Data Handling

Retention windows

• Audio/video recordings: kept for your plan's retention window (currently 1 day on free plans, 7 days on paid plans, 30 days for B2B), then automatically deleted.
• Transcripts and AI-generated feedback: kept until you delete your account.
• Resume files: kept until you delete them from your profile.

Where data is stored

Recordings live in AWS S3, encrypted at rest, in the region for your account's environment (production recordings are stored in us-east-2; resume files and identity images are stored in us-east-1). Transcripts and scores live in our primary Postgres database.

Third parties that process your data are: AWS (hosting and storage, document text extraction, and identity/liveness verification), OpenAI and Anthropic (AI question generation, scoring, and feedback), Deepgram (speech-to-text and synthesised speech), ElevenLabs (synthesised speech), LiveKit (real-time audio and video transport), Simli and Spatius (interviewer avatar), Stripe (billing and payments), Google (sign-in), PostHog (product analytics), Cloudflare (bot and abuse challenge at signup), and our transactional email provider (account and service emails). A complete sub-processor list stating the purpose and legal basis for each is being published; contact us if you need it before then.

Deletion on request

You can delete any individual recording or your full account from settings. Account deletion removes your account and its associated records immediately, and in all cases within 24 hours. As described in our Privacy Policy, a limited set of records is retained after deletion where we are legally required to keep them — billing and payment records, and security audit logs. These are retained in de-identified form wherever possible.

Biometric information (including Illinois residents)

If you use identity verification, we create and store a face template derived from your photo or video in order to confirm that the person taking an interview is you. This is biometric information. It is used only for identity verification, is never sold or shared for trade, and is deleted on the retention schedule described in our Privacy Policy, which is the authoritative description of how we handle it.