1. Scope

This notice applies to the WSMM Recruiting Hub product at engine.wallstmastermind.com, including outreach, interview practice, resources, and jobs. Wall Street Mastermind LLC ("WSMM," "we," "us," or "our") operates the service. The broader WSMM website has a separate privacy policy.

2. Information we collect

Account and profile

We collect your name, email address, school, class year, recruiting goals, target firms, location preferences, professional story, writing sample, LinkedIn URL, booking link, phone number if provided, timezone, and account settings.

Mailbox connection

When you connect Google or Microsoft, we store authorization tokens and the connected account identity. We create drafts, send a selected draft after you confirm its recipient, and search your mailbox for messages exchanged with the contacts you have added, to determine whether a message was sent and whether they replied. The search matches on those contacts' email addresses only, covers spam and trash because replies land there, and is not limited to messages this service created. No message that does not match a contact on your list is opened.

When you ask the service to draft a response to a reply, the text of that reply is sent to Anthropic, our AI provider, so the draft can answer what was actually said. This happens only for messages from a contact you added, and only when you ask for a response to be drafted. We do not read, index, or send any other mail. Anthropic does not use it to train models. Drafting your initial outreach uses only your profile and the contact's professional details, and no mailbox content at all.

Contacts and outreach

We store the professional contacts you add or import, source links, work email addresses, verification results, research notes, generated drafts, send status, follow-up dates, and reply status. This may include information about people who do not use WSMM Recruiting Hub.

LinkedIn capture

The browser extension captures the URL, page title, and visible page text only when you select Capture for WSMM. We use that material to research a contact and prepare your outreach.

Interview practice

We store practice progress and scores that you choose to sync to your account. Behavioral recorded media files remain in browser memory and are not uploaded to WSMM. When detailed automated feedback is available, we send the answer transcript, question, and coaching criteria to the service that generates that feedback. We do not store the answer transcript in your WSMM Recruiting Hub account database through this grading feature.

Live transcription uses your browser's speech-recognition feature when available. Depending on your browser and device, the browser provider may process speech remotely under its own terms and privacy practices. You can use text-only practice instead.

Technical data

We use essential cookies for sign-in, OAuth security, and sessions. Our hosting and security providers may process IP addresses, request timestamps, browser details, job-search filters, and diagnostic logs. We do not place advertising pixels in WSMM Recruiting Hub.

3. How we use information

• Authenticate you and operate your account.
• Find professional contacts at firms you select and verify work email addresses.
• Generate drafts from your profile, instructions, contact data, and research.
• Create, send, and reconcile mailbox drafts at your direction.
• Score practice answers, provide coaching feedback, and sync practice progress.
• Show student resources and current job listings.
• Track follow-ups, replies, product usage, reliability, abuse, and security.
• Respond to support requests and comply with legal obligations.

4. Google and Microsoft data

Google access includes identity, Gmail compose, Gmail read-only, Google Calendar free/busy, and permission to read and create events on Google calendars you own. Microsoft access includes identity, Mail.ReadWrite, Mail.Send, and Calendars.ReadWrite permissions. We request these permissions to provide the mailbox and scheduling features described above.

Calendar access is used only to suggest two times you are actually free when an email offers a banker a window, and to put a call on your calendar once one is agreed. We request Google's free/busy permission, which returns opaque busy blocks and nothing else, so the service learns when you are busy and never what you are doing. Calendar event access reads today's event titles and attendees on your own calendar to recognise calls with people on your list. It also creates a 30-minute calendar event when you record a booked call and provide a time. Nothing about the calendar is required: with no calendar connected, the service falls back to sensible windows computed from the working week.

We do not sell mailbox data, use it for advertising, use it to determine creditworthiness, or use it to train a general-purpose AI model. We do not allow a person to read mailbox data except with your specific consent for support, when required for security, or when required by law.

Our use and transfer of information received from Google Workspace APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

5. Service providers and sharing

We share information only as needed to operate the service. Current provider categories include Oracle Cloud for hosting, Cloudflare for network security, Google and Microsoft for connected mailboxes, Anthropic for draft generation and behavioral-practice grading, Apollo for professional contact discovery, Hunter for work-email verification, GitHub Pages for the jobs feed, CareerFlow for linked resources and jobs, and an email provider for service notices.

When you open a linked resource or job posting, the destination provider receives the information normally sent with a web request, such as your IP address and browser details. Its terms and privacy notice apply after you leave the product.

Anthropic receives the profile, contact, and research text needed to create a draft. For behavioral grading, Anthropic receives the answer transcript, question, coaching example, and scoring instructions. Beyond the reply text described above, WSMM Recruiting Hub does not send mailbox contents or recorded media files to Anthropic. Apollo receives selected firm, role, location, and contact identifiers. Hunter receives a proposed work email address for verification.

We may disclose information when required by law, to investigate abuse or security incidents, or as part of a merger, acquisition, financing, or sale of assets subject to applicable law and provider restrictions.

6. No sale or advertising use

WSMM does not sell or rent WSMM Recruiting Hub account data, mailbox data, outreach records, or imported contact records. We do not share this information for cross-context behavioral advertising.

7. Retention and deletion

OAuth state and pending sign-in records expire after 15 minutes. Sessions expire after 90 days. Extension credentials expire after 180 days. We keep account, contact, outreach, synced practice progress, and acceptance records while your account is active and as needed for security, dispute resolution, and legal compliance. Behavioral recorded media stays in browser memory; closing or leaving the practice session removes access to that media.

Disconnecting Google or Microsoft removes the stored mailbox connection. To request access, correction, export, or deletion, email [email protected]. We may verify your identity before completing a request. Some records may remain where law or a valid security need requires retention.

8. Security and incidents

We use encrypted network connections, restricted server access, private credential storage, scoped provider permissions, and account-level access controls. No online service can guarantee that unauthorized access, loss, or disclosure will never occur. We will investigate suspected incidents and provide notice when applicable law requires it.

9. Your choices and rights

You can disconnect your mailbox, edit your profile, export your outreach tracker, and use text-only behavioral practice in the product. You may also ask us to access, correct, or delete information. We honor additional privacy rights required by the law that applies to you and will not discriminate against you for exercising them.

10. Location and age

WSMM Recruiting Hub operates in the United States. If you use it elsewhere, your information will be transferred to and processed in the United States. The service is not directed to children under 13.

11. Changes

We may update this notice as the beta changes. We will update the date above and require a new acknowledgment before using information for a materially different purpose.

12. Contact