Privacy
Last updated November 9, 2026.
1. What we collect
Your email address, and what you choose to add: name, school, class year, major, GPA band, LinkedIn URL, skills, experiences, and the industries you pick or rank.
What you do in cycle: programs you track and their stage on your board, drill and quiz results, mock interview answers, answers and stories you save, contacts and notes you log, and clubs you join.
Basic records we need to run the service: sign-in links sent, sessions, emails we sent you, and when you used a feature (for daily limits).
2. Files you upload
A resume, tracker, contact list, or screenshot you upload is read to fill in the form or the review, then discarded. We keep what you confirm (the rows you add, the review summary), not the file.
When a file is read by a language model, it is sent to the model provider we use for that request and is not used by us to train anything.
3. Connections you turn on
Apollo: your own API key, used only for searches and reveals you start or the weekly run you switch on. Each reveal spends your Apollo credit.
Gmail: if you connect it, we read message headers only (who, when, subject) to log notes and replies with people already in your contacts. We never read message bodies and never send email from your account. Disconnecting deletes the access.
Calendar feed and phone alerts: a private feed link and your device's push subscription, both deletable in Settings.
4. People at firms
Signed-in students can see analysts, associates, and vice presidents at the firms they follow, so they can find alumni to write to. That list comes from a licensed people-data provider, not from scraping any site. For each person it holds a name, title, team, US office city, schools and graduation years, and a LinkedIn URL when the provider has one. A work email is fetched only when a student saves the person, then kept for the next student who saves them.
These names are never shown on public pages, never indexed by search engines, and never sold. The list is refreshed about every three months and people who leave a firm drop off.
If you are on the list and want off, use the form at /privacy/people or email us. You are removed at once and every later refresh skips you. A student who already saved you keeps their own note of the name, but the email and LinkedIn URL we supplied are removed from it.
5. What other students see
Nothing by default. In a club, members see what you chose to share there (tracked and applied, every stage, or nothing), with your first name and last initial. Never your email.
Stage timing and outcomes are shown only as counts and medians across at least five students, never tied to you. You can turn off stage sharing in Settings.
6. Who processes data for us
Hosting and database (Amazon Web Services), email delivery (Amazon SES), payments if you ever buy a plan (Stripe), firm logos (logo.dev, which receives the firm's domain only), the language model provider configured for grading, drafting, and reading uploads, and the people-data provider behind the list of people at firms when it is turned on. We do not sell your data and do not run advertising or third party analytics.
7. Email
We email you when a program you track opens or closes, a Monday plan if you track something, and messages you ask for. Every email has a one click unsubscribe.
8. Your choices
Settings, Your data lets you download everything we hold about you as one file, or delete your account. Deletion removes your account and everything tied to it at once.
9. Security
Connections are encrypted, sessions use hashed tokens, and your Apollo key and Gmail access are encrypted at rest. No system is perfect; tell us if you find a problem.
10. Age
Waddle Street is for college students. It is not meant for anyone under 16.
Questions: contact@waddlestreet.com