Privacy notice

This notice is a draft. The legal entity, its address and the data protection contact are not filled in yet, and they must be before the service is sold.

Last updated: 18 September 2026

Who we are

[COMPANY NAME], [REGISTERED ADDRESS], is the controller of the personal data described here. For the content our customers put into the service, they are the controller and we are their processor.

What we hold about you, our customer

Data	Why	Kept for
Your email address	To sign you in and to reach you about the account	While the account exists
Sign-in codes and sessions	To let you in and keep you in	Codes 10 minutes, sessions at most 30 days
Your IP address, in a rate-limit counter	To stop abuse of the sign-in and rendering routes	24 hours
Billing records	To take payment and meet accounting obligations	As long as the law requires
Your questions, slides and notes	To run your interviews	90 days after the interview, then deleted
The candidate label you type	So you can tell one interview from another	90 days, with the interview

What we hold about the candidate

Only the label the interviewer types. We ask interviewers to use a reference rather than a name. We do not record the call, we do not transcribe anything, we do not process audio or video, we store no CV, and we produce no score or assessment of any person.

There is no automated decision-making in this product. Whether a candidate is reading from an AI is a judgement the interviewer makes.

Card details

Payments are handled by Stripe. Card details go to Stripe and never reach us. We keep the Stripe customer and subscription identifiers so we know what you are on.

Your questions and our testing

We never send your questions to a third-party AI model. The daily readiness test uses a fixed set of synthetic questions written for that purpose, never customer content.

Where it lives

The service runs on Cloudflare. The database is Cloudflare D1 and rendered images are in Cloudflare R2. Backups of the database are written twice a day to R2 and kept for seven days. Sub-processors: Cloudflare (hosting, database, storage, the vision models used for readiness testing) and Stripe (payments).

Cookies

One cookie, which holds your session. It is set when you sign in and cleared when you sign out. We have no analytics, no advertising and no third-party tracking, so there is no cookie banner to click.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Write to [DATA PROTECTION CONTACT]. If a candidate asks you to delete an interview that mentions them, delete it in the console; it is removed along with its slides and images, and it will drop out of the daily backups within seven days.

If you think we have handled your data badly, tell us first, and you can complain to your local supervisory authority.