This Privacy Notice for Internstart (“we,” “us,” or “our”) describes how and why we might access, collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”), including when you:
Engage with us in other related ways necessary to operate and provide our Services.
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at contact@internstart.com.
Subscribers gain the ability to apply to an unlimited number of curated internships through our innovative, mobile-centric interface. The core of the service lies in its sophisticated automation: users create a single, comprehensive profile, and with a simple swipe, our proprietary artificial intelligence technology instantly generates a unique, role-specific cover letter and submits a complete application package on their behalf. This process drastically reduces application time from hours to seconds, ensuring each submission is both timely and tailored.
This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.
What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Learn more about personal information you disclose to us.
Do we process any sensitive personal information? Some of the information may be considered “special” or “sensitive” in certain jurisdictions, for example your racial or ethnic origins, sexual orientation, and religious beliefs. We may process sensitive personal information when necessary with your consent or as otherwise permitted by applicable law. Learn more about sensitive information we process.
Do we collect any information from third parties? We do not collect personal information from third-party sources or marketing partners. Learn more about information collected from other sources.
How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so. Learn more about how we process your information.
In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties. Learn more about when and with whom we share your personal information.
How do we keep your information safe? We have adequate organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. Learn more about how we keep your information safe.
What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. Learn more about your privacy rights.
How do you exercise your rights? The easiest way to exercise your rights is by data subject access request, or by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.
Want to learn more about what we do with any information we collect? Review the Privacy Notice in full.
1. WHAT INFORMATION DO WE COLLECT?
2. HOW DO WE PROCESS YOUR INFORMATION?
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?
5. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?
6. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?
7. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?
8. HOW DO WE HANDLE YOUR SOCIAL LOGINS?
9. HOW LONG DO WE KEEP YOUR INFORMATION?
10. HOW DO WE KEEP YOUR INFORMATION SAFE?
11. DO WE COLLECT INFORMATION FROM MINORS?
12. WHAT ARE YOUR PRIVACY RIGHTS?
13. CONTROLS FOR DO-NOT-TRACK FEATURES
14. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
15. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?
16. DO WE MAKE UPDATES TO THIS NOTICE?
17. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
18. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
In Short: We collect personal information that you provide to us.
Payment Data. We collect data necessary to process your payments if you choose to make a purchase, such as your payment instrument number and the security code associated with it. All payment data is processed securely by Stripe. We do not store or access full payment information on our servers. You may review Stripe’s privacy policy here: https://stripe.com/en-dk/privacy.
Social Media Login Data. You may have the option to register using your existing Google or other social account. If you choose to do so, we access only the limited information necessary to authenticate you (such as your name and email) in accordance with Google’s User Data Policy. We do not use this information for any advertising, analytics, or unrelated purposes.
Application Data. If you use our application(s), we may collect the following limited technical information with your permission:
This information is used solely to maintain the app’s core functions, ensure account security, and enhance user experience. It is not used for advertising or analytics unrelated to the service.
All personal information you provide must be true, complete, and accurate. You should promptly notify us of any changes to such information.
In Short: We collect limited technical data (like device type or browser) necessary for functionality and security, never for advertising or third-party tracking.
We automatically collect non-identifiable device and usage information (e.g., IP address, browser type, operating system) to maintain service stability, security, and prevent misuse. This data is not shared with third parties and is not used for advertising or marketing purposes.
Like many secure online services, we use essential cookies or similar technologies only to enable core platform functionality, authentication, and performance. We do not use cookies for advertising or user profiling.
Our use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
Internstart connects to your Google account solely for the purpose of helping you send job applications directly through your Gmail account. When you choose to link your Gmail account, we request access to the following scope:
This permission is strictly limited to sending application-related emails that you explicitly authorize through our platform, such as your AI-generated or manually written cover letter and attached resume when applying for a job. Internstart never accesses, reads, downloads, or stores the content of your Gmail inbox, sent messages, or any other Gmail data beyond what is necessary to send your specific email.
We use the Gmail API exclusively to deliver your job applications directly to employers. This allows you to apply for opportunities more efficiently without manually composing and sending emails in Gmail. The data handled through this process includes:
Internstart does not use Gmail data for advertising, analytics, profiling, or any purpose other than sending the emails you explicitly request. We also do not share Gmail data with any third parties. All access tokens and credentials are encrypted and securely stored on our servers, used only to execute the sending function, and can be revoked at any time through your Google Account Permissions settings.
