FellowFinder stores only what helps you plan.

Effective: Private beta. Operator: FellowFinder. Privacy questions: fellowfinder@tentwolabs.com.

Funding and job records are factual summaries linked to official sources. Your profile, saved applications, tracked jobs, notes, checklist progress, and reminders are user-owned data.

What stays on your device

The web app caches relevant opportunity metadata and every item you save or track. This lets your workspace reopen quickly during temporary connectivity loss. Signing out clears private profile, application, task, and queued-sync data from that browser; public catalog caches may remain.

What syncs when cloud accounts are connected

Your profile—including optional career, eligibility, and work-preference fields—and application workspace sync to your account so the website and iOS app can share progress. PostgreSQL row-level security restricts each user to their own rows.

Beta registration and operational records

If you request beta access, FellowFinder stores your email address, audience type, selected product interests, consent time, and referral source. Short-lived salted request hashes protect the form from abuse; raw network addresses are not stored by that control. Delivery audit records contain operational status rather than message content.

Community and feedback

Community posts, replies, and your chosen display name are visible to signed-in members. Your email and academic profile are not part of that identity. Community advice is not verified catalog information. Reports are visible to their submitter and moderators. Feedback tickets and replies are private to their submitter and trusted support staff. These features require a live connection and are not stored in the offline cache.

You can delete your own posts, replies, and feedback, export participation data from Settings, or delete your account. Account deletion removes your posts and their discussion threads, replies, feedback, follows, and blocks. Moderation decisions retain a reason and timestamp, with deleted account identifiers removed.

Custom searches

Your search history and weekly watches are private to your account. Search workers use only the criteria and public URLs you submit, not your full profile, email, or application notes. Similar searches can reuse collection work without revealing who requested it. Verified public opportunities may be added to the shared catalog. Submitted pages remain unverified until checked. Do not submit sensitive personal information or private URLs.

One-time search history expires after 30 days; weekly watches remain until removed. Export or remove searches from Custom search. Account deletion removes your search subscriptions; unreferenced collection jobs are removed by worker maintenance. Public opportunity records may remain. Whole-web search is not connected in this release.

Retention

Account workspace data remains until you delete the account. Notification delivery logs are automatically removed after 180 days, ingestion and job-run logs after 90 days, and rate-limit buckets after two days. Beta registration data remains only for beta access and relevant product communication, subject to withdrawal through the contact above.

Your controls

You can omit sensitive fields, change notification preferences, export your workspace as JSON or CSV, sign out and clear a device, or permanently delete your account and synced data from Settings.

FellowFinder does not ask users to store recommendation letters, government identifiers, payment details, protected health information, or confidential application documents in this release.