Safety

Student data stays under your school’s control

Your school decides who joins and what they can see. We protect student information with encrypted connections and limited access, and never sell it or use it for advertising. Our school data agreement explains these commitments.

Read the school data agreement Privacy Policy

Five safeguards to review with your school

01
A school data agreement you can review
When your school accepts the Student Data Privacy Agreement, InternPick acts as a school official with a legitimate educational interest under FERPA (34 CFR § 99.31(a)(1)), under your school’s direct control. We use personally identifiable student information only to run the program features you enable. FERPA does not certify vendors; this agreement defines our role and responsibilities.
02
We do not sell student data or run student ads
InternPick does not sell, rent, or license personal information. We do not use student data for cross-context behavioral advertising. Signed-in staff, students, and business hosts are not sent to Google Analytics.
03
Your school decides who sees a record
You invite staff, students, and business hosts. District A cannot see District B. Business hosts see schedule and hours for assigned placements only. They do not get transcripts, discipline files, or a full student profile unless you and the student explicitly share more.
04
Security you can inspect today
Encryption in transit, U.S. Google Cloud / Firebase hosting, access based on each person’s role, optional multi-factor authentication for administrators, and a record of changes. We do not claim a SOC 2 report we do not have yet.
05
Deletion and incident notice
Schools can request deletion when a program or account ends. If we confirm unauthorized access to, disclosure of, or loss of student data, we notify the school without undue delay and, where feasible, within 72 hours. Your school remains responsible for parent and regulator notices.

A clear commitment to data privacy

Your school controls who is invited and what they can see. Student data is used only to run the program features you enable, under the signed Student Data Privacy Agreement.

A security program you can inspect

Role-based access, encryption in transit, U.S. cloud hosting, admin MFA, and a change log. We do not claim a SOC 2 report we do not have yet.

A partner in school compliance

FERPA-ready as a school official under the DPA. Not FERPA-certified. We help your school meet its obligations. We do not replace your notices, consents, or board policy.

Transparent collection and use

Public inventory of data categories and subprocessors. Optional Google Analytics only on signed-out public pages. Student-facing AI is off until the school turns it on.

Documents for your school’s review

This hub is a school-facing summary. If anything here disagrees with a contract, the contract controls.

Student Data Privacy Agreement. Binding school-official terms
Privacy Policy. What we collect and how we use it
Terms of Use. Platform rules for every user

Loading page…

Five safeguards to review with your school

A school data agreement you can review

When your school accepts the Student Data Privacy Agreement, InternPick acts as a school official with a legitimate educational interest under FERPA (34 CFR § 99.31(a)(1)), under your school’s direct control. We use personally identifiable student information only to run the program features you enable. FERPA does not certify vendors; this agreement defines our role and responsibilities.

We do not sell student data or run student ads

InternPick does not sell, rent, or license personal information. We do not use student data for cross-context behavioral advertising. Signed-in staff, students, and business hosts are not sent to Google Analytics.

Your school decides who sees a record

You invite staff, students, and business hosts. District A cannot see District B. Business hosts see schedule and hours for assigned placements only. They do not get transcripts, discipline files, or a full student profile unless you and the student explicitly share more.

Security you can inspect today

Encryption in transit, U.S. Google Cloud / Firebase hosting, access based on each person’s role, optional multi-factor authentication for administrators, and a record of changes. We do not claim a SOC 2 report we do not have yet.

Deletion and incident notice

Schools can request deletion when a program or account ends. If we confirm unauthorized access to, disclosure of, or loss of student data, we notify the school without undue delay and, where feasible, within 72 hours. Your school remains responsible for parent and regulator notices.