Privacy Policy
Effective date: July 9, 2026
This Privacy Policy explains how IB Atlas ("IB Atlas," "we," "us," or "our") collects, uses, and shares information when you use ibatlas.com and our services (the "Service"). By using the Service, you agree to this policy.
The short version: we collect what you give us (account details, your onboarding profile, your resume, your practice answers) and basic technical data needed to run the site. We use it to run and personalize the Service, including sending relevant pieces of it to AI providers to generate your content. We do not sell your personal information, we do not run ads, and we do not use third-party analytics trackers. Payments are handled by Stripe, so we never see your card details. Email us at any time to access or delete your data.
1. Information you give us
Account information. Your email address and a password. Authentication is handled by Supabase; your password is stored by Supabase in hashed form and we never see it in plain text.
Profile and onboarding information. What you tell us during onboarding and in settings: your name, school, class year, GPA (optional), your background story, work and activity experience, networking channels (schools, teams, hometown, programs), target firms, cities, and sectors, and your self-assessed skill level.
Resume. If you upload a resume, we store the file privately and extract its text so the Service can personalize questions and feedback. Resumes often contain contact details, education, and work history; only upload what you are comfortable using in the Service.
Practice activity. Your answers in lessons, drills, flashcards, quizzes, mock interviews, and behavioral practice, including feedback and scores. If you use voice input, speech is transcribed to text by your own browser; audio is not uploaded to our servers and we do not store recordings. The resulting text transcript is stored with your session.
Contacts you add. People, banks, and coffee chats you enter into the networking tracker yourself.
Messages to us. Anything you send us by email.
2. Information collected automatically
Cookies. We use only essential cookies, set by Supabase, to keep you signed in. We do not use advertising or analytics cookies, and we do not use third-party tracking.
Server logs. Our hosting provider (Vercel) keeps standard request logs, which can include IP addresses and browser information, for security and operations.
Usage records. We log your use of AI-powered features (which feature ran, token counts, and estimated cost) to operate the Service, enforce plan limits, and prevent abuse.
Do Not Track. Because we do not track users across other sites, we do not respond to browser "Do Not Track" signals; there is no cross-site tracking to turn off.
3. Payment information
Purchases are processed by Stripe, our merchant of record. Stripe collects your payment details, billing address, and tax information under its own privacy policy. We receive only what we need to manage your plan, such as your subscription status, plan, and order identifiers. We never receive or store your full card number.
4. Information about people who are not users
The networking features of the Service compile information about professionals (for example, alumni working in banking) from publicly available web sources. This can include a person's name, employer, title, location, school and activity affiliations, and links to public pages such as LinkedIn profiles. This information is stored so that it can be shown to users whose backgrounds overlap with that person, along with the public source it came from.
We only collect this information from public sources, we use it only to suggest networking connections, and we do not sell it or use it for advertising.
If you are not an IB Atlas user and believe the Service contains information about you, email us at support@ibatlas.com and we will correct or remove your information promptly.
5. How we use information
We use the information above to:
- provide, personalize, and improve the Service (for example, tailoring questions to your resume and targets);
- generate content with AI (see Section 6);
- manage your plan, enforce usage limits, and prevent fraud and abuse;
- keep the Service secure and debug problems;
- communicate with you about your account and, when we make material changes, about this policy or our terms;
- comply with legal obligations.
6. AI processing
IB Atlas is an AI product. To generate your content, relevant pieces of your information (such as your profile background, resume text, practice answers, and targets) are sent to our AI provider, OpenRouter, which routes requests to large language model providers (currently DeepSeek models). These providers process the data to return generated content and are contractually restricted from using it except to provide the service. We send only what a given feature needs, and your data stays associated with your account, not shared with other users.
7. How we share information
We do not sell your personal information and we do not share it for advertising. We share information only with:
- Service providers that run the product on our behalf: Supabase (database, authentication, and file storage), Vercel (hosting), OpenRouter and its underlying model providers (AI generation), and Stripe (payments). Each receives only what it needs.
- Legal and safety. We may disclose information if required by law or to protect the rights, safety, and security of IB Atlas, our users, or others.
- Business transfers. If IB Atlas is ever acquired or reorganized, information may transfer as part of that transaction; this policy would continue to apply until changed.
8. Data retention
We keep your information while your account is active. If you delete your account, we delete your personal information, except for records we need to keep for legal, billing, or security reasons (such as payment records). Aggregated, non-identifying usage data may be retained.
9. Security
Your data is protected with industry-standard measures: encrypted connections (HTTPS), hashed passwords, row-level security so each user's records are accessible only to that user, and private storage buckets for uploaded files. No system is perfectly secure, so please use a strong, unique password.
10. Your rights and choices
You can:
- Access and update your profile information in the app (Settings and onboarding).
- Request a copy of the personal information we hold about you.
- Request deletion of your account and personal information.
- Ask questions or complain about our data practices.
To exercise any of these, email support@ibatlas.com from the address on your account. We will respond within 30 days. We will never discriminate against you for exercising a privacy right.
Depending on where you live (including California and a number of other US states), you may have specific statutory rights to know, access, correct, and delete personal information. We honor the requests above for all users regardless of location. Note that we do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of on that front.
11. Children
The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child under 16 has created an account, contact us and we will delete it.
12. Users outside the United States
IB Atlas is operated from the United States and intended for users preparing for US recruiting. If you use the Service from elsewhere, your information will be processed in the United States. Where local law grants you additional rights, contact us and we will work with you in good faith.
13. Changes to this policy
We may update this policy as the Service evolves. If we make material changes, we will notify you by email or with a notice in the Service before the changes take effect, and we will update the effective date above.
14. Contact
For anything related to your privacy or data, including access, deletion, and removal requests: support@ibatlas.com.