Last updated: 23 July 2026
1. Introduction
Hi Interns (hereinafter "we", "our", or "Hi Interns") is committed to protecting the privacy of its platform's users. This Privacy Policy describes how we collect, use, store, and protect your personal data.
Data controller:
Hi Interns
Tax identification number: 1816152 H
Address: 1, Khaddouja Themri, Manar 1 - 2092, Tunisia
Contact: contact@hi-interns.com
2. Data Collected
2.1 Identification and Contact Data
- First and last name
- Email address
- Phone number (with country code)
- Date of birth
- Gender
- Country and region of residence
- Profile picture (optional)
2.2 Professional Profile Data
- Educational background (institution, degree, field of study, graduation year)
- Professional experience
- Curriculum Vitae (PDF file)
- Career intentions and professional goals
- Partner university (where applicable)
2.3 Application Data
- Answers to application questionnaires
- Application history
- Saved/favorite listings
- Application status
2.4 Payment Data
- Order information
- Transaction history
- Promotional codes used
- Bank transfer receipts (where applicable)
*Note: Bank card data is processed directly by our payment provider Konnect and is not stored on our servers.*
2.5 Usage Data
- Progress through video training
- Completed viewing sessions
- Interactions with the platform
- Search preferences
2.6 Technical Data
- IP address
- Browser type and version
- Operating system
- Pages visited and visit duration
- Session identifiers
3. Purposes of Processing
We use your personal data to:
| Purpose | Legal basis |
|---|
| --------- | ------------- |
|---|
| Create and manage your account | Performance of the contract |
|---|
| Connect you with companies | Performance of the contract |
|---|
| Process your applications | Performance of the contract |
|---|
| Manage subscriptions and payments | Performance of the contract |
|---|
| Provide AI services (CV generation, recommendations) | Performance of the contract |
|---|
| Provide access to video training | Performance of the contract |
|---|
| Communicate about your account | Performance of the contract |
|---|
| Improve our services | Legitimate interest |
|---|
| Anonymized statistical analysis | Legitimate interest |
|---|
| Fraud prevention | Legitimate interest |
|---|
| Comply with legal obligations | Legal obligation |
|---|
4. Artificial Intelligence and Automated Decisions
4.1 Use of AI
Our platform uses artificial-intelligence technologies to:
- Generate CV suggestions and improvements
- Provide personalized internship recommendations
- Improve the relevance of search results
4.2 Human Involvement
Final decisions regarding applications are made by the recruiting companies, not by automated systems. AI is a decision-support tool, not an autonomous decision-making process.
4.3 Right to Object
You may contact us at contact@hi-interns.com to request a human review of any automated recommendation.
5. Data Sharing
5.1 Partner Companies
Your profile and application data are shared with the companies you apply to. This sharing is necessary to perform our matching service.
5.2 Technical Sub-processors
We rely on the following providers to operate our platform:
| Provider | Service | Location | Data concerned |
|---|
| ---------- | --------- | ---------- | ---------------- |
|---|
| Supabase | Authentication and database | European Union / United States | Account, profile data |
|---|
| Amazon Web Services (S3) | File storage | European Union | CVs, documents |
|---|
| Konnect | Payment processing | Tunisia | Transaction data |
|---|
| Mux | Video hosting | United States | Viewing data |
|---|
| Algolia | Search engine | European Union | Search queries |
|---|
| PostHog | Product analytics | European Union | Usage data |
|---|
| Google Analytics | Web analytics | United States | Browsing data |
|---|
| HubSpot | Customer relationship management | United States | Contact data |
|---|
| Chatwoot | Customer support | Self-hosted | Support messages |
|---|
5.3 International Transfers
Some of our providers are located outside Tunisia, notably in the United States and the European Union. These transfers are governed by appropriate contractual clauses ensuring an adequate level of protection.
5.4 Legal Obligations
We may disclose your data if required by law, a court decision, or a competent administrative authority.
6. Access to Your Google Account (Gmail)
This section applies only if you enable automatic sending in AI Outreach and connect your Gmail account. This connection is optional: AI Outreach works without it (emails are then opened in your email client and sent by you).
