Privacy Policy

1. Information We Collect

When you use InterviewChamp.AI, we collect:

• Account information: Name, email address, and password (hashed) when you sign up, or profile data from Google if you use Google Sign-In.
• Resume data: Resumes you upload are parsed for text content to provide AI-powered answers during interviews. Files are stored securely on our servers.
• Interview session data: Transcripts, AI-generated answers, and session metadata are stored to provide scorecard analysis and session history.
• Usage data: Pages visited, features used, session duration, and the website that sent you to us (only its name, such as google.com, never the full link), for improving the product.
• Support notes: Our support team may add private notes to your support conversations to help resolve your request; only our staff can see them.

2. How We Use Your Information

• To provide real-time AI answers tailored to your resume and target role.
• To generate post-interview scorecards and performance analysis.
• To tailor your resume to specific job descriptions.
• To save your preferences, session history, and documents.
• To improve InterviewChamp’s features and user experience.

3. Data Sharing & Service Providers

We do not sell your personal data for money. We share it with service providers that help us run InterviewChamp, and each one receives only what it needs to do its job. They process your data on our behalf under data processing agreements. Separately, ad platforms’ pixels on our website collect data for advertising unless you turn them off (Section 10). You can ask us for the current list of provider names at any time at [email protected].

• AI providers: generate answer suggestions, feedback, resume and cover-letter text, and the voice of the mock interviewer, and make quick decisions inside the product — for example whether the interviewer’s last sentence is a question, which lines of your resume fit a question, whether your resume shows a job requirement in other words, or whether a practice answer in a mock interview answered the question and gave a concrete result, or whether an answer in a live or saved interview answered the question and gave a concrete result, or whether a suggested answer, or an answer you gave in a saved interview, claims experience your resume does not show, or whether a page you open is a job application, or which help article or how-to video answers a question you ask our in-app assistant or support chat, whether a support message is urgent, or whether a drafted reply would promise a refund, a discount or a feature. They receive the text each request needs: your interview context, questions and transcript text, the answers we suggest to you, job descriptions, messages you send to support or the in-app assistant, screenshots you choose to analyze, and the lines of your resume (without the contact details at the top), and, when you fill a job application with our browser extension, the form’s questions, your saved profile and your resume (contact details included, never your demographic answers), and answers you saved earlier for similar questions (never your demographic, salary-history or work-permit answers). No audio is sent to them. When you ask the in-app assistant about your own resumes or interviews, it reads them only from your own account, and the parts it needs (such as a transcript, your answers and their scores) go only to the provider that writes the reply. For the assistant and the support chat, the provider that makes the quick decisions receives only the messages of that chat, including a drafted reply, and the name of the page you are on and the names of our own buttons and settings on it, with email addresses removed — never your saved transcripts or resumes. The provider that makes the quick decisions states that it does not train its models on this data.
• Speech-to-text: a real-time transcription provider turns interview audio into text. Audio is streamed for transcription and not retained by us. In one-mic mode, it also makes a voice code from a 15-second sample you read — the recording is never kept — so the app can tell your lines from the other person’s. If you press “Save my voice and start”, we keep that code with your account until you delete it in your Profile, delete your account, or 3 years after you last saved it, whichever comes first; otherwise it is kept only with that interview’s record.
• Payments: Stripe processes all subscription and billing data. We never see or store your full card number.
• Hosting and operations: cloud providers host the app and its database, deliver our emails, protect and speed up the site, and report errors so we can fix them.
• Analytics: Google Analytics 4 collects anonymous usage data to improve the product (see how Google uses data from sites that use its services). It runs for every visitor. Google offers a browser add-on that turns it off: tools.google.com/dlpage/gaoptout.
• Session replay: Microsoft Clarity records anonymized session replays of our public pages and the sign-up flow (for example the homepage, pricing, demo, download, sign-in, and the install hand-off). Clarity does not record any input you type, and it never runs inside the product: your home dashboard, the interview workspace, sessions, the resume builder, applications, onboarding, profile, or settings.

