Privacy Policy

Welcome

OCI Tracker helps law students manage their On-Campus Interview applications. This privacy policy explains what information we collect, how we use it, and how we protect it. We've tried to keep this readable and jargon-free—you shouldn't need a law degree to understand a privacy policy (even if you're getting one).

What We Collect

Account Information

When you sign in with Google, we receive your email address, name, and profile photo. We use Google OAuth for authentication, which means we never see or store your Google password.

Profile Information

You may choose to share details about your academic background, including your law school, GPA, class rank percentile, graduation year, and undergraduate institution. You can also add your target cities, practice area interests, and Georgetown affiliations such as journals, clinics, or student organizations. All profile information is optional and provided at your discretion.

Application Data

The core of OCI Tracker is helping you organize your applications. This includes the firms you're tracking, application stages and dates, personal notes, and networking contact names. This information is entirely user-generated and visible only to you.

Alumni Data

OCI Tracker includes a database of approximately 4,500 attorney profiles to help you identify potential connections at firms. This information is sourced exclusively from public law firm websites and includes names, positions, education history, practice areas, and publicly available biographies. We do not collect private information about these attorneys—everything comes from their firms' public directories.

How We Use Your Information

We use your data to provide and improve OCI Tracker. Specifically, we use account information to authenticate you and maintain your session. Profile information helps us personalize your experience and surface relevant alumni connections. Application data is stored so you can track your progress across the recruiting cycle.

We do not sell your data. We do not share your individual information with third parties. In the future, we may publish aggregate, anonymized statistics—for example, trends in firm application deadlines or overall application patterns across users—but this will never include information that could identify you.

Third-Party Services

OCI Tracker relies on a few trusted services to operate:

• Supabase hosts our database and handles authentication infrastructure.
• Vercel hosts the website itself.
• Google provides OAuth authentication so you can sign in securely without creating another password.

We may add analytics tools in the future, such as Vercel Analytics or Google Analytics, to understand how people use the site and where we can improve. If we do, we'll update this policy.

AI-Powered Features (Optional)

OCI Tracker offers optional AI features to make data entry easier. These are entirely optional—you can always enter information manually instead.

• Resume Parsing: If you upload your resume, we use Google Gemini to extract your practice interests, Georgetown affiliations, and background information. Your resume is processed in real-time and is not stored on our servers or used to train AI models.
• Spreadsheet Import: If you import your application tracker, we use OpenAI to intelligently parse your spreadsheet columns and convert them to our format. Your spreadsheet data is processed in real-time and is not stored or used for AI training.

Both AI providers have their own privacy policies. We send only the minimum data needed for each feature, and we have no control over their internal data handling beyond what their APIs provide.

How We Protect Your Data

Your data is stored in Supabase, which maintains SOC 2 Type II compliance—an industry-standard security certification. We implement row-level security, which means the database itself enforces that you can only access your own data. All connections to OCI Tracker use HTTPS encryption.

Deleting Your Account

If you'd like to delete your account and all associated data, submit a request through our contact form. We'll process deletion requests promptly and remove all your information from our systems.

Changes to This Policy

If we make significant changes to this privacy policy, we'll notify users through the site. Minor clarifications or updates may be made without notice, but the "Last Updated" date at the top will always reflect when the policy was most recently revised.