Internstart’s integration with Google APIs complies with all Limited Use policy requirements:
By authorizing Gmail access through Internstart, you acknowledge and agree that the Gmail API connection is used solely to help you send your own job applications efficiently and securely. Internstart does not use your Gmail data for advertising, analytics, or any purpose unrelated to providing core functionality. Your email data remains private, protected, and fully under your control at all times, in accordance with Google’s API Services User Data Policy.
Google Maps may access approximate location data (such as city-level or regional) solely to provide accurate location-based functionality within our services. We do not store or share this data, and no location information is transmitted to our servers beyond what is required to operate the core service features. You may revoke access at any time by adjusting your device or account settings. The Google Maps Platform APIs that we use operate in compliance with Google’s Limited Use Policy and do not use cookies or similar technologies for advertising or analytics purposes.
Internstart only processes data directly provided by users or generated through use of the platform’s core features. We do not buy, sell, or import data from external sources or third-party providers.
| Category | Examples | Collected |
|---|---|---|
| A. Identifiers | Basic account information such as name, email address, and login credentials. | YES |
| B. Personal information as defined in California Customer Records statute | Contact details and account registration information. | YES |
| C. Protected classification characteristics | We do not collect protected classification characteristics. | NO |
| D. Commercial information | Payment or subscription-related details (handled securely by our payment processor). | YES |
| E. Biometric information | We do not collect biometric information. | NO |
| F. Internet or similar network activity | Limited technical information such as IP address and browser type, used solely for security and service functionality. No behavioral tracking or advertising data is collected. | YES |
| G. Geolocation data | Approximate location (city or region) if required for service functionality. Never stored or shared. | YES |
| H. Audio, electronic, or visual information | We do not collect audio or video recordings. | NO |
| I. Professional or employment-related information | Information voluntarily provided by users when creating professional or job-related profiles. | YES |
| J. Education Information | Information users choose to include in their profiles, such as school name or degree. Not collected automatically. | YES |
| K. Inferences drawn from collected information | We do not infer characteristics or build profiles beyond user-requested functionality (e.g., job matching based on inputs). | NO |
| L. Sensitive personal information | Account login credentials. No other sensitive information is collected. | YES |
We collect only the minimum information necessary to provide our services and comply with legal requirements. Sensitive or OAuth-related data (such as Gmail information) is processed only for user-authorized actions and never used for advertising, analytics, or automated profiling.
We may collect additional information when you contact support, participate in surveys, or use features that require communication or document upload. Such information is used solely to fulfill the purpose requested by the user and is not shared externally.
In Short: We process your information only as needed to operate and improve the Internstart platform, ensure account security, and fulfill services you request. We do not process personal information for advertising or unrelated purposes.
We process your personal information for the following purposes:
We do not process personal data for advertising, profiling, or resale. Any data accessed via Google OAuth (such as Gmail) is used exclusively for the user’s own benefit and handled according to Google’s Limited Use Policy.
We process your personal information only when we have a valid legal reason to do so, which may include: (i) consent (e.g., when you authorize Gmail sending), (ii) contract (to provide the Services you request), (iii) legal obligations (to comply with applicable laws), (iv) vital interests (to prevent harm), and (v) legitimate interests (to maintain and improve the Services, in ways that do not override your rights and freedoms).
We do not share Gmail data or user information with third-party advertisers, marketing platforms, or offer walls. All Google user data obtained through OAuth is used only to perform actions explicitly authorized by the user (e.g., sending user-initiated job applications) and is never sold, shared, or used for unrelated purposes.
We only share personal information with trusted service providers (such as hosting, payment, or email providers) under written contracts that comply with applicable laws and Google’s Limited Use Policy. These providers process data only as instructed by us and solely to perform essential services.
We do not sell, share, or disclose personal information to third parties for advertising, marketing, or profiling purposes. All OAuth data (for example, Gmail-related data) is used only to carry out user-authorized actions and is never stored longer than necessary.
We may use limited information for internal research and service improvements. This is not considered “selling” under any privacy law and remains compliant with Google’s user data policies.
We have not disclosed, sold, or shared any personal information to third parties in the past twelve (12) months and do not plan to do so in the future.
In Short: We are not responsible for the safety of any information that you share with third parties that we may link to or who are not affiliated with our Services.
The Services may link to third-party websites or online services for functionality (for example, viewing maps or embedded content). These third parties operate independently and have their own privacy policies. We recommend reviewing those policies before interacting with their services.
In Short: We use limited cookies and similar technologies only where necessary to provide core functionality, security, and authentication.
We use cookies solely to maintain session integrity, remember preferences, and protect user accounts. We do not use cookies or tracking technologies for advertising, remarketing, or analytics related to OAuth data.
