Privacy Policy

1. Interpretation and definitions

Words with an initial capital letter have the meanings set out below, whether they appear in the singular or the plural.

• "Company" ("we", "us", "our") means Interview Helper, ul. Wincentego Rzymowskiego 34, 02-697 Warszawa, Poland.
• "Service" means the Interview Helper website, web dashboard and desktop applications, taken together.
• "Personal information" means any information relating to an identified or identifiable person.
• "Your Content" means the CVs, documents and other material you upload to the Service.
• "Usage data" means data collected automatically while the Service runs, such as app version, device type and diagnostic logs.
• "Cookies" are small files placed on your device by a website, which can store settings and browsing information.
• "You" means the individual using the Service.

2. Who we are

Interview Helper is operated by Interview Helper, ul. Wincentego Rzymowskiego 34, 02-697 Warszawa, Poland. If you are located in the European Economic Area (EEA) or the United Kingdom, Interview Helper is the data controller responsible for your personal information.

For any privacy questions, or to exercise your rights, contact us at aiinterviewhelper@gmail.com.

Paid access to the Service is sold by ИП Табунов, ИНН 773379585100, which is the merchant of record for your purchase. The Seller processes your payment data as an independent controller for that purpose; Interview Helper remains the controller for your account and the content you upload.

3. Information we collect

We collect the following categories of information:

• Account information — your name, email address, password (stored only as a salted hash, never in plain text), and, if provided, a profile photo or avatar.
• Sign-in and authentication data — when you sign in with Google, we receive your basic profile and verified email address from Google. We also store session and refresh tokens (as hashes) and, for security, the IP address and browser/device (user-agent) used to sign in.
• Onboarding answers — the optional setup questionnaire responses you provide, such as your profession area, experience level, and how long you have been job hunting.
• Documents you upload — CVs, résumés, and supporting documents you add to your private knowledge base, including their contents, file name, type, and size.
• Practice session content — when you run a practice session in the desktop app, the Service processes the session audio, transcribed practice questions, relevant on-screen content you choose to share with it, and the AI-generated practice answers shown to you.
• Payment information — paid access is sold by ИП Табунов (ИНН 773379585100) and charged on a payment page hosted by Stripe. Your card details are entered there and never reach our servers; we do not receive your card number, and we learn that a payment was made from the receipt confirmation rather than from your card data.
• Usage and technical data — basic logs, device and app version information, and diagnostic data needed to operate and secure the Service.
• Advertising and analytics data — the Google tag on our website sets Google cookies and identifiers and records the pages you visit and a small number of actions you take (for example signing up, uploading a CV, or opening a plan). It also sends the onboarding answers you type — your profession area, experience level, and how long you have been job hunting — to Google as parameters of those events. Two milestones in the desktop app — your first sign-in there and finishing its first-run guide — are reported to Google by our server under the same identifier, and only if the Google tag on our website was allowed its cookies. See section 12.
• Website usage recordings — unless you reject it in our cookie banner, Microsoft Clarity on our website records how you use it: the pages you view, where you click or tap, how far you scroll and how you move the mouse, along with your device, browser and approximate location. Anything you type into a form field is masked in your browser and never sent. See section 12.

4. How we use your information

We use your information to:

• Provide, operate, and maintain the Service, including generating suggested practice answers tailored to your background.
• Create and manage your account and authenticate your sign-ins.
• Personalize answers using the documents and context you choose to upload.
• Send essential service emails, such as email verification and password resets.
• Process payments and manage subscriptions.
• Maintain security, prevent abuse and fraud, and diagnose problems.
• Comply with our legal obligations and enforce our Terms of Use.

5. How AI is used to generate answers

The core feature of the Service is generating suggested practice answers. To do this, interview questions, the context of your session, and information from the documents you upload may be processed by us and by the AI providers acting on our behalf: Cerebras (answer generation), Deepgram (speech-to-text), and Google (Gemini, for understanding on-screen content you choose to share).

We do not use the content of your practice sessions or uploaded documents to train publicly available AI models. AI providers act as our processors and are contractually limited to processing your data only to provide this feature to you.

6. Legal bases for processing (EEA / UK)

If you are in the EEA or UK, we rely on the following legal bases under the GDPR:

• Performance of a contract — to provide the Service you sign up for.
• Consent — for optional features such as uploading documents or answering onboarding questions; you can withdraw consent at any time.
• Legitimate interests — to secure the Service, prevent abuse, and improve reliability, balanced against your rights.
• Legal obligation — where processing is required to comply with the law.
• Consent — for the optional cookies of Microsoft Clarity and the Google tag described in section 12, which you accept or reject in our cookie banner; you can change your choice at any time under "Cookie settings" at the bottom of our home page.

7. How we share your information

We do not sell your personal information. We share it only with service providers ("subprocessors") who help us run the Service, under contracts that require them to protect it. These include:

• Hosting and database providers that run the Service and store your account data.
• S3-compatible object storage, where your uploaded CVs and documents are kept.
• Cerebras — generation of suggested practice answers.
• Google — Gemini for understanding on-screen content you share, Google Sign-In when you choose it, and Google Ads for advertising measurement (see section 12).
• Microsoft — Clarity, for session replays and heatmaps of how our website is used (see section 12).
• Deepgram — speech-to-text transcription.
• Resend — delivery of verification, password-reset and account emails.
• Stripe and the Seller (ИП Табунов) — processing your payment and issuing your receipt when you buy paid access.

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets.

