Privacy Policy

1. Who we are

Corresponda (“we”, “us”) provides an AI-assisted tool that helps PhD and Postdoc applicants find research supervisors. This policy explains what personal data we collect, why, and your rights over it.

2. Data we collect

• Account data: your name, email address, and target degree level, provided at registration.
• Authentication data: a securely hashed password and session tokens.
• Search data: the research fields, keywords, and countries you submit, and the results we generate for you.
• CV data (paid plans): the CV fields you fill in — your name, position, institution, research interests, skills, experience, publications and projects. If you import a CV, the PDF is read in memory to fill those fields and is never stored: we keep only the fields you review and save, not the document.
• Documents we generate for you (paid plans): the cold emails and statements of purpose you create, and the details you enter for each one, saved to your account so you can come back to them.
• Outreach tracker: the professors you add, which includes their name, institution, a public email address where one is available, and anything you write in your own notes and follow-up dates.
• Usage data: counts and timestamps of your searches, used to apply your plan's limits and keep the service running.
• Support tickets: what you write to us, our replies, and — so we can reproduce a problem without asking you to describe your setup — the page you were on, your plan, the version of the app you were running and your browser's identifier. Nothing is read from other pages or at other times. Deleting a ticket hides it from your account; we keep our copy as a record of what went wrong.
• Payment data (future): when paid plans launch, payments are processed by a third-party provider; we do not store full card details.

3. How we use your data

To operate your account, run and store your searches, write the documents you ask for from your CV and the details you provide, enforce plan limits, send transactional emails (verification and password reset), prevent abuse, and improve the service. We do not sell your personal data, and we do not send the emails you draft — you send those yourself, from your own mailbox.

4. Third-party services

To provide the service we share limited data with:

• a third-party AI provider, which receives your search parameters and, when you generate a document or ask for a suggestion, the CV fields and the details you entered for it. If you import a CV, the text read from that PDF is sent for the one request that fills the form, and nothing from it is kept by us afterwards;
• a research publication database, which receives the research topics and countries you search — never your name, your email address or your CV;
• an email provider, which receives your email address to send verification, password-reset and follow-up reminder messages;
• and, in future, a payment processor for subscriptions.

Each processes data under its own terms.

5. Data retention

We keep your account, search history, saved documents and tracker while your account is active. You can delete your CV yourself at any time from the CV page, and delete saved documents from your drafts. Unverified accounts are deleted automatically after 7 days. You may request deletion of your account and everything associated with it at any time.

6. Your rights

You may access, correct, export, or delete your personal data. Contact us to exercise these rights. Where applicable law (such as the GDPR) grants additional rights, we honor them.

7. Contact

Questions about this policy? Contact us at the support email listed on our website.