We comply with Google’s Limited Use Policy, ensuring that OAuth data is never used for advertising, analytics, or any form of automated decision-making beyond user-initiated functions.
In Short: We offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies.
Internstart uses artificial intelligence technologies strictly to automate functional tasks — such as generating personalized cover letters for job applications. These tools are used only to enhance the functionality of the platform and are never employed for profiling, advertising, analytics unrelated to core app features, or sharing user data with third parties.
When you choose to register or log in using a social login (e.g., Google), we receive only the minimum information necessary for authentication (such as your name and email). We do not use this information for advertising, analytics, or unrelated purposes. Your use of any social login is subject to that provider’s own terms and privacy policy.
We retain personal information only for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. For certain categories (e.g., account login credentials), we retain the data as long as the user has an active account with us.
We implement appropriate organizational and technical safeguards to protect personal information. However, no electronic transmission or storage can be guaranteed 100% secure, and we cannot promise or guarantee that unauthorized third parties will not be able to defeat our security and improperly access, steal, or modify your information.
Our Services are intended for students and recent graduates consistent with applicable law. We do not knowingly collect personal information from children where parental consent is required by law. If we learn that personal information has been collected from a child contrary to law, we will take reasonable steps to delete it.
You have rights under privacy laws to control your personal information. We respect and support these rights in all jurisdictions where we operate. These include:
We do not conduct automated decision-making or profiling using OAuth data. All processing is based on explicit user actions or consent.
To exercise your rights, you can contact us by submitting a data subject access request or by emailing us at contact@internstart.com. We may verify your identity before processing any request, as required by law.
You may also authorize an agent to submit requests on your behalf, provided they have written permission and comply with verification requirements. We will never discriminate against you for exercising your privacy rights.
An authorized agent may make a request on your behalf if they provide valid written permission and proof of identity. We may deny a request from an authorized agent that fails to provide documentation verifying their authority as required by applicable privacy laws.
When we receive a request, we must verify your identity to ensure we are acting on behalf of the correct individual. We only use the information provided in your request to confirm your identity or authority. If we cannot verify your identity using existing data, we may request additional information for verification and security purposes. This information will not be used for any other reason.
If your request is submitted through an authorized agent, we may ask for a signed authorization from you confirming that they are permitted to act on your behalf before processing the request.
If we deny your request, you may appeal our decision by emailing contact@internstart.com. We will respond in writing, explaining our reasoning and actions taken. If your appeal is denied, you may contact your state’s Attorney General or local data protection authority.
California residents may request, once per year and free of charge, information regarding any personal data (if applicable) disclosed to third parties for their own direct marketing purposes during the prior calendar year. We currently do not share such data. To make a request, contact us using the details provided in the section HOW CAN YOU CONTACT US ABOUT THIS NOTICE?.
Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this time, no uniform technology standard for recognizing and implementing DNT signals has been finalized; accordingly, we do not currently respond to DNT browser signals. If a standard for online tracking is adopted that we must follow in the future, we will inform you in a revised version of this Privacy Notice.
U.S. residents may have specific rights under applicable state laws (e.g., CCPA/CPRA, VCDPA, CPA). We honor valid requests to access, correct, delete, or opt out of certain processing consistent with applicable law. See WHAT ARE YOUR PRIVACY RIGHTS? for how to submit a request.
In Short: You may have additional rights depending on your country or region of residence.
We handle personal data in compliance with Australia’s Privacy Act 1988 and New Zealand’s Privacy Act 2020. This notice meets the requirements of both Acts by describing the data we collect, how we use it, and with whom it is shared.
If you choose not to provide certain personal information necessary for us to deliver services, we may not be able to:
You may request access to or correction of your personal data at any time by contacting us through the section HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?. If you believe we are unlawfully processing your personal data, you may file a complaint with the Office of the Australian Information Commissioner or the Office of the New Zealand Privacy Commissioner.
South African users may request access to or correction of their personal information by contacting us using the section HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?.
If you are unsatisfied with our response, you may contact:
The Information Regulator (South Africa)
General inquiries: enquiries@inforegulator.org.za
Complaints: PAIAComplaints@inforegulator.org.za & POPIAComplaints@inforegulator.org.za
In Short: Yes, we update this notice to remain compliant with privacy laws.
We may update this Privacy Notice periodically. The latest version will be marked with a “Revised” date. If significant updates are made, we may notify you by email or by posting an update prominently on our site.
If you have questions or concerns about this Privacy Notice, contact us at contact@internstart.com or by mail at:
Internstart
Solbjerg Pl. 3, 2000 Frederiksberg, Denmark
Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, and withdraw consent where applicable. To submit a request, please complete our data subject access form.