Privacy Policy

1. Information we collect

We collect information you provide directly and information generated when you use the platform.

• Account details such as name, email address, role (student or recruiter), and password or authentication provider data.
• Profile and career content such as resumes, portfolios, skills, education, work history, and preferences.
• Recruiter and company information such as company name, job posts, and hiring workflow data.
• Usage and device data such as pages viewed, feature usage, approximate location derived from IP, browser type, and session identifiers.
• Communications you send us, including support requests and feedback.
• AI interaction content you choose to submit to AI-powered tools (for example prompts, resume text, job descriptions, or chat messages), which is processed to generate outputs for your request.

2. How we use your information

We use personal information to operate and improve Peer Portal.

• Create and manage your account, profiles, and subscriptions.
• Provide AI matching, resume tools, job discovery, assessments, and recruiter workflows.
• Communicate about product updates, security notices, and support.
• Analyze product performance, prevent abuse, and improve reliability and safety.
• Comply with legal obligations and enforce our Terms of Service.

3. AI models and how your data is used

Peer Portal uses its own AI models and AI systems to power features such as resume optimization, job matching assistance, career guidance, chat help, and recruiter automation. When you use an AI feature, relevant content from that request is processed so our AI can generate a response for you.

In some cases, Peer Portal AI may also use trusted third-party AI model providers or infrastructure to help complete a request (for capacity, specialized capabilities, or reliability). When that happens, only the context needed for that request may be sent securely to those providers.

Our principle is minimum necessary processing: we aim to use only the context required for the feature you requested, not your entire account history by default.

• AI outputs are generated for your use in Peer Portal workflows. They may be incomplete or inaccurate and should be reviewed before you rely on them.
• We apply safety measures where practicable, including redaction of secrets and sensitive tokens before prompts are sent through certain shared or external model pathways.
• We do not sell your resumes, chat content, or profile data as a standalone product to advertisers or data brokers.
• We do not use your private career documents to build public marketing lists or to sell targeted advertising profiles.
• We do not grant other Peer Portal users access to your private AI prompts or private document contents unless you explicitly share or submit that content (for example by applying to a job or publishing a portfolio).
• When Peer Portal AI routes a request through third-party model infrastructure, that may include paid or free model tiers operated by partners. Free-tier pathways may be subject to the provider’s own logging or improvement practices; where we use those pathways, we apply additional safeguards such as secret redaction and input sizing controls.
• When available, we prefer configurations that limit unnecessary data retention or secondary use by external providers, and we continue to harden these controls as our AI stack evolves.

4. What we do not share

We do not sell your personal information. We also do not share your personal information for third-party advertising. Limited sharing occurs only as needed to run the product:

• With infrastructure and service providers who help us host, authenticate, send email, process payments, store files, or assist Peer Portal AI with inference capacity — under contractual confidentiality and security expectations appropriate to the service.
• With other users only when you choose to make a profile, portfolio, or application visible, or when you apply to a job.
• If required by law, regulation, legal process, or to protect the rights, safety, and integrity of Peer Portal and our users.
• In connection with a merger, acquisition, or asset transfer, subject to appropriate protections.
• We do not sell, rent, or trade your resume content, chat history, or account credentials.

5. Trust commitments

Trust is part of how Peer Portal is designed. These commitments guide how we handle career and hiring data:

• Privacy-first product design: features should work without requiring us to monetize your personal documents through data sales.
• Purpose limitation: AI and analytics processing should relate to providing, securing, and improving Peer Portal.
• Transparency: this Privacy Policy and related product notices explain how AI and platform data flows work at a high level.
• User control: you can update profile information, manage visibility choices where available, and contact us to exercise applicable privacy rights.
• Accountability: access to production systems and customer data is limited to personnel and systems that need it to operate and support the service.

6. Encryption and security

We use administrative, technical, and organizational measures designed to protect personal information in transit and at rest.

• Encryption in transit: Peer Portal is served over HTTPS/TLS so data exchanged between your browser and our servers is encrypted on the network.
• Encryption at rest: databases, object storage, and backups operated by our infrastructure providers use encryption at rest as configured in our hosting environment.
• Authentication security: account access uses modern authentication services; passwords are handled by our auth provider using industry-standard hashing rather than stored as plain text by Peer Portal.
• Session and access controls: authenticated sessions, role-based access (student, recruiter, admin), and server-side authorization checks protect account data.
• Secrets handling: API keys and credentials for AI and infrastructure providers are stored as server environment secrets and are not embedded in client-side code.
• Monitoring and abuse prevention: we take steps to detect unauthorized access, spam, and misuse.
• No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we continuously work to reduce risk and respond to incidents responsibly.

7. Cookies and similar technologies

We use cookies and similar technologies for authentication, preferences, analytics, and security. For more detail, see our Cookie Policy.

8. Data retention

We retain personal information for as long as your account is active or as needed to provide services, resolve disputes, enforce agreements, and meet legal requirements. AI request logs retained by Peer Portal (if any) are kept only as long as needed for reliability, safety, debugging, and abuse prevention, then deleted or aggregated where practicable. You may request deletion of your account; some records may be retained where legally required or for legitimate security and fraud-prevention purposes.

9. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. You can update many account details in your settings, and you may contact us to exercise applicable privacy rights.

If you prefer not to use AI-assisted features, you can limit use of those tools within the product where available and continue using non-AI parts of Peer Portal that remain accessible to your account.

10. International transfers

Peer Portal is used by people around the world. Information may be processed in countries other than where you live, including by hosting and AI infrastructure providers. Where required, we take steps intended to provide appropriate safeguards for cross-border transfers.

11. Children’s privacy

Peer Portal is not directed to children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. Continued use of the platform after changes become effective constitutes acceptance of the updated policy where permitted by law.