LEGAL

Privacy Policy

Last updated: April 2026

InterviUni is committed to protecting your privacy. This policy explains what data we collect, why we collect it, and how we protect it. We comply with the General Data Protection Regulation (GDPR) and applicable data protection laws.

1. Information We Collect

•Account information: When you register, we collect your name, email address, and password (stored as a secure hash).
•Profile data: Optional fields you provide — phone number, location, and LinkedIn URL — stored in your user profile.
•Usage data: Interview session results, course progress, ATS analysis outputs, and quiz scores, associated with your account.
•Payment information: Billing is processed by Stripe. InterviUni does not store card numbers or CVV codes. We receive a transaction reference and subscription status only.
•Technical data: IP address, browser type, device type, and pages visited — collected automatically for security and performance.

2. How We Use Your Information

•To provide and operate the platform — including interview coaching, course delivery, ATS analysis, and cheat sheets.
•To personalise your experience and remember your progress across sessions.
•To process payments and manage subscriptions via Stripe.
•To send transactional emails — account verification, password resets, and payment receipts.
•To improve the platform — aggregate, anonymised usage data helps us understand which features to improve.
•We do not sell your personal data to third parties. We do not use your data for advertising.

3. Data Storage and Security

•Your data is stored in Supabase — a SOC 2 Type II certified database provider with servers in the European Union.
•All data is transmitted over HTTPS/TLS. Passwords are hashed using bcrypt and never stored in plaintext.
•We implement access controls, rate limiting, and audit logging to protect against unauthorised access.
•Despite these measures, no system is 100% secure. If a breach occurs that affects your data, we will notify you within 72 hours as required by GDPR.

4. Cookies

•We use strictly necessary cookies to maintain your login session.
•We use a local storage key ('itc-theme') to remember your light/dark mode preference.
•We do not use advertising cookies or third-party tracking cookies.
•You can disable cookies in your browser settings, but this will prevent you from staying logged in.
•For full details, see our Cookie Policy.

5. Your Rights (GDPR)

•Right of access: Request a copy of all personal data we hold about you.
•Right to rectification: Correct inaccurate data via your Profile page or by contacting us.
•Right to erasure: Request deletion of your account and all associated data. We will fulfil this within 30 days.
•Right to portability: Receive your data in a machine-readable format (JSON) on request.
•Right to object: Object to any processing of your data that is not strictly necessary for service delivery.
•To exercise any of these rights, contact us at privacy@interviuni.com.

6. Data Retention

•Account data is retained while your account is active.
•Interview session data and course progress are retained for 24 months after your last login, then deleted.
•Payment records are retained for 7 years as required by financial regulations.
•When you delete your account, all personally identifiable data is purged within 30 days. Aggregate anonymised statistics may be retained.

7. Third-Party Services

•Supabase — database and authentication. Privacy policy: supabase.com/privacy
•Stripe — payment processing. Privacy policy: stripe.com/privacy
•Anthropic Claude API — powers AI interview coaching and ATS analysis. Your resume and interview data is sent to Claude for processing. Anthropic does not use this data to train models. Privacy policy: anthropic.com/privacy
•Vercel — hosting and CDN. Privacy policy: vercel.com/legal/privacy-policy

8. Changes to This Policy

•We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the 'Last updated' date at the top of this page.
•Continued use of the platform after changes constitutes acceptance of the updated policy.

9. Contact

•Data Controller: InterviUni
•Email: privacy@interviuni.com
•For general enquiries: support@interviuni.com

1. Information We Collect

•Account information: When you register, we collect your name, email address, and password (stored as a secure hash).

•Profile data: Optional fields you provide — phone number, location, and LinkedIn URL — stored in your user profile.

•Usage data: Interview session results, course progress, ATS analysis outputs, and quiz scores, associated with your account.

•Payment information: Billing is processed by Stripe. InterviUni does not store card numbers or CVV codes. We receive a transaction reference and subscription status only.

•Technical data: IP address, browser type, device type, and pages visited — collected automatically for security and performance.

2. How We Use Your Information

•To provide and operate the platform — including interview coaching, course delivery, ATS analysis, and cheat sheets.

•To personalise your experience and remember your progress across sessions.

•To process payments and manage subscriptions via Stripe.

•To send transactional emails — account verification, password resets, and payment receipts.

•To improve the platform — aggregate, anonymised usage data helps us understand which features to improve.

•We do not sell your personal data to third parties. We do not use your data for advertising.

3. Data Storage and Security

•Your data is stored in Supabase — a SOC 2 Type II certified database provider with servers in the European Union.

•All data is transmitted over HTTPS/TLS. Passwords are hashed using bcrypt and never stored in plaintext.

•We implement access controls, rate limiting, and audit logging to protect against unauthorised access.

•Despite these measures, no system is 100% secure. If a breach occurs that affects your data, we will notify you within 72 hours as required by GDPR.

4. Cookies

•We use strictly necessary cookies to maintain your login session.

•We use a local storage key ('itc-theme') to remember your light/dark mode preference.

•We do not use advertising cookies or third-party tracking cookies.

•You can disable cookies in your browser settings, but this will prevent you from staying logged in.

•For full details, see our Cookie Policy.

5. Your Rights (GDPR)

•Right of access: Request a copy of all personal data we hold about you.

•Right to rectification: Correct inaccurate data via your Profile page or by contacting us.

•Right to erasure: Request deletion of your account and all associated data. We will fulfil this within 30 days.

•Right to portability: Receive your data in a machine-readable format (JSON) on request.

•Right to object: Object to any processing of your data that is not strictly necessary for service delivery.

•To exercise any of these rights, contact us at privacy@interviuni.com.

6. Data Retention

•Account data is retained while your account is active.

•Interview session data and course progress are retained for 24 months after your last login, then deleted.

•Payment records are retained for 7 years as required by financial regulations.

•When you delete your account, all personally identifiable data is purged within 30 days. Aggregate anonymised statistics may be retained.

7. Third-Party Services

•Supabase — database and authentication. Privacy policy: supabase.com/privacy

•Stripe — payment processing. Privacy policy: stripe.com/privacy

•Anthropic Claude API — powers AI interview coaching and ATS analysis. Your resume and interview data is sent to Claude for processing. Anthropic does not use this data to train models. Privacy policy: anthropic.com/privacy

•Vercel — hosting and CDN. Privacy policy: vercel.com/legal/privacy-policy