Privacy Policy
Last updated: September 2026
This Privacy Policy describes how FindMyProfessor ("we", "us", or "our") collects, uses, and handles information when you use the FindMyProfessor platform (findmyprofessor.online). Please read it carefully. By using FindMyProfessor you acknowledge this policy.
1. Account Authentication
You can sign in to FindMyProfessor using your Google account through Supabase Auth. When you sign in with Google, we receive authentication information — including your Google account email address — sufficient to create and maintain your FindMyProfessor account and session. We do not receive your Google account password.
2. CV and Resume Data
You may upload a CV or resume to FindMyProfessor. Your uploaded CV is processed server-side to extract relevant profile information used for professor and research matching. This extracted information may include:
- Name and contact information (if present in your CV)
- Education history
- Research interests and areas
- Skills and technical abilities
- Projects, publications, or research experience
- Work experience
Your CV file and extracted profile data are stored in association with your account and are used to provide the matching and outreach features of FindMyProfessor. We do not sell or share your CV data with third parties for marketing purposes.
3. Professor and Research Matching
Information extracted from your CV and profile is used to identify potentially relevant professors, labs, research areas, and opportunities within FindMyProfessor's database. Matching is performed server-side. Professor and research information displayed in FindMyProfessor is sourced from publicly available academic information.
4. Email Drafts and Outreach History
FindMyProfessor can generate personalized outreach email drafts based on your profile, a selected professor, relevant research information, and a selected opportunity where applicable. These drafts may be stored as part of your outreach history within your account so you can review and track them.
Draft email content is associated with your account and is not shared with third parties.
5. Gmail Integration
You may optionally connect your Gmail account to FindMyProfessor. The Gmail integration uses Google's Gmail API with the following OAuth scope:
https://www.googleapis.com/auth/gmail.send
This scope grants FindMyProfessor permission to send email on your behalf through your connected Gmail account. Specifically:
- Email sending is always explicit. FindMyProfessor only sends an email when you review the draft and actively choose to send it. We do not send emails automatically or in bulk.
-
We do not read your Gmail inbox. The
gmail.sendscope does not grant access to your inbox, existing messages, contacts, or any other Gmail data. - Token storage. Gmail OAuth tokens (access token and refresh token) are stored server-side and encrypted at rest. They are never exposed to the browser or third parties.
- Revoking access. You can disconnect Gmail from within FindMyProfessor at any time. You can also revoke access directly from your Google Account permissions page.
6. Third-Party Services
FindMyProfessor currently uses the following third-party services:
- Supabase — for authentication, session management, and database storage. See Supabase's Privacy Policy.
- Google APIs — for Google Sign-In (via Supabase Auth) and Gmail sending. See Google's Privacy Policy.
We do not use advertising networks, analytics tracking pixels, or sell data to third parties.
7. Data Security
We take reasonable steps to protect your information, including:
- Authentication and session controls to restrict access to your account data
- Server-side handling of sensitive OAuth tokens — tokens are never sent to the browser
- Encryption of stored Gmail OAuth tokens at rest
- Access controls intended to keep each user's data separated from others
No system can guarantee absolute security. We encourage you to use a strong password for your Google account and to revoke access you no longer need.
8. Data Retention and Deletion
Your account data, CV files, extracted profile, email drafts, and Gmail connection are retained while your account is active. If you would like your data deleted, please contact us at the email below. We will process deletion requests in a reasonable time frame.
You can disconnect Gmail at any time from within the application without deleting your account.
9. Children's Privacy
FindMyProfessor is intended for use by students and adults. We do not knowingly collect personal information from children under the age of 13. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly remove it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, the updated version will be posted on this page with a revised "Last updated" date. We encourage you to review this page periodically.
11. Contact
If you have questions about this Privacy Policy or wish to make a privacy or data deletion request, please contact: