Privacy policy
What we collect, why we collect it, and what you can do about it. Last updated April 24, 2026.
The short version
PhdFit exists to help you find PhD advisors who actually fit your background. We collect the minimum signal we need to do that — your résumé, your stated goals, and the matches and outreach you produce inside the workspace. We do not sell your data. You can export or delete it at any time.
What we collect
- Account data: email, name, and the identity provider you signed in with (Supabase Auth — Google, email magic link, or password).
- Profile data: the résumé you upload and the structured profile our Candidate Analyst derives from it — research interests, methods, publications.
- Workspace data: your conversations with the agents, your shortlists, your outreach drafts, and your meeting-prep notes.
- Usage data: anonymous request logs and error traces used to keep the service running. Not sold, not cross-referenced with other services.
How we use it
Your résumé and profile are the raw material for the six specialist agents — they read it to rank faculty, write explanations, and draft outreach. We only send the fields a given agent needs for the task at hand, and we do not use your content to train third-party models.
Subprocessors
We use Supabase (database, authentication, file storage), Anthropic, OpenAI, and Zhipu (LLM inference for the agent pipeline). Each subprocessor processes only the data needed for a specific task and is bound by a data-processing agreement.
Your rights
You can export every file, message, match, and draft you have produced inside the workspace. You can also delete your account and all associated data. Both actions are self-serve in settings or by emailing hello@phdfit.com.
Contact
Questions about this policy or how we handle your data? Write to hello@phdfit.com and we will reply within two business days.