do not control their independent recruitment decisions.

16. Policy Updates

We may update this policy to reflect service or legal changes. The current version will be made available on the website, with additional notice where required by law.

17. Complaints

Users may complain to a competent data protection supervisory authority. The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) may be relevant: https://autoriteitpersoonsgegevens.nl.

18. Contact

  • Internly AI — Uma Pérez - Pla Cañellas
  • Netherlands
  • privacy@internly.site
  • info@internly.site
  • https://internly.site