Privacy Policy

02Information we collect

Account and identity data

Intervuly.Pro uses passwordless sign-in, so we never collect or store a password. Depending on how you sign in, we collect:

• Your email address (for email one-time-code and magic-link sign-in).
• Your name and profile picture, if you sign in with Google (via Google OAuth).
• The sign-in method used and whether your email is verified.
• One-time codes and sign-in link tokens are stored only as salted, hashed values with a short expiry and are single-use — never in readable form.

Content you provide

• Resume and job-description context you share so the copilot and mock interviews can ground their answers in your background and the target role.
• Your messages and prompts in chat and mock interviews, and mock-interview settings such as target role, difficulty, and topic.
• Feedback and scoring generated for your mock-interview sessions.

Audio for transcription

When you use the Live Interview Copilot or the voice features, audio you choose to capture (your microphone and, if you enable it, interview/system audio) is streamed to our speech-to-text provider so it can be transcribed. See “Live Copilot, audio, resume & JD” below for how this is handled and retained.

Usage, billing, and technical data

• Service usage such as AI model-usage logs (provider, model, latency, and token counts) and Live Copilot minutes used, together with the session language, for reliability and plan accounting.
• Billing data: your Stripe customer and subscription identifiers, plan, and status. Payment card details are entered directly with Stripe — we never see or store your full card number.
• Basic technical and security data needed to run the service, including your session cookie, request metadata, rate-limiting signals, and anti-abuse checks (Cloudflare Turnstile).

03How we use your information

We use personal data to:

• Provide the service: run the Live Copilot, mock interviews, feedback, chat, and multilingual voice, and ground answers in your resume and the job description.
• Authenticate you and keep your account and sessions secure.
• Process subscriptions, payments, and plan entitlements through Stripe.
• Maintain, debug, and improve reliability, latency, and quality of the service.
• Prevent fraud, abuse, and security incidents, and enforce our Terms.
• Send transactional messages you request, such as sign-in codes and links.
• Comply with legal obligations and respond to lawful requests.

Where the law requires a legal basis (for example under the GDPR), we rely on: performance of our contract with you (to deliver the service you request); our legitimate interests (to secure, maintain, and improve the service); your consent (for example, capturing audio, which you initiate); and compliance with legal obligations.

04Live Copilot, audio, resume & JD

The Live Interview Copilot works by capturing short audio segments, transcribing them, and using the transcript — grounded in your resume and the job description — to generate suggested answers that stream onto your screen in real time.

• Audio is processed transiently: segments are sent to our speech-to-text provider to produce a transcript for that session and are not stored by Intervuly.Pro as audio recordings.
• Answer suggestions are streamed to you live. Partial, in-progress output is never persisted as final content.
• For Live Copilot sessions we retain operational metadata for plan accounting — such as session start/end time, minutes used, and language — not the interview audio.
• Capturing interview or system audio always requires an explicit action by you (a browser screen-share / audio permission). You control when capture starts and stops.
• Your resume and job-description context are used to ground answers for your sessions and are associated with your account so the copilot can help you.

05Third-party service providers

We use a small set of trusted processors to run Intervuly.Pro. They may process personal data on our behalf under contract, only as needed to provide their service:

• Cloudflare — edge hosting, application runtime, databases and storage, and the AI Gateway that routes all AI traffic, plus Turnstile anti-abuse.
• Stripe — payment processing and subscription management. Card data is handled directly by Stripe under its PCI-compliant checkout.
• Brevo — sending transactional sign-in emails (one-time codes and magic links).
• AI model providers reached through the Cloudflare AI Gateway — including OpenAI (and, where configured, other providers) for chat, mock interviews, copilot suggestions, and speech-to-text / text-to-speech.
• LangSearch — optional web-search grounding that adds cited context to some general chat answers.
• Google — only if you choose to sign in with Google (OAuth).

We may also disclose data if required by law or legal process, to protect our rights, users, or the public, or in connection with a business transfer such as a merger or acquisition.

06Cookies and sessions

Intervuly.Pro relies on a single essential session cookie to keep you signed in. It is an HttpOnly, SameSite=Lax cookie containing a signed session token; it is not readable by client-side scripts and is scoped to the app origin.

• We use strictly necessary cookies/local storage for authentication, security, and core functionality.
• We do not use advertising cookies or sell cookie-based data to advertisers.
• Because the session cookie is essential, disabling it will prevent you from signing in and using the service.

07Data retention

We keep personal data only for as long as needed for the purposes described here:

• Account data is retained while your account is active.
• Chat, mock-interview, and feedback content is retained to provide your history and the service, until you delete it or close your account.
• Live Copilot audio is not retained as recordings; only session metadata (minutes and language) is kept for plan accounting.
• Sign-in codes and link tokens expire within minutes and are single-use.
• Billing records are retained as required for accounting and legal compliance.
• When data is no longer needed, we delete or anonymize it.

08Your rights and choices

Depending on where you live, you may have rights over your personal data. As a Singapore-based company we comply with the Personal Data Protection Act (PDPA), and we honour equivalent requests from users covered by laws such as the GDPR and CCPA/CPRA. These may include the right to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your data (subject to legal retention obligations).
• Receive your data in a portable format.
• Object to or restrict certain processing, and withdraw consent you have given.
• Lodge a complaint with your local data protection authority.

09How we protect your data

• All traffic is encrypted in transit (TLS).
• All AI provider calls originate only from our server-side runtime; provider API keys never reach your browser.
• Sessions use signed, HttpOnly cookies; authentication endpoints are rate-limited and protected by Cloudflare Turnstile.
• We follow the principle of least privilege and log without sensitive raw content.

No method of transmission or storage is completely secure, so while we work hard to protect your data we cannot guarantee absolute security.

10Children’s privacy

Intervuly.Pro is not directed to children under 16 (or the minimum age of digital consent in your jurisdiction), and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us at customer.care@zadenor.com and we will delete it.

11International data transfers

Intervuly.Pro runs on globally distributed edge infrastructure, and our providers (such as Cloudflare, Stripe, Brevo, and AI model providers) may process data in countries other than your own, including outside Singapore and the EEA. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses and provider data-processing agreements to protect your data during these transfers.

12Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of Intervuly.Pro after an update means you accept the revised policy.

13Contact us

Questions, concerns, or requests about this policy or your personal data? We are here to help.