Built to protect your data.

Data Storage

All data is stored in Supabase (Postgres), hosted on AWS infrastructure in the United States. Data at rest is encrypted using AES-256. Database rows are access-controlled by row-level security (RLS) policies, meaning your profile data is only readable by you and authorized system processes. Mentor profiles that are marked public are intentionally visible; all other data is private by default.

Authentication

Authentication is handled entirely by Supabase Auth — Circuit never stores raw passwords. Login uses secure email magic links or OAuth (Google). Sessions are managed via short-lived JWTs and HTTP-only cookies, preventing XSS-based session theft. All auth requests happen over HTTPS with TLS 1.2+. We do not use third-party tracking cookies or analytics SDKs that read auth state.

Data Privacy

We collect only what is necessary for matching. Your email is never displayed on your public profile and is only shared with a mentor after you send a connection request — and only to the mentor you chose. We do not sell, rent, or share your data with advertisers or third parties. Profile embeddings used for matching are numerical vectors that cannot be reverse-engineered back to your original text. You can delete your account and all associated data at any time by contacting us.

Institutional Deployment

For law school and university partnerships, Circuit supports institution-scoped deployments where student data stays within the agreed data boundary. Institutional admins do not have access to individual mentee message content or connection request text. Aggregate anonymized cohort data (e.g., number of connections, vertical distribution) can be made available for program assessment upon request under a data processing agreement.