Data Controller

InterviewBridge is the data controller responsible for your personal data. For privacy inquiries or data requests, contact us at support@interviewbridge.app.

Categories of Personal Data We Collect

We collect and process the following categories of personal data:

• Account information: name, email address (if provided), authentication provider
• Resume data: uploaded resume files and extracted text content
• Interview session data: questions asked, your text and voice responses, AI-generated scores and feedback
• Drill and practice data: drill responses, scores, and progress history
• Job card data: job descriptions, company names, and requirements you enter
• Usage metadata: timestamps, session duration, and feature usage patterns
• Audio recordings: voice input during interview sessions (processed for transcription, not stored permanently)
• Device identifiers: advertising identifier (IDFA on iOS) if you grant tracking permission, used for measuring advertising effectiveness

Purpose of Processing

Your data is processed for the following purposes:

• Providing interview practice simulations and AI-generated feedback
• Generating performance scores and readiness assessments
• Analyzing resume content for interview personalization
• Matching resumes to job descriptions for alignment reports
• Tracking your progress over time
• Maintaining your account and preferences
• Improving app quality and reliability
• Crash reporting and diagnostics to identify and fix technical issues
• Anonymous usage analytics to understand feature adoption and improve the experience
• Measuring advertising effectiveness and ad attribution

Legal Basis for Processing

We process your personal data based on:

• Consent: You provide explicit consent during onboarding before any data is processed by AI services. You may withdraw consent at any time by deleting your account.
• Contract Performance: Processing necessary to provide the interview practice service you have requested.

You are not required to provide personal data. However, certain features (such as resume-based interview personalization) require specific data to function.

Third-Party Processors

Your data is processed by the following third-party services:

• OpenAI (San Francisco, USA): Processes your interview responses, resume text, and voice recordings to generate questions, feedback, scores, transcriptions, and text-to-speech audio. OpenAI's data usage policy states that API data is not used to train their models.
• Replit (San Francisco, USA): Provides the infrastructure that hosts the application backend and database.
• Sentry (San Francisco, USA): Receives crash reports and error diagnostics when the app encounters technical issues. Crash reports may include device type, operating system version, and error stack traces. Sentry does not receive your interview content, resume data, or personal information.
• Meta Platforms / Facebook (Menlo Park, USA): Receives anonymous app event data (such as app opens, purchases, and feature usage) and, if you grant tracking permission, your device advertising identifier (IDFA). This data is used solely to measure the effectiveness of advertising campaigns and is not used to display ads within the app. You can control this via the App Tracking Transparency prompt shown on first launch.

We do not sell your personal data to data brokers or any other third parties.

International Data Transfers

Your data may be transferred to and processed in the United States by OpenAI, Replit, and Meta Platforms. These transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) as adopted by the European Commission. By using the app after providing consent, you acknowledge this transfer.

Data Retention

We retain your data as follows:

• Account data: Retained while your account is active
• Interview sessions and drills: Retained while your account is active
• Resume data: Retained while your account is active
• Audio recordings: Processed for transcription in real-time and not stored permanently on our servers. Audio is deleted after transcription is complete.
• After account deletion: All personal data is permanently deleted from our systems. This action is irreversible.

Inactive accounts may be deleted after 12 months of inactivity, with prior notice sent to registered email addresses where available.

Your Rights Under GDPR

If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights:

• Right of Access (Article 15): Request a copy of all personal data we hold about you.
• Right to Rectification (Article 16): Correct inaccurate personal data. You can edit your name, re-upload resumes, and re-run sessions directly in the app.
• Right to Erasure (Article 17): Delete your account and all associated data at any time via Profile settings.
• Right to Restriction of Processing (Article 18): Request that we stop processing your data. This can be exercised by deleting your account.
• Right to Data Portability (Article 20): Export your data in a machine-readable format (JSON) from Profile settings.
• Right to Object (Article 21): Object to processing of your personal data.
• Right to Withdraw Consent: Withdraw your consent at any time by deleting your account. Withdrawal does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, use the in-app features (data export, account deletion) or contact us at support@interviewbridge.app. We will respond within 30 days.

Analytics and Crash Reporting

We collect anonymous usage analytics and crash reports to improve app quality:

• Analytics events: We track anonymous usage patterns such as feature usage frequency, session starts, and navigation flows. Analytics data does not include your interview content, resume text, or personal information.
• Crash reports: When the app encounters a technical error, a crash report is automatically sent to our error tracking service (Sentry). Reports include device type, operating system version, and technical error details.
• Ad attribution: We use the Meta (Facebook) SDK to measure the effectiveness of our advertising campaigns. The SDK sends anonymous app event data (such as app installs, purchases, and feature usage) to Meta. If you grant tracking permission via the App Tracking Transparency prompt, your device advertising identifier (IDFA) may also be shared. No ads are displayed within the app.
• Opt-out: You can deny tracking permission when prompted on first launch. You can also revoke tracking permission at any time in your device's Settings under Privacy & Security > Tracking. Crash reporting is only active when configured by the developer.

Data Security

We implement reasonable technical and organizational measures to protect your data:

• All data is transmitted over HTTPS (TLS encryption)
• Authentication credentials are stored securely using platform-native secure storage
• API keys are never exposed or logged
• Access to production data is restricted to authorized systems only
• Rate limiting and input validation protect against abuse

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users within 72 hours of becoming aware of the breach, and will notify the relevant supervisory authority as required by law.

Children's Privacy

InterviewBridge is intended for users aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have collected data from a minor, we will delete it promptly.

Automated Decision-Making

InterviewBridge uses AI to evaluate your interview responses and generate scores. These scores are provided as practice feedback only and do not have any legal or similarly significant effect on you. They are not used to make hiring decisions or determine access to services.

Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated through the app. The date at the top of this policy indicates when it was last updated. Continued use of the app after changes constitutes acceptance of the updated policy.

Contact

For privacy inquiries, data requests, or complaints:

Email: support@interviewbridge.app

You also have the right to lodge a complaint with your local data protection supervisory authority.