Privacy Policy

This Privacy Policy explains what Interv ("we", "us") collects when you use Interv at interv.app, why, and your choices. Questions: contact support.

What we collect

• Account — your email address and a hashed password (or, if you sign in with Google, the basic profile Google returns). Authentication is handled by Supabase.
• Interview content — the messages you exchange with the AI interviewer, code you write in the editor (captured per turn), the problem assigned, and the written feedback generated at the end of each session. Stored so you can review past sessions.
• Billing — handled by Stripe. We store a Stripe customer/subscription identifier and your credit balance; we donotstore card numbers. Stripe's own privacy policy governs payment data.
• Operational — standard server logs and error diagnostics.

How we use it

• To run interview sessions and generate feedback.
• To process your conversation through a third-party large language model provider so the AI can respond. Conversation content is sent to that provider to produce replies and feedback.
• To bill you and manage credits/subscriptions via Stripe.
• To operate, secure, debug, and improve the service.

Sharing

We don't sell your data. We share it only with the subprocessors needed to run the product: Supabase (auth & database), Stripe (payments), our AI model provider (generating responses), our email provider (transactional & support mail), and our hosting provider. Each processes data on our behalf.

Retention & deletion

Interview history is kept until you delete it or your account. You can permanently delete your account and all associated data (sessions, messages, feedback, credits) at any time from the Accountpage. Billing records retained by Stripe for legal/accounting purposes are subject to Stripe's retention.

Cookies

We use first-party cookies that are strictly necessary to keep you signed in (set by our authentication provider). We don't use advertising or third-party tracking cookies.

Security

Data is stored with our infrastructure providers using industry-standard protections: encrypted connections (HTTPS), access controls that scope each user's data to their own account, and encryption at rest by our database and payment providers. No system is perfectly secure, but we take reasonable measures to protect your information.

Children

Interv is not directed to children. You must be at least 13 years old (or the minimum age of digital consent in your country) to use it. We don't knowingly collect data from children; if you believe a child has used the service, contact us and we'll delete the account.

Your choices & rights

You can access your data in-app (past sessions, transcript download), correct your email via support, and permanently delete your account and all associated data from the Account page. Depending on where you live you may have additional rights — such as access, portability, or erasure (GDPR), or the right to know and delete (CCPA). Contact us via supportto exercise any of these and we'll respond within the timeframe required by applicable law.

Changes

We'll update the date above when this policy changes. Continued use after a change means you accept the updated policy.

[Draft starter — review with legal counsel before relying on it.]