6.1 Permissions Requested
| Google permission | What it allows us to do |
|---|
| ------------------- | ------------------------- |
|---|
| `https://www.googleapis.com/auth/gmail.send` | Send, from your Gmail address, the application emails you have approved. This is the only Gmail access we request. |
|---|
| `https://www.googleapis.com/auth/userinfo.email`, `openid` | Identify the connected Gmail address to display it in the application. |
|---|
6.2 What We Access and Retain
We do not read your inbox. `gmail.send` only allows sending messages; it grants no read access to your emails, labels, drafts, contacts, or attachments. No staff member reads your emails.
We retain only the access token required for sending (stored encrypted) and the metadata of the emails you ask us to send.
6.3 Excluded Uses
Gmail data is not used for advertising purposes, is neither sold nor rented, is not transferred to third parties except as required by law, and is not used to train generalized artificial-intelligence models.
6.4 Revocation
You can disconnect your Gmail account at any time from AI Outreach: the access token is immediately revoked with Google and deleted from our servers. You can also remove access from myaccount.google.com/permissions. Tokens are stored encrypted and are used only for the processing described above.
6.5 Google API Services User Data Policy
Hi Interns' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. This applies to the `gmail.send` scope described above.
The `gmail.send` scope is send-only and grants no read access to your mailbox: Hi Interns does not read, receive, retain, or derive any Gmail message data. Accordingly, no raw, aggregated, anonymized, or derived Google user data is used to develop, improve, or train any generalized or foundational artificial-intelligence or machine-learning models, nor transferred to any third party for that purpose. The email content that Hi Interns sends on your behalf is generated from your own uploaded CV and publicly available company information — never from data obtained through a Google API.
7. Cookies and Similar Technologies
7.1 Types of Cookies Used
Essential Cookies (Strictly necessary)
- Supabase authentication cookies
- Session cookies
Functional Cookies
- User preferences
- Chatwoot chat widget
Analytics Cookies
- PostHog (product analytics)
- Google Analytics (traffic analysis)
7.2 Managing Cookies
You can configure your browser to refuse cookies. However, some platform features may no longer be accessible.
8. Data Retention
| Data type | Retention period |
|---|
| ----------- | ------------------ |
|---|
| Account data | Duration of registration + legal retention |
|---|
| Application data | 3 years after the last application |
|---|
| Transaction data | 10 years (accounting and tax obligations) |
|---|
| Connection logs | 1 year |
|---|
| Gmail access token | Until disconnection or revocation |
|---|
| Analytics data | 26 months (anonymized thereafter) |
|---|
After you delete your account, certain data is retained to meet our legal and tax obligations, within the limits defined above.
9. Data Security
We implement technical and organizational security measures to protect your data:
- Encryption of data in transit (HTTPS/TLS)
- Secure authentication (JWT tokens)
- Role-based access control
- Validation of uploaded files (type and size)
- Access monitoring and logging
- Regular backups
10. Your Rights
In accordance with Tunisian personal data protection law, you have the following rights:
10.1 Right of Access
You may request a copy of the personal data we hold about you.
10.2 Right to Rectification
You may request the correction of inaccurate or incomplete data.
10.3 Right to Erasure
You may request the deletion of your personal data, subject to our legal retention obligations.
10.4 Right to Object
You may object to the processing of your data on legitimate grounds.
10.5 Exercising Your Rights
To exercise your rights, contact us at:
- Email: contact@hi-interns.com
- Address: Hi Interns, 1 Khaddouja Themri, Manar 1 - 2092, Tunisia
We will respond to your request within 30 days.
11. Minors' Data
Our platform is primarily intended for students and recent graduates. We do not knowingly collect data concerning children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.
12. Changes to the Policy
We may update this Privacy Policy to reflect changes in our practices or in regulations. The last-updated date is shown at the top of the document.
In the event of a substantial change, we will notify you by email or by a notification on the platform.
13. Contact
For any question regarding this Privacy Policy or the protection of your data:
Hi Interns
Email: contact@hi-interns.com
Address: 1, Khaddouja Themri, Manar 1 - 2092, Tunisia
14. Complaints
If you believe that the processing of your personal data violates your rights, you may lodge a complaint with Tunisia's National Authority for Personal Data Protection (INPDP).
---
*This policy was originally drafted in French. In the event of any discrepancy between translations, the French version prevails.*