Internships Inc.
Privacy Policy
Last Updated: September 4, 2026
1. Introduction
Internships Inc. ("we," "us," or "our") operates Interns360.com, an internship and early career readiness platform for individuals, employers and educational institutions. This Privacy Policy explains what personal information we collect, how we use and share it, the choices available to you, and your privacy rights (the "Policy").
This Policy applies to students, employers, educational institutions and visitors who use Interns360.com and any websites, applications, and related services to which this Policy is affixed (collectively, the "Platform"), regardless of whether you access the Platform from the United States, the European Union, or elsewhere. Where local law provides greater protection, that law controls.
By using the Platform, you acknowledge the practices described in this Policy. If you do not agree, please do not use the Platform.
2. Who This Policy Covers
Students
Individuals who create a profile that is affiliated with their Educational Institution to search and apply for internships, apprenticeships and other early career opportunities (collectively "ECOs") offered by Employers, including currently-enrolled students, recent graduates and, in limited cases, prospective students referred by an Educational Institution.
Employers
Organizations and their authorized representatives who search for talent or post ECOs, review applications, engage or hire Students, and communicate with Students through the Platform.
Educational Institutions
Colleges, universities, trade schools, vocational schools, and high schools, together with their respective career-center offices, that integrate with the Platform to verify enrollment, refer students, or track ECO outcomes.
Where a Student's information constitutes an "education record" under FERPA, we process that information on behalf of the applicable Educational Institution under FERPA's "school official" exception (34 CFR § 99.31(a)(1)(i)(B)), subject to the terms of our agreement with that Educational Institution, including limitations on use and redisclosure of education records under 34 CFR § 99.33(a).
Visitors
Individuals who visit the Platform, or portion thereof, or interact with the Platform by visiting the Platform (without being logged into an account), such as by sending a support inquiry, or interacting with the Platform without having an account or representing an organization that has an account.
Data Controller / Business
For purposes of the EU General Data Protection Regulation (GDPR), Internships Inc. acts as the data controller for personal data processed to operate the Platform. For purposes of U.S. state privacy laws, Internships Inc. is a "business" (or equivalent term) with respect to the personal information described in this Policy.
3. Information We Collect
We collect the following categories of information, depending on how you use the Platform:
| Category | Examples | Collected From |
|---|---|---|
| Account & profile data | Name, email, phone number, password, school affiliation, resume/CV, cover letters, transcripts, work authorization status, letters of recommendation, and profile photo | Directly from students, educational institutions and employer users |
| Academic & career data | Degree program, field of study, expected graduation date, GPA (if provided), skills, certifications, prior ECO/work history | Students and educational institutions |
| Employer & ECO posting data | Company name, business contacts, ECO listings, hiring criteria, interview notes, offer details | Employers |
| Usage & device data | IP address, browser type, device identifiers, pages viewed, search terms, application activity, log-in timestamps | Automatically, via the Platform |
| Information from third-party services | Professional information such as job title, employer name, educational institution name, and contact details that are publicly available or otherwise made accessible through third-party sources. | Automatically, via the Platform |
| Cookies & similar technologies | Session identifiers, preference settings, analytics and advertising identifiers (see Section 12) | Automatically, via cookies/SDKs |
| Communications | Messages between and among students, educational institutions and employers, support tickets, video conferences and interviews, survey responses, feedback, questionnaires, event registrations | Directly from users |
| Educational Institution-provided data | Enrollment verification, cohort/program identifiers, career-center referrals, curriculum and course descriptions, number of enrolled students | Educational Institutions |
| Content Contributions | Personal data provided, including but not limited to text, video, images and audio | Directly from users |
| Payment and Billing Data | Data needed to complete orders in connection with the Platform. Our payment processors will collect the information necessary to process your payments in accordance with their respective services agreements and privacy policies. Internships Inc. claims no responsibility or liability for payment transactions. | Educational Institutions and Employers. |
| Marketing Data | Your preferences for receiving marketing communications and details about your engagement with such communications | Directly from users |
| Chatbox Data | Information you provide in connection with any chat, including transcripts of your conversation with the chatbot. | Directly from users |
We do not intentionally collect sensitive categories of data (such as racial or ethnic origin, religious beliefs, health information, or disability status) unless you voluntarily provide it — for example, to request an accommodation, respond to an optional diversity survey, or comply with an Employer's equal-opportunity reporting obligations. Where we process such data, we do so only with your explicit consent or another valid legal basis, and we limit its use accordingly.
