Privacy Policy

1. Information We Collect

Account Information: Name, email, password (encrypted), profile picture, role, affiliation, bio, and skills.

Usage Data: Opportunities viewed, applications submitted, messages sent, and search activity.

Technical Data: IP address, browser type, device information, and timestamps.

2. Google Sign-In

When you sign in with Google, we receive:

• Email address — used as your account identifier
• Name — used for your profile
• Profile picture — used as your avatar (optional)

We do NOT access: Your Google contacts, calendar, Drive files, Gmail, or any other Google services.

Your Google password is never shared with Keburu. Our use complies with Google API Services User Data Policy.

3. How We Use Your Information

• Provide and operate the Keburu platform
• Enable applications, messaging, and profile features
• Send transactional emails (application updates, notifications)
• Improve platform functionality and security
• Prevent abuse and unauthorized access

4. Third-Party Services

• Supabase: Database, authentication, and storage (SOC 2 certified)
• Google OAuth: Optional sign-in authentication
• Resend: Transactional email delivery
• Cloudflare: Hosting and security

5. Data Security

We use encryption in transit (TLS) and at rest, secure password hashing, and row-level security policies. While we take reasonable precautions, no system is 100% secure.

6. Data Sharing

We do not sell your personal data.

We may share information with other users (when you apply or message), service providers (as necessary to operate), and if required by law.

7. Data Retention

We retain data while your account is active. Upon deletion request, we remove personal data within 30 days, except where required by law.

8. Your Rights

You may:

• Access or update your information via account settings
• Request deletion of your account
• Opt out of non-essential emails

9. Children's Privacy

Keburu is for users 13 and older. We do not knowingly collect data from children under 13. Contact us if you believe a child has provided personal information.

10. Changes

We may update this policy and will notify you of significant changes by email or on-site notice.

11. Contact

Questions? Email us at privacy@keburu.org