Privacy Policy

Who we are

Stuket Interns is a curated internship marketplace: students build a verified profile and apply to roles, and our team screens and shortlists candidates so that companies receive a small, genuinely-fitting list with evidence behind it, rather than a pile of applications nobody reads.

What we collect, and why

When you sign up, you agree to six itemised purposes, one at a time, before you can submit the form. Every one of them is described again here, in full, and the two descriptions are the same commitment — this page just says more about each.

the Stuket Interns Terms of Service.

The rules of using the product, which you agree to alongside everything else on this page.

our Privacy Policy, covering how we store and process your profile.

This document — how we store and process the profile you build with us, for as long as you use the product and, in the ways Section 4 below describes, after you stop.

verification of the things you tell us using publicly available information.

We check the college and degree claims you make using publicly available information, so that a company reading your profile can trust the verification badge on it.

AI-assisted assessment of your profile against the roles you apply to.

We use an AI assistant to help read resumes, extract ID-card details during verification, and assess how your profile fits a role you apply to. A person on our team reviews the result before it affects a decision about you — the assessment is advisory, never automatic.

sharing a contact-stripped profile card with employers we shortlist you for.

When we shortlist you for a role, the company sees a profile card with your phone number and personal email removed. That is true of every company surface before a placement is confirmed.

sharing your phone number and email with a company once you've accepted a placement with them — only that company, only after we've confirmed the placement, and only for as long as the placement is live.

This is the one exception to the line above, and it is why it has its own purpose rather than riding on the last one: once you accept a placement, the one company that hired you sees your phone number and personal email, for as long as that placement stays live. If the placement ends, that visibility ends with it — the same stage that grants it is the stage that lapses it, with nothing for us to remember to switch off.

Who we share it with

We use seven outside services to run the product. Each one only sees what it needs to do its job, and none of them may use your data for anything else.

Supabase

our database, sign-in and file storage.

Vercel

hosts the product.

Resend

sends the emails the product sends you.

PostHog

product analytics, on your account id only — never your name, phone number or email.

Anthropic

the AI assistance named above: reading resumes, reading ID cards during verification, and assessing profile fit.

Happenstance

public-information research, used to verify a company and the person signing it up, never to research a student.

Inngest

runs the background jobs that keep the product working, such as sending a notification or assembling a data export.

How long we keep it

• Your applications, our screening decisions, your placements, your verification records, your profile and your consent records are retained, including after your account is closed. A consent record is the evidence that our processing was lawful, and our decision history is what keeps our own numbers honest — both are kept for that reason, not by oversight.
• Your ID-card image is kept as a fraud record for 24 months from the date it was verified.
• Your resume file is retained.
• A waitlist signup that has been notified is deleted once the notification has been sent and the retention window has passed.
• An expired sign-in code is deleted once it expires.
• A data-export file is deleted 7 days after we produce it.

Closing your account

Closing your account signs you out of every device immediately. Any open applications are withdrawn, and any live placement is ended — the one company you were placed with stops seeing your phone number and email the moment that happens. We stop sending you anything, and we remove the devices we could otherwise send a notification to.

Seven days after you confirm, signing in becomes impossible. The records named in Section 4 above — your applications, our decisions, your placements, your verification records, your profile and your consent records — are kept, for the reasons given there.

If you sign up again with the same email or the same Google account, you get a brand-new account. Nothing from before is carried over, and we never show you your earlier data on it.

Getting a copy of your data

You can ask for a copy of your data once every 30 days. We email a single-use link to your account’s own email address; the link stops working 24 hours after we send it.

The file includes your profile, your consents, your applications with their full stage history, your verification records, your placements and your resume. It does not include internal notes written by the Stuket team about you, including interview notes, or the fit cards and research dossiers our screening tooling produces about candidates — those are our own working notes about a hiring process, not the information you gave us, and handing them over without the context they were written in would misinform rather than inform.

Withdrawing consent

Withdrawing consent for any purpose above means closing your account — we do not offer per-purpose opt-outs. Start that from your account’s close my account control.

Grievance Officer

Subham Agrawal, Grievance Officer, can be reached at privacy@stuket.in. We aim to respond within 90 days, as the DPDP Rules require.

Changes to this policy

When we change what this page says in a way that matters, we bump the version below and ask every signed-in student to agree again before they can do anything else — the versions in force are always the ones listed here, not the ones in your memory.