4. How We Use Your Information
We use personal information to:
- Create and administer Student, Educational Institution and Employer accounts and verify identity or enrollment status;
- Match Students with relevant ECO postings and match Employers with qualified candidates;
- Facilitate applications, video interviews, messaging, interview scheduling, and offer management between Students and Employers;
- Operate, maintain, secure, and improve the Platform, including troubleshooting and analytics;
- Communicate with you about your account, applications, postings, and Platform updates;
- Provide customer support and respond to inquiries, requests or complaints;
- Send optional marketing communications, which you may opt out of at any time;
- Coordinate with Educational Institutions on eligibility, enrollment verification, and outcome reporting;
- Detect, investigate, and prevent fraud, misrepresentation, or misuse of the Platform;
- Comply with legal and regulatory obligations and law enforcement requests,
- Protect against fraud, abuse or other illegal acts; enforce our Terms of Service, and resolve disputes;
- Produce aggregated or de-identified insights (for example, placement statistics shared with institutions), which do not identify any individual; and
- Other uses to manage our business operations, maintain internal records, or perform other functions as described to you at the tie of collection, subject to your consent where legally required.
AI Tools and Automated Processing
To power ECO matching, match explanations, resume parsing, interview preparation, and search, we use artificial-intelligence and machine-learning tools operated by third-party providers. We share Student resume text and profile data with these providers for these purposes. These providers act as our service providers/processors, are bound by contractual confidentiality and data-protection obligations, and do not use your personal information to train their own general-purpose models except as our agreements with them permit. See Section 6 for more on how we share information with these and other service providers, and Section 10 for information about automated decision-making.
5. Legal Bases for Processing (EU/EEA Users)
If you are located in the EU/EEA, the GDPR requires us to identify the legal basis for each processing activity. The table below summarizes the primary bases we rely on.
| Processing Activity | Legal Basis | Example |
|---|---|---|
| Creating and maintaining your account | Performance of a contract (Art. 6(1)(b) GDPR) | Verifying your login credentials |
| Matching students with ECOs | Performance of a contract; legitimate interests (Art. 6(1)(b) and (f)) | Recommending relevant postings |
| Sharing your profile/application with an employer | Performance of a contract; consent where required | Submitting an application |
| Platform security and fraud prevention | Legitimate interests (Art. 6(1)(f)) | Detecting fake employer accounts |
| Marketing communications | Consent (Art. 6(1)(a)); legitimate interests for existing users, subject to opt-out | Newsletter about the Platform, ECOs, new products, services and programs |
| Legal compliance and recordkeeping | Legal obligation (Art. 6(1)(c)) | Responding to a lawful data request |
| Special category data (e.g., disability accommodations) | Explicit consent (Art. 9(2)(a)) | Requesting an accessibility accommodation |
| AI-enabled matching, resume parsing, and profile/resume embeddings | Performance of a contract; legitimate interests (Art. 6(1)(b) and (f)) | Generating a match score and explanation for a posting |
Where we rely on legitimate interests, we have assessed that our interests are not overridden by your rights and freedoms. You may object to processing based on legitimate interests as described in Section 10.
6. How We Share Information
We share personal information in the following circumstances:
- With Employers: when a Student applies to an ECO or opts to make a profile visible, relevant profile, resume, LinkedIn profile, and application information is shared with the corresponding Employer.
- With Educational Institutions: if a Student account is associated with an Educational Institution, enrollment verification, program participation, and aggregated outcome data may be shared with such Student's Educational Institution (and/or its career-center office), consistent with the Student's consent or the Educational Institution's agreement with us. Such sharing is consistent with FERPA and the Educational Institution's own agreement.
- With other Users: when a Student's profile is public or the Student uses community features and social tools, such information is shared with other Users (i.e. visitors, employers, educational institutions and representatives thereof).
- With Service Providers: vendors who perform functions on our behalf, such as cloud hosting, identity verification, email delivery, analytics, customer support, and payment processing, under contractual confidentiality and data-protection obligations.
