Privacy Policy — Opportunity Graph

Effective date: 07/30/2026

This Privacy Policy explains what personal information Opportunity Graph ("we," "us") collects, how we use it, and the choices you have — including specific protections for users under 18.

1. Information We Collect

Account info: email address and password (managed via Supabase Auth — we never see your raw password).
Profile info you provide: grade/education level, languages, goals, GPA (if entered), and interest/skill selections.
Usage data: which opportunities you view, save, mark as applied, accepted, rejected, or dismissed — used to power your recommendations and their score breakdown.

2. How We Use Information

To generate personalized opportunity recommendations and explain why each one was suggested.
To operate your account (authentication, saved items, your profile).
To improve the Service (e.g., understanding which opportunities are useful to students).

We do not sell your personal information, and the Service does not currently serve third-party ads.

3. Children's Privacy (Users Under 13)

Opportunity Graph is not directed at children under 13. We do not knowingly collect personal information from children under 13 without verifiable parental consent, in line with the U.S. Children's Online Privacy Protection Act (COPPA) and similar laws elsewhere.

Account creation requires confirming that the user is 13 or older, or that a parent/legal guardian is creating and managing the account on the child's behalf. If we learn that a child under 13 has provided personal information without appropriate consent, we will delete it. Parents or guardians who believe their child has submitted information without consent can contact us at macqro888@gmail.com to request its removal.

4. Users 13–17

If you're a minor between 13 and the age of majority in your jurisdiction, we recommend reviewing this policy with a parent or guardian and having them help manage your account. We collect the same categories of information described above regardless of age.

5. How We Share Information

We share information only with the service providers that make the Service work:

Supabase — database hosting, authentication, and row-level security enforcement.
Vercel — application hosting.
[Google Gemini] — used to extract structured details (title, deadline, eligibility) from public opportunity web pages during ingestion. This process works on third-party page content, not on your personal profile data.

We do not sell personal information or share it for third-party marketing.

6. Data Retention

We keep your account and profile information for as long as your account is active. You can delete your account (and all associated data) yourself at any time from the "Delete account" section of your Profile page, or request deletion — see "Your Choices" below.

7. Data Security

We rely on Supabase's authentication and database infrastructure, including encryption in transit and row-level security rules that restrict each user's data to their own account. No system is 100% secure, and we can't guarantee absolute security.

8. Your Choices

Access / update: view and edit your profile anytime from the Profile page.
Delete: you can delete your account and all associated data at any time yourself from the "Delete account" section of your Profile page. Deletion is permanent and cannot be undone. If you'd rather we do it for you, email macqro888@gmail.com to request deletion of your account and its data.
Parents/guardians of users under 18 may contact us to review, correct, or request deletion of their child's information.

9. Cookies

We use essential cookies for authentication (managed by Supabase) to keep you signed in. We do not currently use tracking or advertising cookies.

10. Changes to This Policy

We may update this Privacy Policy periodically. We'll update the effective date above whenever we do.

11. Contact

Questions about this policy or your data? Reach us at macqro888@gmail.com.