Draft: this notice is being finalised before launch.
Privacy notice
Last updated [date].
Who we are
Interviewmaxx is run by [name], [address]. Contact: [email]. We're the controller of the personal data described here.
What we collect and why
| What | Why | Lawful basis |
|---|---|---|
| Your email address | To log you in and to contact you about your account | Contract |
| Your whiteboard working, hints you used and answers you picked | To save your progress and show it back to you | Contract |
| The universities and courses you say you're applying for (optional) | To show you the right interviewers and dates. You can change or clear them in your account | Contract |
| Your grades and personal statement, if you add them (optional) | So the AI interviewer can pitch its questions and ask about your application. Sent to it only during your interviews. You can change or delete them in your account | Contract |
| A hashed form of your email address, once you've used your free interview | So the free interview is one per person, even if an account is deleted and made again | Legitimate interests (preventing misuse) |
| During AI interviews: your voice, images of your whiteboard, and a text transcript | To run the interview and give you a report and replay afterwards | Contract |
| Payment records (not card details) | To grant what you bought and for tax | Contract; legal obligation |
We don't use your data for advertising, we don't sell it, and we don't build a profile of you beyond the reports you can see.
The AI interviewer
AI interviews use Google's Gemini API. Your voice and images of your whiteboard are sent to Google to produce the interviewer's replies and to read your handwriting. We use Google's paid service, under terms that don't allow Google to use this data to train its models. Your voice isn't recorded by us: we keep the text transcript, not the audio.
Who else handles your data
- Supabase: our database and log-in ([region])
- Vercel: hosts the website
- Google (Gemini API): the AI interviewer, during interviews only
- Stripe: payments
How long we keep it
Your working, transcripts and reports are kept while you have an account, so you can look back at them. [Retention period after inactivity.] Delete your account at any time from your account page and everything is deleted, except payment records we must keep for tax and a one-way scrambled (hashed) form of your email address, which can't be turned back into the address. We keep that only so the free first interview stays one per person.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Email [email]. If you're not happy with our answer, you can complain to the Information Commissioner's Office (ico.org.uk).