- With AI Service Providers: to power AI-enabled matching, match explanations, resume parsing, interview preparation, and profile/resume embeddings, we share Student resume text and profile data with AI-service providers acting as our service providers/processors under contractual confidentiality and data-protection obligations; these providers do not use your personal information to train their own general-purpose models except as our agreements with them permit.
- For Legal Reasons: to comply with applicable law, respond to lawful requests from public authorities, or protect the rights, property, or safety of Internships Inc., our users, or the public.
- Business Transfers: in connection with a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to confidentiality obligations.
- With Your Direction: when you affirmatively direct us to share information with a third party, such as a recommendation-letter service or scheduling tool.
We do not sell Student personal information to third parties for their own marketing purposes. See Section 11 for details on the treatment of "sale" and "sharing" under U.S. state law.
7. International Data Transfers
Because the Platform serves users in both the United States and the European Union, personal information may be transferred between and processed in countries other than your own, including the United States, which may not have data-protection laws equivalent to those in your home jurisdiction.
When we transfer personal information from the EU/EEA to a country not deemed adequate by the European Commission, we rely on appropriate safeguards, such as:
- The European Commission's Standard Contractual Clauses (SCCs);
- Supplementary technical, contractual, and organizational measures; and/or
- Other lawful transfer mechanisms recognized under Chapter V of the GDPR.
You may request a copy of the safeguards used for a specific transfer by contacting us using the details in Section 16. This includes personal information shared with the AI service providers identified in Section 6, which may process Student data in the United States or other countries; the safeguards described in this Section apply to those transfers as well.
8. Data Retention
We retain personal information for as long as necessary to provide the Platform and fulfill the purposes described in this Policy, including:
- For as long as your account remains active;
- For a reasonable period after account closure to allow reactivation, resolve disputes, and comply with retention obligations agreed with Educational Institutions;
- As required to comply with legal, tax, accounting, or reporting obligations; and
- As necessary to enforce our agreements and defend against legal claims.
Retention periods vary by data category and jurisdiction (for example, certain employment-record retention rules differ between U.S. states and EU member states). When information is no longer needed, we delete, anonymize, or securely destroy it in accordance with our internal data-retention schedule.
Personal information shared with the AI service providers identified in Section 6 is retained by those providers only as long as necessary to provide the applicable AI-enabled feature, consistent with our contracts with them, and is not retained by them for their own purposes beyond that period except as those agreements permit.
9. Data Security
We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction, including encryption in transit, access controls, and regular security assessments. No system is completely secure, and we cannot guarantee the absolute security of information transmitted to or stored on the Platform. If we become aware of a security incident affecting your personal information, we will notify you and applicable regulators as required by law.
10. Your Privacy Rights — EU/EEA and UK Users
If you are located in the EU/EEA (or the UK, under the UK GDPR), you have the right to:
- Access the personal information we hold about you and receive a copy of it;
- Rectify inaccurate or incomplete personal information;
- Erase your personal information, subject to certain exceptions ("right to be forgotten");
- Restrict or object to our processing of your personal information, including processing based on legitimate interests or for direct marketing;
- Data portability, to receive certain data in a structured, commonly used, machine-readable format;
- Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of prior processing;
- Object to, or request human review of, decisions based solely on automated processing — including AI-generated ECO match scores and explanations — that produce legal effects concerning you or similarly significantly affect you, under Article 22 GDPR; and
- Lodge a complaint with your local supervisory authority, or with your Lead Supervisory Authority, if you believe our processing violates the GDPR.
The AI-enabled matching features described in Section 4 generate match scores, rankings, and explanations that may affect whether a Student is shortlisted for an ECO, or an Employer is shown a particular ECO candidate. We do not use these AI Tools to make final hiring decisions, and Employers remain responsible for their own hiring decisions. If you believe an automated decision has significantly affected you, you may request human review as described above by contacting us using the details in Section 16.
To exercise these rights, contact us using the details in Section 16. We may need to verify your identity before responding and will reply within the timeframe required by applicable law (generally one month, extendable in certain circumstances).
11. Your Privacy Rights — U.S. Users
Depending on your state of residence, you may have rights under laws such as the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, and similar state laws. Where applicable, you have the right to:
- Know what personal information we collect, use, disclose, and (if applicable) sell or share, including the categories and sources of that information;
- Access a copy of the specific pieces of personal information we hold about you;
- Delete personal information we have collected from you, subject to certain exceptions;
- Correct inaccurate personal information;
- Opt out of the sale or sharing of personal information and out of targeted advertising, to the extent applicable;
- Limit the use and disclosure of sensitive personal information, where applicable; and
- Not be discriminated against for exercising any of these rights.
