Privacy Policy

Effective date: September 2, 2026

This Privacy Policy explains how IB Atlas ("IB Atlas," "we," "us," or "our") collects, uses, and shares information when you use ibatlas.com and our services (the "Service"). By using the Service, you agree to this policy.

The short version: we collect what you give us (account details, your onboarding profile, your resume, your practice answers) and technical data needed to run and understand the site. Relevant inputs may be sent to AI providers to operate AI-assisted features. We do not sell your personal information or show third-party ads on the site. We use first-party product analytics and may use limited advertising-measurement tags to understand whether our own outreach led to a signup. New checkout is paused during the free public beta; Stripe continues to handle any existing billing records, so we never see full card details. Email us at any time to request access, correction, or deletion.

1. Information you give us

Account information. Your email address and a password. Authentication is handled by Supabase; your password is stored by Supabase in hashed form and we never see it in plain text.

Profile and onboarding information. What you tell us during onboarding and in settings: your name, school, class year, GPA (optional), your background story, work and activity experience, networking channels (schools, teams, hometown, programs), target firms, cities, and sectors, and your self-assessed skill level.

Resume. If you upload a resume, we store the file privately and extract its text so the Service can personalize questions and feedback. Resumes often contain contact details, education, and work history; only upload what you are comfortable using in the Service.

Practice activity. Your answers in lessons, drills, flashcards, quizzes, mock interviews, and behavioral practice, including feedback and scores. If you use voice input, speech is transcribed to text by your own browser; audio is not uploaded to our servers and we do not store recordings. The resulting text transcript is stored with your session.

Contacts you add. People, banks, and coffee chats you enter into the networking tracker yourself.

Messages to us. Anything you send us by email.

2. Information collected automatically

Cookies and measurement. We use essential cookies, set by Supabase, to keep you signed in. We also use first-party event records to understand product use and may load conversion-measurement tags from advertising platforms such as Google Ads. Those platforms may process technical identifiers under their own privacy terms. We do not sell your profile, resume, practice content, or contact lists, and we do not show third-party ads inside IB Atlas.

Campaign attribution. When you land on the site from a link carrying campaign tags (like utm_source) or from another website, we store those tags and the referring page in your browser's local storage, first-party only. If you then create an account, that record is saved with it so we know which post, ad, or site brought you to us. It is used for measuring our own marketing and nothing else.

Server logs. Our hosting provider (Vercel) keeps standard request logs, which can include IP addresses and browser information, for security and operations.

Usage records. We log your use of AI-powered features (which feature ran, token counts, and estimated cost) to operate the Service, enforce plan limits, and prevent abuse.

Do Not Track. Browser treatment of "Do Not Track" signals is not standardized, and the Service does not currently respond to them automatically.

3. Payment information

New checkout is paused during the free public beta. Stripe continues to process and retain information related to earlier purchases or subscriptions under its own privacy policy. We receive only what we need to manage those billing records, such as status, plan, and order identifiers. We never receive or store your full card number.

4. Information about people who are not users

The networking features can compile limited professional information from publicly available web sources. This can include a person's name, employer, title, location, school and activity affiliations, and a link to the public page where the information appeared. Suggested-contact results do not provide personal email addresses or represent that the person has endorsed IB Atlas. Results may be inaccurate or outdated, and users are told to confirm the source before reaching out.

We only collect this information from public sources, we use it only to suggest networking connections, and we do not sell it or use it for advertising.

If you are not an IB Atlas user and believe the Service contains information about you, email us at support@ibatlas.com and we will correct or remove your information promptly.

5. How we use information

We use the information above to:

  • provide, personalize, and improve the Service (for example, tailoring questions to your resume and targets);
  • generate content with AI (see Section 6);
  • manage your plan, enforce usage limits, and prevent fraud and abuse;
  • keep the Service secure and debug problems;
  • communicate with you about your account and, when we make material changes, about this policy or our terms;
  • comply with legal obligations.

6. AI processing

IB Atlas uses third-party AI services. To operate AI-assisted features, relevant pieces of your information (such as profile background, resume text, practice answers, or targets) may be sent to OpenRouter and the model provider handling the request. Their processing is governed by their applicable terms and privacy policies. We aim to send only what a feature needs. Your account data is not intentionally shown to other IB Atlas users.

7. How we share information

We do not sell your personal information and we do not share it for advertising. We share information only with:

  • Service providers that run the product on our behalf: Supabase (database, authentication, and file storage), Vercel (hosting), OpenRouter and its underlying model providers (AI generation), and Stripe (payments). Each receives only what it needs.
  • Advertising platforms, for measurement only. If you signed up after clicking one of our ads, we may confirm to the platform that ran it (for example Google Ads) that a signup happened, so we can tell whether the campaign worked. We never share your profile, resume, practice content, or contact lists with advertising platforms, and we do not send them data to build advertising profiles about you.
  • Legal and safety. We may disclose information if required by law or to protect the rights, safety, and security of IB Atlas, our users, or others.
  • Business transfers. If IB Atlas is ever acquired or reorganized, information may transfer as part of that transaction; this policy would continue to apply until changed.

8. Data retention

We keep your information while your account is active. If you delete your account, we delete your personal information, except for records we need to keep for legal, billing, or security reasons (such as payment records). Aggregated, non-identifying usage data may be retained.

9. Security

Your data is protected with industry-standard measures: encrypted connections (HTTPS), hashed passwords, row-level security so each user's records are accessible only to that user, and private storage buckets for uploaded files. No system is perfectly secure, so please use a strong, unique password.

10. Your rights and choices

You can:

  • Access and update your profile information in the app (Settings and onboarding).
  • Request a copy of the personal information we hold about you.
  • Request deletion of your account and personal information.
  • Ask questions or complain about our data practices.

To exercise any of these, email support@ibatlas.com from the address on your account. We will respond within 30 days. We will never discriminate against you for exercising a privacy right.

Depending on where you live (including California and a number of other US states), you may have specific statutory rights to know, access, correct, and delete personal information. We honor the requests above for all users regardless of location. Note that we do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of on that front.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child under 16 has created an account, contact us and we will delete it.

12. Users outside the United States

IB Atlas is operated from the United States and intended for users preparing for US recruiting. If you use the Service from elsewhere, your information will be processed in the United States. Where local law grants you additional rights, contact us and we will work with you in good faith.

13. Changes to this policy

We may update this policy as the Service evolves. If we make material changes, we will notify you by email or with a notice in the Service before the changes take effect, and we will update the effective date above.

14. Contact

For anything related to your privacy or data, including access, deletion, and removal requests: support@ibatlas.com.

Privacy Policy | IB Atlas