Legal

Privacy notice

This notice explains what personal data Forsa collects, why, who it is shared with, how long it is kept, and the rights interns and hosts have over their data.

The English version of this document is the controlling version.

This notice is effective from 1 September 2026. We collect only the account, profile, application and placement data needed to match interns with verified remote projects and to support supervision. We share intern data with a host organization only after an application is submitted to that host, and with a university only in the aggregate form set out in a signed institutional agreement. You can request access to, correction of, or deletion of your data at privacy@forsaintern.com, and we answer within 30 days.

What we collect

Account data: name, email, role, authentication metadata.
Intern profile: education, skills, availability, city, career interests, CV.
Host data: organization details, verification evidence, supervisor contacts.
Placement activity: applications, check-ins, submissions, feedback, completion records.
Support and safeguarding cases, including the outcome of any investigation.

Why we process it

To operate the marketplace: matching, applications, selection and placements.
To verify host organizations and protect interns from exploitation.
To produce evidence records and verification pages you choose to share.
To report cohort-level outcomes to institutions and sponsors, in aggregate.

Who we share it with

Host organizations receive only what is needed for selection and supervision.
Institutions receive aggregate cohort reporting unless you consent to more.
Service providers who host our infrastructure, under contract.

We do not sell personal data, and we do not use protected characteristics in matching or ranking.

Sensitive documents

CVs and identity documents are stored in restricted storage. They are not publicly readable and are accessible only to you, to reviewers acting on a specific case, and to the host of a placement you have applied to where you consented to that sharing.

Retention

Account and placement records: kept while your account is active.
Completion and verification records: retained so employers can validate them.
Uploaded documents: deleted on request, subject to any legal retention duty.

Your rights

Access, correct or delete your personal data.
Withdraw a consent you previously gave, including data sharing with an institution.
Object to specific processing or ask us to restrict it.
Complain to the relevant data protection authority.

To exercise any of these, contact us through the contact page.