Privacy Policy

1. Introduction

InterviewBoost.ai ("we", "us", "our") operates the website interviewboost.ai and related applications (collectively, the "Service"), an AI-powered interview coaching platform that helps candidates prepare for job interviews through mock interviews, live interview assistance, behavioral analysis, and performance analytics. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. We are committed to protecting your privacy and handling your data transparently, in compliance with applicable data protection laws including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and India's Digital Personal Data Protection Act, 2023 (DPDP Act).

2. Information We Collect

Personal Information

When you register, we collect your name, email address, and password (stored as a cryptographic hash). If you sign in with Google OAuth, we receive your name, email, and profile photo from Google. You may optionally provide your target role, skills, experience level, target companies, LinkedIn URL, and resume.

Interview Data

When you use the Service, we process audio recordings (captured live during mock interviews or uploaded for review), transcripts generated from your audio via speech-to-text, AI-generated analysis scores and feedback, and optionally webcam video frames during mock interviews for facial expression analysis.

Behavioral Analysis Data

If you enable webcam during mock interviews, we analyze facial expressions to assess confidence, engagement, nervousness, posture, and eye contact patterns. This analysis produces text-based summaries only. No images or video frames are stored.

Usage Data

We automatically collect browser type and version, device information, pages visited, features used, session duration, and IP address. This data helps us improve the Service and diagnose technical issues.

Cookies

We use essential cookies for authentication and session management, and may use analytics cookies to understand usage patterns. We do not use advertising or tracking cookies. See Section 11 for details.

3. How We Use Your Information

We use the information we collect to:

• Provide AI-powered interview analysis, scoring, and coaching feedback
• Generate personalized mock interview questions based on your target role and experience
• Deliver real-time live interview assistance and suggested responses
• Produce improvement plans and track your progress over time
• Parse and incorporate your resume for personalized answer suggestions
• Process payments and manage subscriptions
• Send service-related communications (account verification, billing, feature updates)
• Improve the Service using aggregated, anonymized usage data
• Comply with legal obligations

We do not use your personal interview data, audio, video, or biometric information for AI model training.

4. Audio and Video Data Handling

InterviewBoost.ai captures audio and optionally video during mock interviews, live recordings, and uploaded reviews. We treat this as highly sensitive data and handle it with the utmost care.

Audio Processing

Audio captured during mock and live interviews is streamed in real-time to our transcription provider and is not written to persistent storage on our servers. For uploaded audio/video files, the files are stored temporarily for processing and permanently deleted within 24 hours. We do not retain raw audio recordings beyond the immediate processing window.

Webcam Video Processing

Webcam frames captured during mock interviews are analyzed in server memory for facial expression patterns (confidence, engagement, nervousness, posture, eye contact). Frames are processed and immediately discarded -- they are never saved to disk, never stored in any database, and never included in your interview history. The only output stored is a text-based summary of expression patterns.

No Facial Recognition

We do not perform facial recognition. We do not attempt to identify you or match your face against any database. Our analysis is limited to expression patterns and body language assessment.

What We Store

Only the following derived, text-based data is stored in your account: transcripts (text of what was said), AI-generated scores and feedback, text summaries of facial expression patterns (no images), and interview metadata (date, duration, scores). All of this can be deleted by you at any time.

5. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data on the following legal bases:

• Consent: You provide explicit consent when you enable microphone or webcam access, upload recordings, or submit your resume. You may withdraw consent at any time.
• Performance of Contract: Processing is necessary to provide the Service you have subscribed to, including generating interview feedback, managing your account, and processing payments.
• Legitimate Interests: We process usage data and analytics to improve the Service, ensure security, and prevent fraud, where such interests are not overridden by your rights.

6. Data Sharing

We share your data only with the following categories of service providers, and only the minimum data necessary for each to function:

• Anthropic (Claude AI): Interview transcripts and resume text are sent to Anthropic's Claude models for analysis, scoring, and feedback generation. Anthropic does not use this data to train their models.
• Deepgram / OpenAI Whisper: Audio streams are sent for speech-to-text transcription. Audio is processed in real-time and not retained by these providers.
• Stripe: Payment information (card details, billing address) is processed directly by Stripe. We do not store your full payment card information.
• Google: If you use Google OAuth sign-in, Google provides your name, email, and profile photo. We do not share your interview data with Google.

We never sell your data. We never share your recordings, transcripts, scores, or any personal data with employers, recruiters, hiring platforms, data brokers, or advertisers.

7. Data Retention

• Account data: Retained while your account is active and for 30 days after deletion request.
• Interview transcripts and analysis: Retained while your account is active or until you delete them.
• Audio recordings: Deleted within 24 hours of processing. Real-time audio is never persisted.
• Webcam frames: Processed in memory only and immediately discarded. Never stored.
• Resume data: Retained until you delete it from your profile.
• Account deletion: When you delete your account, all associated data is permanently removed within 30 days.

8. Data Security

We implement industry-standard security measures to protect your data, including: encryption in transit using TLS 1.2+ for all data transmitted between your browser and our servers; AES-256 encryption at rest for stored data; secure password hashing using bcrypt; role-based access controls limiting employee access to user data; regular security reviews; and monitoring and logging of access to production systems. However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but are committed to promptly notifying affected users in the event of a data breach.

9. Your Rights

GDPR Rights (EEA, UK, Switzerland)

If you are located in the EEA, UK, or Switzerland, you have the right to: access the personal data we hold about you; rectify inaccurate or incomplete data; erase your personal data ("right to be forgotten"); port your data to another service in a machine-readable format; restrict processing of your data; object to processing based on legitimate interests; and withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority.

CCPA Rights (California Residents)

If you are a California resident, you have the right to: know what personal information we collect, use, and disclose; request deletion of your personal information; opt out of the sale of personal information (we do not sell personal information); and not be discriminated against for exercising your privacy rights.

India DPDP Act 2023 Rights

If you are located in India, under the Digital Personal Data Protection Act, 2023, you have the right to: access a summary of your personal data and processing activities; correction and erasure of inaccurate or outdated personal data; grievance redressal through our designated contact; and nominate another person to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, contact us at privacy@interviewboost.ai or use the data export and deletion features available in your account Settings. We will respond to verified requests within 30 days (or sooner where required by law).

10. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has provided us with personal data, please contact us immediately at privacy@interviewboost.ai and we will promptly delete the data.

11. Cookies

We use the following categories of cookies:

• Essential cookies: Required for the Service to function, including authentication tokens and session management. These cannot be disabled.
• Analytics cookies: We may use analytics services to understand how users interact with the Service. These collect anonymized usage data. You can opt out via the cookie banner.

We do not use advertising cookies, social media tracking cookies, or sell data collected through cookies to third parties.

12. International Data Transfers

Your data may be processed in the United States, where our servers and service providers are located. If you are accessing the Service from outside the United States (including from the EEA, UK, or India), your data will be transferred to and processed in the United States. We ensure appropriate safeguards are in place for international data transfers, including Standard Contractual Clauses (SCCs) where required under GDPR, and compliance with applicable cross-border data transfer requirements.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on the Service at least 14 days before the changes take effect. The "Effective date" at the top indicates when the policy was last revised. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

14. Contact Us

For privacy-related questions, data requests, or to exercise your rights under applicable law:

Email: privacy@interviewboost.ai
Website: interviewboost.ai

We aim to respond to all privacy inquiries within 30 days.