Privacy Policy

InterviewAI is operated by prepair.app, Ukraine ("we", "us", "our"). This policy explains what personal data we collect, why, and how we protect it.

Contact: privacy@prepair.app

Account data — email address, full name, and hashed password provided at registration.

Interview data — job role, difficulty level, your text answers, AI-generated questions and feedback, and your score. This data is stored so you can review your history.

Usage data — pages visited, interview count, selected language/locale. Used to improve the Service.

Technical data — IP address, browser type, and timestamps, collected automatically when you use the Service.

We do not collect payment card data — payments are processed by Paddle.com (our Merchant of Record) who has its own privacy policy.

• To provide and improve the Service (process interviews, generate AI feedback).
• To authenticate you and secure your account.
• To send transactional emails (account confirmation, password reset).
• To send product updates and tips — you can unsubscribe at any time.
• To detect and prevent abuse or fraud.

We do not sell your personal data to third parties.

If you are in the European Economic Area (EEA), we process your data under the following bases:

• Contract performance — to deliver the Service you signed up for.
• Legitimate interests — to improve the product, prevent fraud, and send relevant communications.
• Consent — for optional marketing emails (you can withdraw consent at any time).

Your data is stored with the following trusted providers:

• Supabase (database and authentication) — servers in the EU (AWS eu-central-1 / eu-west-1).
• Vercel (hosting) — EU servers where possible.
• OpenAI / Anthropic — AI processing. Your interview answers are sent to their APIs to generate questions and feedback. They do not use your data to train their models under current API terms.
• Resend (transactional email) — processes your email address to deliver emails.

We retain your account and interview data for as long as your account is active. If you delete your account, your personal data is permanently deleted within 30 days. Anonymized usage statistics may be retained longer.

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — update inaccurate or incomplete data.
• Deletion — ask us to delete your data ("right to be forgotten").
• Portability — receive your data in a machine-readable format.
• Object — object to processing based on legitimate interests.
• Withdraw consent — for any processing based on consent, at any time.

To exercise these rights, email privacy@prepair.app. We will respond within 30 days.

We use essential cookies for authentication (session token) and locale preference. We do not use tracking or advertising cookies. You can clear cookies in your browser settings, but this will log you out.

We use industry-standard measures: HTTPS encryption in transit, bcrypt-hashed passwords, and row-level security in the database. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

The Service is not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it promptly.

We may update this Privacy Policy. We will notify you by email or in-app notice before material changes take effect. The "Effective date" at the top will always reflect the latest version.

Privacy questions or requests: privacy@prepair.app

If you are in the EEA and believe we have not handled your data lawfully, you have the right to lodge a complaint with your local data protection authority.