- Opt out of profiling in furtherance of solely automated decisions that produce legal or similarly significant effects, such as certain AI-generated ECO match scores, where required by applicable state law.
Do We "Sell" or "Share" Personal Information?
We do not sell personal information for money. Depending on how certain analytics and advertising cookies operate, some data practices may be considered a "sale" or "sharing" under the broad definitions in some U.S. state laws. Where this applies, we provide an opt-out mechanism described in Section 12 ("Do Not Sell or Share My Personal Information") and honor recognized opt-out preference signals, such as the Global Privacy Control, where required by law.
Submitting a Request
U.S. residents may submit a rights request by contacting us at privacy@internships-inc.com. You may also designate an authorized agent to submit a request on your behalf, subject to identity-verification requirements. We will not charge a fee to process a verifiable request unless permitted by law.
12. Cookies and Similar Technologies
We and our service providers use cookies, web beacons, SDKs, and similar technologies to operate the Platform, remember preferences, understand usage patterns, and, where permitted, support advertising. These fall into the following categories:
- Strictly necessary cookies, required for core functionality such as login and security;
- Functional cookies, which remember your preferences and settings;
- Analytics cookies, which help us understand how the Platform is used; and
- Advertising/measurement cookies, which may be considered a "sale" or "sharing" of personal information under some U.S. state laws and require opt-in consent under EU ePrivacy rules.
EU/EEA and UK users will be presented with a cookie-consent banner allowing you to accept or reject non-essential cookies before they are set, and to change your preferences at any time by contacting the Company at privacy@internships-inc.com. U.S. users can opt out of the sale/sharing of information via cookies by contacting the Company at privacy@internships-inc.com or by configuring your browser to send the Global Privacy Control signal.
We do not currently maintain a separate Cookie Policy. The table below identifies the categories of cookies and similar technologies we use, illustrative examples, their purpose, and their typical retention period. If we publish a standalone Cookie Policy in the future, we will link to it here and it will supplement, not replace, this Section.
| Category | Example | Purpose | Typical Retention |
|---|---|---|---|
| Strictly necessary | Platform session cookie | Maintains your logged-in session and platform security | Session / until logout |
| Functional | Preference cookie | Remembers language, display, and notification preferences | Up to 12 months |
| Analytics | Analytics provider, e.g., Google Analytics | Helps us understand how the Platform is used and improve it | Up to 24 months |
| Advertising / measurement | Ad/measurement provider | Measures and, where permitted, supports marketing communications | Up to 13 months |
13. Children's Privacy
The Platform is intended for users who are at least 16 years old and enrolled in, or affiliated with, an Educational Institution. We do not knowingly collect personal information from children under 13 (or the relevant minimum age under local law, including under the GDPR's member-state-specific age of consent, which ranges from 13 to 16). If we learn that we have inadvertently collected personal information from a child below the applicable age without appropriate consent, we will delete it. Parents or guardians who believe a child has provided us with personal information may contact us using the details in Section 16.
14. Third-Party Links and Integrations
The Platform may contain links to, or integrations with, third-party websites and services (for example, single sign-on providers, video-interview tools, or an Educational Institution's own career portal). This Policy does not apply to those third parties, and we encourage you to review their privacy policies before providing personal information to them.
15. Changes to This Policy
We may update this Policy from time to time to reflect changes in our practices or applicable law. We will post the updated Policy with a revised "Last Updated" date and, where changes are material, provide additional notice, such as an email or in-Platform notification, and, where required by law, obtain your consent before the changes take effect.
16. Contact Us
If you have questions about this Policy or wish to exercise your privacy rights, please contact:
Internships Inc.
Attn: Privacy Team
5900 Balcones Drive, Suite 100
Austin, TX 78731
Email: privacy@internships-inc.com
EU Representative (Art. 27 GDPR)
DataRep has been appointed to represent us in the EU/EEA for data-protection matters.
Data Protection Officer
DPO Name: Ragen Kiefer, reachable at data.security@internships-inc.com