8. Disclosure for legal and business reasons

Besides the providers listed above, we may disclose your personal information in these situations:

• Business transfers — if we are involved in a merger, acquisition or sale of assets, your information may be transferred. We will give notice before it becomes subject to a different privacy policy.
• Law enforcement — where we are required by law to do so, or in response to a valid request from a public authority such as a court or a government agency.
• Other legal requirements — where we believe in good faith that disclosure is necessary to comply with a legal obligation, to protect or defend our rights or property, to prevent or investigate possible wrongdoing connected with the Service, to protect the personal safety of users or the public, or to protect against legal liability.

9. Data retention

We keep your personal information for as long as your account is active or as needed to provide the Service. Uploaded documents are kept until you delete them or close your account. Security logs and refresh-token records are kept for a limited period and then deleted or anonymized. When you delete your account, we remove your associated data as described below, except where we must retain limited information to comply with legal obligations.

Practice session content is handled differently, and deliberately so. Session audio is held in memory only while it is being transcribed and is never written to disk or to our database. On-screen content you choose to share is sent with the request and is not stored. Transcribed questions and the AI answers shown to you are not saved to your account at all — once a session ends, nothing of what was said or suggested remains on our servers.

10. Your rights and choices

Depending on where you live, you may have the right to access, correct, export, restrict, or delete your personal information, and to object to certain processing. You can exercise many of these directly in the app:

• Update your profile and manage uploaded CVs and documents from your dashboard.
• Delete any uploaded document or CV at any time.
• Permanently delete your entire account from Profile → Delete account. This cascades and removes your account, sign-in identities, sessions, onboarding answers, CVs, and documents.

To make any other request, contact us at aiinterviewhelper@gmail.com. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

11. US state privacy rights, including California

If you live in California or another US state with a comprehensive privacy law, you have additional rights over the personal information we hold about you.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising as those terms are defined by the California Consumer Privacy Act (CCPA/CPRA). We have not sold personal information in the previous twelve months, and we do not knowingly sell the personal information of anyone under 16. Your rights include:

• the right to know what personal information we collect, where it comes from, why we collect it and who we share it with;
• the right to a copy of the specific pieces of personal information we hold about you;
• the right to have your personal information deleted, subject to the exceptions where we must keep it;
• the right to have inaccurate personal information corrected;
• the right not to be discriminated against for exercising any of these rights — we will not deny you the Service, charge you a different price, or give you a lower quality of service.

To exercise any of these rights, write to aiinterviewhelper@gmail.com from the address registered to your account. We verify that a request comes from you before acting on it, and we respond within the period the law allows. Under California's "Shine the Light" law you may also ask once a year, free of charge, about disclosures of personal information to third parties for their own direct marketing purposes; we make no such disclosures.

12. Cookies and similar technologies

We use a small number of strictly necessary cookies to keep you signed in and to secure your session, including an httpOnly refresh-token cookie, and a cookie that remembers your language choice. These are essential to the Service.

Our website also loads a Google tag on every page for Google Ads conversion measurement. It sets Google cookies and identifiers, and it reports the events listed in section 3 to Google, which may use them to measure and attribute our advertising. You can control this through your browser's cookie settings and through Google's own advertising controls at policies.google.com/technologies/ads. We do not sell your personal information, and we do not use your practice session content or uploaded documents for advertising.

Unless you reject it in our cookie banner, our website also runs Microsoft Clarity on every page. It records how you interact with the site — pages viewed, clicks and taps, scrolling and mouse movements — as session replays and heatmaps, which we use to see where the website is confusing and to improve it. Anything you type into a form field is masked in your browser and never reaches Microsoft. Clarity can set first-party cookies (_clck and _clsk) that link the pages of one visit and recognize a returning visitor, and Microsoft can set cookies of its own; for visitors in the EEA, the UK and Switzerland, none of these cookies are set without consent. Microsoft handles this data under the Microsoft Privacy Statement at microsoft.com/privacy/privacystatement and may also use it to improve its own products and for advertising.

Clarity and the Google tag are optional. In the cookie banner shown on your first visit, accepting allows their cookies, while rejecting turns Clarity off completely and leaves the Google tag measuring without cookies. You can change your choice at any time under "Cookie settings" at the bottom of our home page. Until you accept, visitors in the EEA, the UK and Switzerland get none of these cookies.

Some browsers offer a "Do Not Track" (DNT) setting. There is no agreed industry standard for how a service should respond to it, and the Service does not currently respond to DNT signals. You can still control cookies through your browser settings and through the Google advertising controls linked above.

13. Data security

We protect your information using industry-standard measures, including encryption in transit, hashed passwords and tokens, access controls, rate limiting, and security headers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to notify you of significant incidents where required by law.

Payment card details are entered on a payment page hosted by Stripe and never reach our servers. Stripe is certified to PCI DSS Level 1, the highest level of card-data security certification.

14. International data transfers

Your information may be processed in countries other than the one in which you live. Where we transfer personal data out of the EEA or UK, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to protect it.

15. Links to other websites

The Service can link to websites we do not operate. If you follow one, you are subject to that site's own privacy policy rather than this one. We have no control over the content, privacy policies or practices of any third-party site and take no responsibility for them, so we encourage you to read the privacy policy of every site you visit.

16. Children's privacy

The Service is not intended for anyone under the age of 16, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

17. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you in the app or by email. Your continued use of the Service after changes take effect means you accept the updated policy.

18. Contact us

If you have questions about this Privacy Policy or how we handle your information, contact us at aiinterviewhelper@gmail.com or by mail at Interview Helper, ul. Wincentego Rzymowskiego 34, 02-697 Warszawa, Poland.

For questions specifically about a payment, a receipt or a refund, write to the same address and we will involve the Seller where needed.