1Scope
This Policy applies to personal information we process as the business responsible for the Service. It covers visitors to our website and users of the Service.
- Third-party websites or services you reach through links or integrations (video conferencing platforms, job boards) — they have their own privacy policies.
- Information an employer, university, or career center collects about you outside the Service. For institutional plans, see Section 5.2.
2Information We Collect
2.1 Information you provide
| Category | Examples | When |
|---|---|---|
| Account information | Name, email address, profile photo, password (salted hash only), or identifier shared by Google, Apple, or LinkedIn | When you register or update your profile |
| Professional information | Resume or CV, work history, education, skills, target roles and companies, job descriptions, LinkedIn profile URL | When you upload or enter it |
| Session content | Typed answers, prompts, notes, practice interview transcripts, and the feedback and scores generated for you | When you use practice or AI features |
| Audio and video | Voice recordings of practice answers; optional webcam video for delivery feedback; Live Assist audio | Only after you grant mic/camera/screen permission and start a session |
| Payment information | Billing name, address, and transaction history. Full card numbers are collected by our payment processor, not us. | When you purchase a Subscription |
| Communications | Support messages, survey responses, and feedback | When you contact us |
2.2 Information collected automatically
| Category | Examples |
|---|---|
| Device information | Device type, OS and version, browser type, app version, language, and time zone |
| Usage and log data | IP address, pages and features used, session duration, clicks, referring URL, and error reports |
| Approximate location | City, state, and country inferred from your IP address. We do not collect precise geolocation. |
| Cookies & similar technologies | See Section 8 |
2.3 Information from third parties
- Sign-in providers: basic profile information (name, email, photo) per your approved permissions.
- Payment processor: payment confirmation, card type, last four digits, and billing ZIP code.
- Institutions: if your university or employer enrolls you on an institutional plan, it may provide your name, email, and program or team.
2.4 Information we don't want
3How We Use Information
| Purpose | Information used |
|---|---|
| Creating and managing your Account, authenticating you | Account, device |
| Providing the Service: generating questions, running mock interviews, reviewing resumes, giving feedback, Live Assist | Professional, session content, audio and video |
| Converting speech to text and text to speech | Audio, transcripts |
| Saving your history and tracking progress | Session content, usage |
| Processing payments, collecting taxes, handling refunds | Payment, account |
| Responding to support requests | Communications, account, relevant session content |
| Sending transactional messages (receipts, security alerts, renewal reminders, policy updates) | Account |
| Sending product news and offers (you can unsubscribe any time) | Account, usage |
| Securing the Service: detecting fraud, abuse, account sharing, and unauthorized access | Log, device, IP address |
| Analyzing usage and improving the Service | De-identified or aggregated usage data |
| Complying with law, enforcing our Terms, and protecting rights and safety | Any relevant information |
3.1 AI processing and model training
Limited human review. Authorized personnel may review a specific session only when you ask for support or report a problem, or when necessary to investigate abuse or a violation of our Terms.
3.2 Automated feedback
Scores and feedback are generated automatically for your personal practice. We do not provide them to employers or recruiters, and we do not use them to make decisions that produce legal or similarly significant effects on you.
3.3 De-identified data
We may create de-identified or aggregated data that cannot reasonably be linked to you. We maintain and use such data only in de-identified form and will not attempt to re-identify it, except to test our de-identification processes as permitted by law.
4Audio, Video, and Live Assist
You're in control. We access your microphone, camera, or screen only after you grant permission on your device and start a session. A visible indicator shows while capture is active. We never record in the background.
Live Assist. When Live Assist is active, audio is transcribed in near real time to generate suggestions. By default, we do not retain raw Live Assist audio after transcription. Transcripts are saved to your history only if you choose to save them.
Practice recordings. Mock interview recordings are stored so you can review them, and you can delete them at any time.
No biometric identifiers. We do not use your voice or face to identify you, and we do not create or store voiceprints, face geometry, or other biometric identifiers.
Other participants. A live conversation may include other people's voices. Under our Terms, you must obtain any consent required by law from all participants before using Live Assist.
5How We Disclose Information
5.1 Service providers
We use vendors that process personal information on our behalf under written contracts that restrict their use and require appropriate security.
| Vendor type | Purpose | Vendor(s) |
|---|---|---|
| Cloud hosting | Hosting the Service and storing data | Amazon Web Services / Google Cloud |
| AI model providers | Generating questions, answers, and feedback | OpenAI / Anthropic / Google |
| Speech services | Speech-to-text and text-to-speech | Deepgram / Microsoft Azure Speech |
| Payment processing | Payments and Subscription management | Stripe |
| Authentication | Sign-in and account security | Firebase Auth / Clerk |
| Email delivery | Transactional and marketing emails | Resend / Amazon SES |
| Analytics & error monitoring | Usage analysis and bug fixing | PostHog / Sentry |
| Customer support | Managing support requests | Intercom / Help Scout |
5.2 Institutions
5.3 Legal compliance and protection
- Comply with a law, regulation, subpoena, court order, or other legal process
- Enforce our Terms or investigate potential violations
- Detect, prevent, or address fraud, security, or technical issues
- Protect the rights, property, or safety of OfferlyIQ, our users, or the public
Where legally permitted, we will try to notify you before disclosing your information in response to legal process.