4. Data Security

We protect your data with:

• Passwords stored only as salted hashes, never in plain text.
• Short-lived sign-in tokens.
• HTTPS encryption for all data in transit.
• Access controls on the database that holds your data.
• Encryption of the optional private answers you save for job applications (date of birth, current salary, conviction history, Social Security number, typed signature).

5. Your Rights

You have the right to:

• Access — view and export all data we hold about you. Profile → Account → Download My Data returns a full JSON export.
• Rectification — edit your profile, name, email, and target role at any time from the Profile page.
• Erasure — delete your account permanently. Profile → Account → Danger Zone → Delete Account removes all your data.
• Object to processing — turn off ad tracking with the button on our Do Not Sell or Share page or with Global Privacy Control in your browser; turn off Google Analytics with Google’s add-on (Section 3); for anything else, email us.
• Portability — the data export in JSON is machine-readable and portable to other services.

We respond to all rights requests within 45 days. For California residents, see also our Do Not Sell or Share My Personal Information notice.

6. Data Retention

We retain your data only as long as needed to provide the service. Our standard retention periods:

• Session transcripts and AI answers: retained until you delete the session, or 90 days after the session ends if you don’t explicitly save it.
• Uploaded resumes and documents: retained until you delete them from the Resume or Documents pages.
• Account profile, preferences, and billing history: retained for the life of your account.
• Server and application logs: retained for 30 days for debugging and security auditing, then automatically purged.
• Stripe billing records: retained for 7 years as required by applicable financial and tax regulations. Stripe is the custodian of this data; we do not store full card numbers.
• Deleted account grace period: when you delete your account, we hard-delete all associated data within 30 days. Backups containing the data are overwritten on a rolling 30-day cycle.

7. International Data Transfers

InterviewChamp is based in the United States. Our service providers (described in Section 3) process data in the United States and the European Union. For users in the European Economic Area, United Kingdom, or Switzerland, personal data transferred outside your region is protected by Standard Contractual Clauses (SCCs) and Data Processing Agreements (DPAs) in place with each provider. These clauses are the mechanism approved by the European Commission (EU 2021/914) and the UK Information Commissioner’s Office for international transfers.

8. Audio & Transcription

InterviewChamp uses a real-time speech-to-text provider to transcribe audio. Audio is streamed for transcription but not retained by us after the transcript is produced. Only the resulting text transcripts are saved as part of your session data and are subject to the retention periods in Section 6.

9. Browser Extension (Jobs AI Autofill)

Our optional Chrome extension, Jobs AI Autofill, fills job-application forms on supported career sites (Greenhouse, Lever, Ashby, Workday, Workable and other major applicant-tracking systems) using data you have already saved to your InterviewChamp account.

