LEGAL
Privacy Policy
Last updated: August 5, 2026 · Not final legal counsel-reviewed text — a good-faith, detailed draft that will be reviewed by counsel before payments launch.
1. Who we are
Interview Forge is operated as a sole proprietorship registered in Rajasthan, India. For the purposes of India's Information Technology Act and applicable data protection law, we are the "data controller" (or, once India's DPDP Act substantive rules commence, the "Data Fiduciary") for the personal data described below.
Grievance Officer: for any complaint about how your data is handled, contact our Grievance Officer at grievance@interviewforge.ai. We aim to acknowledge complaints within 48 hours and resolve them within 30 days, as required under India's SPDI Rules, 2011.
2. What we collect
- Account data: email address, name, and authentication data (via Clerk).
- Interview content: the questions you answer, your typed or transcribed spoken answers, AI-generated scores and feedback, and (if you upload one) your résumé and the data extracted from it.
- Payment data: plan, billing status, and payment metadata from our payment processor — we never see or store your full card number.
- Usage data: pages visited, feature usage, and coarse analytics needed to operate the dashboard, goal tracking, and rate limiting.
- Device/technical data: IP address (used for rate-limiting and abuse prevention — see our sign-up protections), browser type, and similar technical metadata standard to any web request.
3. Camera and video — the on-device guarantee
Live Video Mock interviews and the proctored coding assessment use your camera. This is the one place worth being explicit and specific about, because it is unusual and it is a real feature, not boilerplate:
- Your camera feed is processed entirely in your browser, using an on-device model (MediaPipe). No video frame or image is ever uploaded, transmitted, or stored by us.
- Only small numeric scores derived from that on-device processing are sent to our server — for example, an eye-contact percentage, a posture-stability score, or a proctoring event like "face not detected for 10 seconds". These are behavioral measurements, never emotional conclusions (we do not claim to know how you feel).
- Face data is never used to identify you across sessions or match you against any database. Your identity comes only from your Clerk login, never from your face.
- The camera feed is discarded the moment your session ends. There is nothing stored to delete, because nothing was ever sent.
4. Audio and voice — handled differently, and stated honestly
Unlike video, audio for Live Voice/Video Mock interviews IS streamed to our AI provider (Google Gemini) in real time, because the interview itself is a live conversation with an AI model — there is no way to have a live spoken conversation without the audio reaching the model. The resulting conversation is transcribed and a transcript is stored as part of your interview record, so you can review it later on your results page.
- This audio is sent only to Google, under a paid-tier API key (not the free tier). Google's paid-tier terms commit that it is not used to train Google's models. That commitment does not extend to a guarantee that no human ever reviews it — Google's terms allow limited abuse-detection logging (retained up to 55 days) even on paid tiers, and we do not overclaim otherwise.
- You can delete any interview, including its transcript, at any time from your history page. Deletion is immediate and permanent.
- Voice answers in standard (non-live) practice mode are transcribed once by our speech-to-text provider, with model training explicitly opted out on every request, and the audio is then discarded — only the text transcript is kept.
5. How we use your data
We use your data solely to provide and improve the Service to you: generating interview questions and feedback tailored to you, computing your analytics and progress tracking, enforcing plan limits, and processing payments. Your interview answers, résumé, and transcripts are never used to train any AI model, and we never sell your data to third parties.
6. Sub-processors
We share data with the following categories of service providers, each acting under contractual data-protection obligations, strictly to operate the Service:
| Provider | Purpose | Location |
|---|---|---|
| Clerk | Authentication — email, name, login sessions | USA |
| Cloudflare (Workers, D1, KV, R2) | Hosting, database, edge compute for all app data | Global edge / USA |
| Google (Gemini) | Live voice/video interviews, résumé parsing | USA |
| AI inference providers | AI text generation — interview questions and answer scoring | USA |
| Speech-to-text provider | Transcription of spoken answers | USA |
| Stripe (current) / payment processor (future: Razorpay, Paddle) | Payment processing — we never see your full card details | USA / India / Global |
| Sentry | Error monitoring (technical error data only, not interview content) | USA |
7. Lawful basis for processing
We process your data on the basis of: performance of our contract with you (providing the Service you signed up for), your consent (for camera/microphone access, obtained via an explicit on-screen confirmation before either is ever activated), and our legitimate interest in operating, securing, and improving the Service (e.g. rate-limiting for abuse prevention).
8. Data retention
- Account data is retained for as long as your account is active.
- Interview sessions, transcripts, and analytics are retained until you delete them, or your account is deleted.
- Video is never retained (see Section 3) — there is nothing to schedule for deletion.
- Backups: our database is backed up regularly for disaster recovery; deleted data is purged from backups on a rolling schedule, typically within 30 days.
9. Your rights
You can delete any individual interview session yourself, anytime, from your history — deletion is immediate and permanent. Self-serve full account deletion is on the roadmap and not yet live; until then, request full account deletion by emailing us (Section 14) and we will delete it manually. Depending on your location, you may also have rights to access, correct, or export your data, and to object to or restrict certain processing. To exercise any of these rights, contact us (Section 14) and we will respond within 30 days.
10. International data transfers
Because our infrastructure and sub-processors (Section 6) are global, your data may be processed outside your country of residence, including in the United States. Where required, we rely on our sub-processors' own compliance mechanisms (such as Standard Contractual Clauses) for these transfers. If you are in the EEA, UK, or Switzerland and have a question about international transfers, contact us at the address in Section 12.
11. Cookies
We use only essential cookies required for authentication (provided by Clerk) and basic session functionality. We do not use advertising or third-party tracking cookies.
12. Age policy
This service is intended for users 18 and older (see our Terms of Service). We do not knowingly collect data from anyone under 18. If we become aware that we have, we will delete it promptly.
13. Changes to this policy
We may update this policy from time to time. Material changes will be notified with at least 30 days notice before taking effect.
14. Contact
General privacy questions: privacy@interviewforge.ai. Formal complaints: grievance@interviewforge.ai (our Grievance Officer, per Section 1).