Privacy Policy

1. Introduction

Coastal Haven Partners ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our finance talent network platform connecting candidates, recruiters, and educational institutions.

2. Information We Collect

2.1 Candidate Information

When candidates create profiles, we collect:

• Personal identifiers (name, email address, phone number)
• Educational information (school, major, graduation year, GPA)
• Professional information (work experience, internships, skills)
• Documents (resumes, transcripts, cover letters)
• Career preferences (target industries, firm types, locations)
• Profile status (seeking, signed, alumni)

2.2 Recruiter Information

When recruiters register, we collect:

• Professional contact information (name, work email, phone)
• Employer information (firm name, type, size, location)
• Role and title within the organization
• Recruiting preferences and search history

2.3 School Information

When schools participate, we collect:

• Institution details (name, location, type)
• Career services representative contact information
• Student verification authorizations

2.4 Automatically Collected Information

We automatically collect:

• Device and browser information
• IP address and approximate location
• Usage data (pages visited, features used, time spent)
• Login timestamps and session information

2.5 Discord Integration Information

If you choose to link your Discord account, we collect:

• Discord user ID (a unique numeric identifier)
• Discord username
• Timestamp of when you linked your account

We do not collect your Discord password, private messages, friend lists, or activity in other Discord servers. We only request the minimum permissions necessary to verify your identity and assign your role in our community server.

3. How We Use Your Information

We also use your information to:

• Create and manage your account
• Process recruiter approval applications
• Send service-related communications and updates
• Improve platform functionality and user experience
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Information Sharing and Visibility

4.1 Candidate Profile Visibility

Your candidate profile is visible according to these rules:

• Public (all users): School name, graduation year, major, career interests
• Verified recruiters only: GPA, full name, contact information
• You only: Resume files, transcript documents, account settings

4.2 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4.3 Third-Party Service Providers

We share information with service providers who assist in platform operations:

• Cloud hosting providers (Vercel, Supabase)
• Email delivery services
• Analytics providers
• Payment processors (if applicable)
• Discord (for community features - see section 4.4)

These providers are contractually bound to use your information only for providing services to us.

4.4 Discord Integration

When you link your Discord account and join our community server:

• Your Discord user ID is stored in our database to link your website account to your Discord account
• We assign you a role in our Discord server based on your account type (Candidate, Recruiter, or Career Services)
• Your activity in our Discord server is subject to Discord's own Privacy Policy
• Messages you send in our Discord server may be visible to other verified members and moderators

You can unlink your Discord account at any time from your account settings. This will remove your verified role from the Discord server but will not delete any messages you have sent.

4.5 Legal Requirements

We may disclose information if required by law, court order, or to protect our legal rights, safety, or the safety of others.

5. Data Security

We implement appropriate security measures to protect your information:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Secure authentication with email verification
• Row-level security policies in our database
• Regular security assessments
• Access controls limiting who can view sensitive data
• Recruiter verification before granting candidate access

While we strive to protect your information, no method of transmission over the internet is 100% secure.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services:

• Active accounts: Data retained while account is active
• Inactive candidate accounts: 2 years after last login, then archived
• Deleted accounts: Personal data removed within 30 days; anonymized analytics may be retained
• Recruiter search history: 1 year for platform improvement
• Legal/compliance records: As required by applicable law

7. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Limit how we process your information
• Objection: Object to certain types of processing
• Withdraw consent: Where processing is based on consent

To exercise these rights, contact us at contact@coastalhavenpartners.com.

8. Candidate Control Over Profile

Candidates have control over their visibility:

• Set profile status (Seeking, Not Seeking, Hidden)
• Choose which information is visible to recruiters
• View which recruiters have accessed your profile
• Delete your account and all associated data at any time

9. Cookies and Tracking

We use cookies and similar technologies for:

• Essential cookies: Authentication, security, and core functionality
• Analytics cookies: Understanding how users interact with our platform

We do not use advertising cookies or sell cookie data. You can control cookies through your browser settings.

10. FERPA Compliance (For Schools)

For educational institutions participating in our platform, we understand the importance of FERPA (Family Educational Rights and Privacy Act) compliance. Student information shared through school verification is treated as educational records. Schools maintain control over their students' verification status and can revoke access at any time.

11. International Data Transfers

Our platform is primarily operated in the United States. If you access our services from outside the U.S., your information may be transferred to, stored, and processed in the U.S. where our servers are located. We ensure appropriate safeguards are in place for international transfers.

12. Children's Privacy

Our platform is designed for college students and professionals. We do not knowingly collect information from individuals under 18 years of age. If we become aware that we have collected information from a minor, we will promptly delete it.

13. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising privacy rights

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will post the updated policy on our website with a new "Last Updated" date. Material changes will be communicated to registered users via email. Continued use of the platform after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at contact@coastalhavenpartners.com.