• What it accesses — the profile data you entered (name, contact, address, work eligibility, EEO / self-identification answers, job preferences), your resume, and the labels of the form fields on the application page you are filling. On pages that contain a form and mention a job, it also reads the page’s title, headings, field labels and button text, to recognise whether the page is a job application. For that check, never a value anyone typed and never the page’s address. The one exception is a problem report you choose to send with the add-on’s Report button: it carries your message and, only if you tick “Include the site and page”, the site, the page’s path (with ID numbers hidden), the add-on version and the names of the boxes it did not fill — never your answers. Only if you tick “Include the page layout” does it also carry how the boxes it did not fill are built in the page’s code — their tags, labels and the choices a list offers, with ID numbers hidden — never a value anyone typed and no other words from the page.
• Private answers you choose to save — on your autofill profile you can add your date of birth, your current salary, your Social Security number, your typed signature, and whether you have ever been convicted of a crime. They are optional. We keep them encrypted, apart from the rest of your profile, and use them only to fill a job application question that asks exactly that. We fill a conviction question only when your answer is “No”. They are never sent to an AI provider. You can change or remove them at any time on your autofill profile, and they are deleted with your account.
• Answers you type on job applications — after the extension fills an application, an answer you type or pick yourself, in a box it left for you or one it filled from your saved answers, is saved to your account as soon as you move to the next box, so the extension can fill the same question for you next time. Your diversity (self-identification) answers are saved to your autofill profile; your date of birth, current salary, conviction answer, Social Security number and typed signature to your encrypted private answers; any other answer to your saved answers. We do not save codes from image checks, ID numbers other than your Social Security number, who referred you, or an answer about your right to work in one country. You can see, change or delete these on your autofill profile and in your saved answers.
• How it’s used — those field labels and your profile are sent to api.interviewchamp.ai solely to compute which value fills which field and return it to the page, and to decide whether to open the assistant on the page. This data is not sold and not used for advertising.
• What it stores — only your authentication token and preferences, locally in the browser (chrome.storage.local). It does not read your browsing history.
• No remote code — the extension runs only code shipped inside its package, requests a named list of ATS hosts (never <all_urls>), and injects into any other tab only when you click its toolbar icon.

10. Cookies & Local Storage

We keep sign-in tokens, preferences and feature settings in your browser’s localStorage, and set a few small cookies of our own (to remember that you are signed in, a referral code, which version of a page you saw, and an anonymous ID we use to count visits). There is no cookie banner: the tools below load for every visitor by default, and they set their own cookies.

• Analytics — Google Analytics 4 (GA4) and Microsoft Clarity (Section 3). They show us how the site is used (page views, clicks, and Clarity’s session replays). IP addresses are anonymized in GA4.
• Advertising — Facebook Pixel, TikTok Pixel, AppLovin Pixel and other ad platforms’ pixels. They tell those platforms which of our pages you visit, what you click there and the ad that brought you; when you leave your email for our demo, sign up or log in; when you finish setting up your account, with the answers you pick there (such as your goal, your industry and how you heard about us); when you start or finish an interview session, with its type and settings, and how long it lasted and how many answers it had; when you download the desktop app; and when you see our plans, start a checkout or buy a plan, and the price. Our own code does not give them your name, your email address, your resume, or what is said in your interviews. We use this to see which ads work, and they use it to show our ads to people likely to want them. Some US state laws, including California’s, call this “sharing” your personal information. Turning them off does not limit any product functionality. For more information about AppLovin’s collection and use of your information visit: legal.applovin.com/privacy.
• Essential — auth tokens and session state. Required for the product to work. Cannot be disabled.

To turn off ad tracking, press “Opt out of ad tracking on this browser” on our Do Not Sell or Share page. If your browser sends Global Privacy Control, we treat it the same way and the ad pixels do not load. Either way the choice is saved in that browser. When you buy, renew or upgrade a plan, our server also reports the purchase to some of these ad platforms, with a scrambled (hashed) copy of your email address and account ID and, when we have them, your browser type and the platforms’ own browser IDs. Neither the button nor Global Privacy Control stops that yet. To opt out of interest-based advertising more broadly, visit aboutads.info/choices or youronlinechoices.eu.

11. Data Protection Officer

InterviewChamp is not currently required under GDPR Article 37 to appoint a Data Protection Officer because our organization does not meet the size and processing-volume thresholds that trigger this requirement. Privacy inquiries, rights requests, and regulatory correspondence should be directed to [email protected]. If our organization grows to a size where a DPO is required, we will update this policy accordingly.

12. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via email or in-app notification. The “Last updated” date at the top of this page always reflects the most recent revision.

13. Contact

For questions about this privacy policy or to exercise your rights, contact us at [email protected]. For California-specific requests, see also our Do Not Sell or Share notice.

InterviewChamp.AI is operated by Direct E-commerce Hub LLC, 17350 State Hwy 249, Ste 220 #15760, Houston, TX 77064, USA.