Privacy Policy

Last updated: 25 August 2026

This policy explains what personal information internship.ai ("we", "us", "our") collects, how we use and share it, how long we keep it, and the rights and choices you have. It applies to all of our services: job simulations, virtual internships, custom job simulations, verified credentials, profiles, waitlists, and our websites.

1. Scope

This policy covers personal information we handle when you visit our sites, join a waitlist, create an account, complete simulations or virtual internships, build a profile or CV, earn credentials, or interact with us as a candidate or on behalf of an organisation partner such as an employer, educator, enterprise, or non-profit. We handle personal information in accordance with the New Zealand Privacy Act 2020 and, where they apply to you, the Australian Privacy Principles and the EU and UK General Data Protection Regulation ("GDPR").

2. Information we collect

2.1 Information you provide

• Account details: name, email address, password or sign-in identifiers, and settings.
• Profile and CV content: education, experience, skills, photo if you add one, links, and anything else you include.
• Assessment work: your submissions in simulations and virtual internships, including answers, files, code, and recordings where a task uses them, plus grades, feedback, and completion records.
• Waitlist and contact details: email addresses submitted on our marketing pages, with the page or audience they came from, and messages you send us.
• Organisation contacts: work contact details and role information for people acting for an organisation partner.

2.2 Information collected automatically

• Usage data: pages viewed, features used, simulations started and completed, timestamps, and interactions within tasks.
• Device and log data: IP address, browser type, operating system, device identifiers, referring pages, and error logs.
• Cookies and similar technologies: see section 6.

2.3 Information from other sources

• Organisation programmes: if you join through a school, university, enterprise, or non-profit programme, that organisation may give us your name, email, and cohort details.
• Public job listings: role listings we aggregate may include the names of hiring contacts published by the listing owner.
• Sign-in providers: if you sign in through a third-party provider, we receive the details you authorise it to share.

3. How we use information

We use personal information to:

• provide and operate the services, including running simulations, grading work, issuing credentials, and maintaining profiles;
• make introductions you have opted into, such as sharing your verified work with hiring partners;
• run organisation programmes, including reporting cohort progress to the sponsoring educator, enterprise, or non-profit where you joined through their programme;
• communicate with you about the services, including waitlist updates, programme notices, and responses to your requests;
• send marketing communications where permitted, which you can opt out of at any time;
• improve and develop the services, including analysing usage, fixing errors, and testing features;
• keep the services safe, including detecting cheating, fraud, abuse, and security incidents; and
• comply with legal obligations and enforce our Terms and Conditions.

Where the GDPR applies, our lawful bases are performance of a contract, your consent where we ask for it, compliance with legal obligations, and our legitimate interests in operating, securing, and improving the services, balanced against your rights.

4. AI processing

Parts of the services use artificial intelligence, including generating simulations, grading submissions, and producing feedback. This means your submissions are processed by AI systems, which may include trusted third-party AI providers acting under contract for us. Significant decisions about credentials, such as revocation for misconduct, involve human review. We do not permit our third-party AI providers to use your personal information to train their own models without your consent.

5. How we share information

We do not sell personal information. We share it only:

• With organisation partners you choose: when you opt in to introductions or share a credential, the recipient sees your profile information, credential, and the graded work the sharing covers. When you join through an organisation's programme, that organisation sees your participation and results in its programme.
• With service providers: hosting, storage, analytics, email delivery, and AI processing providers who act on our instructions under contract.
• For legal reasons: where disclosure is required or permitted by law, to comply with legal process, or to protect the rights, safety, or property of internship.ai, our users, or others.
• In a business transfer: if we are involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, subject to this policy and notice to you.
• With your direction or consent in any other case.

Public verification pages for credentials you share show only the credential content, not your private account details.

6. Cookies and analytics

We use cookies and similar technologies that are necessary for the services to work, such as keeping you signed in and remembering preferences, and analytics that help us understand how the services are used so we can improve them. You can control cookies through your browser settings. Blocking necessary cookies may stop parts of the services from working. Where the law requires consent for non-essential cookies, we will ask for it.

7. How long we keep information

• Account, profile, and assessment data: kept while your account is active, then deleted or anonymised within a reasonable period after closure, except where retention is needed for the purposes below.
• Verified credentials: retained so long as the credential remains verifiable, unless you ask us to withdraw it.
• Waitlist emails: kept until you unsubscribe or the waitlist purpose ends.
• Logs and security records: kept for a limited period for security, integrity, and legal compliance.
• Legal requirements: we keep information longer where the law requires it or where it is needed for a claim or dispute.

8. Security

We protect personal information with technical and organisational measures appropriate to its sensitivity, including encryption in transit, access controls, and monitoring. No system is perfectly secure, so we cannot guarantee absolute security. If a privacy breach occurs that is likely to cause serious harm, we will notify affected people and the relevant regulator as required by law.

9. Your rights and choices

Subject to applicable law, you can:

• Access the personal information we hold about you and request a copy;
• Correct information that is wrong or out of date;
• Delete your account and associated personal information;
• Export your submissions and profile data in a portable format;
• Withdraw consent where processing is based on consent, including opting out of introductions to hiring partners at any time;
• Object to or restrict certain processing where the GDPR applies; and
• Opt out of marketing using the unsubscribe link in any marketing email or by contacting us.

To exercise any of these rights, email hello@internship.ai. We will respond within the time required by law and may need to verify your identity first. We will not discriminate against you for exercising your rights.

10. International transfers

We may store and process information in countries other than your own, including through service providers located overseas. Where we transfer personal information internationally, we take reasonable steps to ensure it remains protected to a standard comparable to this policy and applicable law, including using providers subject to appropriate safeguards.

11. Children

The services are not directed at children under 16, and we do not knowingly collect personal information from them outside supervised organisation programmes that hold appropriate consents. If you believe a child under 16 has provided personal information without consent, contact us and we will delete it.

12. Third-party sites

The services link to third-party sites, including job listings on external career pages. Their privacy practices are their own, and this policy does not cover them. Review the privacy policy of any third-party site you visit.

13. Changes to this policy

We may update this policy from time to time. We will update the date at the top of this page and, for material changes, give notice through the services or by email before the change takes effect.

14. Contact and complaints

Privacy questions, requests, and complaints: hello@internship.ai. We take complaints seriously and will respond promptly. If you are not satisfied with our response, you can complain to your local privacy regulator, including the Office of the Privacy Commissioner in New Zealand, the Office of the Australian Information Commissioner, or your EU or UK supervisory authority.