Who is responsible
InternDoor (interndoor.com) is run by Akshat Saroha in New Delhi, India, who decides how your data is used. Write to akshat@interndoor.com about anything on this page.
Using the site without an account
You can read every listing, track applications and practise without signing up. In that case:
- Your tracker, your resume and your practice progress stay in your own browser (its local storage). They are not sent to InternDoor, except as described for the AI tools and the daily challenge below.
- The daily challenge sends your answers, with a random ID your browser makes up, so they can be marked and your streak counted. The ID is stored only in a scrambled (hashed) form. Answers are kept for 40 days, and the list of days you played for about a year.
- The AI resume tools send the resume text and the job you picked to be processed, and the free daily allowance is counted against that same random ID and a scrambled form of your IP address. The text is not stored by InternDoor.
- Counts, not people. InternDoor counts things like how many times Apply was pressed on a listing each day. These counts carry no ID, name or address. Page visits are measured with Vercel Web Analytics, which uses no cookies and reports totals only.
- Security logs. Our host keeps short-lived request logs (IP address, browser type, the page asked for) to keep the site running and stop abuse.
If you create an account
An account is optional. It keeps your progress on every device you sign in to. It holds:
- Sign-in details: your email address and a password stored only as a one-way hash. If you sign in with Google, GitHub or LinkedIn, we receive the basic profile they share: your name, email address, profile picture link, and your account’s ID and username there. We never see your password for those services.
- Your profile: the username you choose, which other people can see on leaderboards, and anything you add yourself, such as your name, college and graduation year.
- What you save: your resume (its text and the file you uploaded), the applications you track and your notes on them, the tailored resumes you keep, and your practice results.
- Housekeeping: when the account was created and when you last signed in.
Account data is stored with Supabase on servers in Mumbai, India. Each account can only ever read its own data: the database refuses anyone else's requests for it, and only InternDoor's operator can reach it for support or security.
Why we use it
- To run the features you use: listings, the tracker, practice, leaderboards and the resume tools.
- To send account emails you ask for, such as confirming your address or resetting a password, and the job emails you subscribe to.
- To keep the service safe: limits on the AI tools, blocking abuse, investigating problems.
We rely on your consent, which you give by using a feature or creating an account and can withdraw at any time by deleting the data or the account. We do not sell your data, do not show ads, and do not use your data to build advertising profiles.
Who else handles it
These services process data for us, only to provide InternDoor:
- Supabase: accounts and the database (Mumbai, India).
- Vercel: hosting the site and its server code.
- Upstash: the daily counts, the practice records and the AI allowance.
- Resend: sending account emails.
- Buttondown: the daily job email, if you subscribe (it keeps your address and the time and IP of your signup as a record of consent).
- Our AI model provider: reads the resume text and job you send to the AI tools and returns the result. It is used on paid terms under which your content is not used to train its models.
- Google, GitHub and LinkedIn: only if you choose to sign in with them.
Some of these run servers outside India, so your data may be processed abroad. We use only providers that protect it.
How long we keep it
- Account data: until you delete it, or delete your account.
- Practice answers without an account: 40 days. The days you played: about a year.
- Daily counts: about 100 days.
- If you delete your account, everything in it is erased from the database at once, and any copy in a backup is overwritten within 30 days.
Your rights
Under India’s Digital Personal Data Protection Act 2023 you can:
- See and download your data. Signed in, go to your account page and choose Download my data.
- Correct it. Edit your profile, resume and tracker at any time.
- Delete it. Delete any item, or the whole account from your account page. It cannot be undone.
- Withdraw consent, by deleting the data or the account. Unsubscribe from emails with the link in each one.
- Nominate someone to use these rights for you if you die or cannot act, by writing to us.
- Complain. Write to the grievance officer below first. If you are not satisfied, you can go to the Data Protection Board of India.
Grievance officer
Akshat Saroha, akshat@interndoor.com. We reply within 30 days.
Children
Accounts are for people aged 18 and over. If you are younger, you can still read the listings and practise without an account. If you believe someone under 18 has made an account, write to us and we will delete it.
Security
Everything travels over encrypted connections. Passwords are stored only as hashes, and the database itself checks that every request for account data comes from that account. No system is perfectly secure. If we learn of a breach that affects you, we will tell you and the Data Protection Board as the law requires.
Changes to this policy
When this policy changes, the date at the top changes too. If a change matters for how your data is used, we will email account holders before it takes effect.