5.4 Business transfers
If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction. The recipient will be bound by this Policy or a policy at least as protective, and we will notify you of any material change.
5.5 With your consent
We may disclose information for other purposes at your direction — for example, if you share a practice report with a mentor.
6Data Retention
We retain personal information only as long as reasonably necessary for the purposes described in this Policy.
| Information | Retention period |
|---|---|
| Account information | While your Account is active |
| Resumes, transcripts, feedback, and practice recordings | While your Account is active, or until you delete them |
| Raw Live Assist audio | Not retained after transcription |
| Payment and transaction records | 7 years |
| Support communications | 3 years after the request is closed |
| Security and access logs | 180 days, or longer if needed to investigate an incident |
| Marketing preferences | Until you unsubscribe, plus a suppression record |
| Inactive Accounts | Deleted after 24 months of inactivity, after notice to you |
7Data Security
Encryption in transit
TLS 1.2+ for data in transit, AES-256 at rest
Access controls
Role-based, least-privilege access with audit logging
Multi-factor authentication
Required for internal systems holding personal data
Regular security reviews
Vulnerability scanning, dependency updates, security audits
Data separation
Production data isolated from development and testing
Staff training
Confidentiality obligations and security training for all staff
Breach notification. If a data breach affecting your personal information occurs, we will notify you and the appropriate regulators as required by applicable law.
To report a vulnerability, email security@offerlyiq.ai.
8Cookies and Tracking Technologies
| Type | Purpose | Optional? |
|---|---|---|
| Strictly necessary | Keep you signed in, maintain security, prevent fraud, and enable core features | No |
| Preferences | Remember settings such as theme and language | Yes |
| Analytics | Help us understand how the Service is used so we can improve it | Yes |
You can manage optional cookies from Cookie Settings in our website footer or through your browser settings. Blocking strictly necessary cookies may cause parts of the Service to stop working.
Global Privacy Control. We honor GPC signals as a valid request to opt out of the sale or sharing of personal information. Because we do not sell or share personal information, the signal will not change how the Service works for you.
9Your Choices and Rights
9.1 Choices available to everyone
Access & download
Settings → Privacy → Download My Data
Correct your profile
Settings → Profile at any time
Delete your account
Settings → Account → Delete Account
Toggle AI model improvement
Settings → Privacy
Unsubscribe from marketing
Link in any email
Withdraw device permissions
Your device or browser settings
9.2 Additional rights (certain U.S. states)
Depending on where you live — including California, Colorado, Connecticut, Delaware, and other states with comprehensive privacy laws — you may have additional rights:
- Know and access the personal information we have collected about you
- Obtain a portable copy of your personal information
- Correct inaccurate personal information
- Delete personal information we have collected from you
- Opt out of the sale of personal information and profiling that produces legal effects (we do not engage in these activities)
- Not be discriminated against for exercising your rights
9.3 How to submit a request
10 business days
Confirmation within
45 days
Response within
+45 days
Extension (if needed)
9.4 California-specific disclosures (CCPA)
| CCPA Category | Examples | Disclosed to |
|---|---|---|
| Identifiers | Name, email, IP address, account ID | Service providers |
| Customer records | Name, billing address, limited payment info | Payment processor, service providers |
| Commercial information | Subscription and purchase history | Payment processor, service providers |
| Internet / network activity | Usage data, logs, device information | Hosting, analytics, error-monitoring providers |
| Approximate geolocation | City and state from IP | Hosting and analytics providers |
| Audio, electronic, or visual | Practice recordings, Live Assist audio, optional webcam video | Hosting, speech, and AI providers |
| Professional / employment | Resume, work history, target roles | Hosting and AI providers |
| Education information | Degrees, schools, coursework from your resume | Hosting and AI providers |
| Inferences | Practice scores, strengths, improvement areas | Hosting provider |
| Sensitive personal info | Login credentials; any sensitive details in uploads | Hosting and authentication providers |
10Children's Privacy
The Service is intended only for people 18 and older.
We do not knowingly collect personal information from children under 13 (COPPA) or anyone under 18. If you believe a minor has provided us with personal information, contact privacy@offerlyiq.ai and we will delete it promptly.
11International Users
OfferlyIQ is based in the United States. If you access the Service from outside the U.S., your information will be transferred to, stored, and processed in the United States and other countries where our service providers operate. Data protection laws in those countries may differ from the laws where you live.
12Changes to This Policy
We may update this Policy from time to time. The "Last Updated" date at the top shows when it was last revised.
13Contact Us
OfferlyIQ, Inc.
Attn: Privacy
United States