Privacy Policy

Who we are

Preploy is an AI-powered mock interview practice service. When this policy says “Preploy,” “we,” “us,” or “our,” it refers to the individual operating the service. Questions or requests about your data can be sent to support@preploy.tech.

What data we collect

We only collect data necessary to provide and improve the service.

• Account information — your name, email, and profile picture, provided by Google OAuth. We do not collect your Google password.
• Interview sessions — configuration, status, and timestamps of each practice session you run.
• Transcripts — text transcripts of your spoken answers. Audio chunks are sent to OpenAI for transcription and are not retained by us after transcription.
• Code snapshots — code you write during technical interviews, including edits, runs, and submissions.
• AI feedback — scores, summaries, strengths, and weaknesses generated by OpenAI based on your transcripts and code.
• STAR stories — structured behavioral stories you write, along with any AI analysis of them.
• Resumes — the text content of any resume you upload. The original file is not retained after text extraction.
• Interview plans, saved questions, templates — company names, roles, target dates, and reusable session configurations.
• Usage counters — how many practice interviews you have run in the current billing period.
• Billing metadata — Stripe customer and subscription IDs, current plan, subscription dates. We never store full payment card numbers; Stripe handles all card data.
• Achievements — badges earned through platform usage.
• Error reports — if Sentry is configured, anonymized stack traces and request metadata may be sent when the app encounters an unexpected error.

How we use your data

• To provide the core service: conducting mock interviews, generating feedback, and displaying your history.
• To enforce usage limits and manage your subscription.
• To diagnose bugs and improve the service.
• To respond to support requests.

We do not sell your data. We do not use your data for advertising. We do not use your transcripts or stories to train AI models beyond what is described in OpenAI’s API data usage policy.

Third-party processors

Running the service requires sharing data with the following processors. Each has its own privacy policy.

• Supabase — hosts our PostgreSQL database. All data listed above is stored on Supabase-managed infrastructure.
• Vercel — hosts the web application, serves pages via CDN, runs serverless functions, and stores application logs. Servers are located in the US (primary region: iad1). Vercel may receive request metadata including your IP address and browser user agent.
• OpenAI — receives audio chunks (for transcription), interview questions, and your answers/code for feedback generation. OpenAI’s API data usage policy applies; by default, API inputs are not used to train OpenAI models.
• Google — used solely for sign-in (OAuth 2.0). Google provides your name, email, and profile picture. We do not share your interview data back to Google.
• Stripe — handles all payment processing for Pro subscriptions. Stripe receives your name, email, and payment method details. Preploy never sees or stores your full card number.
• Sentry — (optional) receives anonymized error reports and request metadata when the application encounters an unexpected error. Only active if Sentry credentials are configured.

If you are located in the EU or UK: your data is processed in the United States by the processors above. The lawful basis for this transfer is your consent (by using the service) and our legitimate interest in operating it.

Cookies and local storage

We use a single essential cookie for authentication (your NextAuth session). We do not use tracking cookies, advertising cookies, or third-party analytics cookies. Your browser may cache static assets we serve; that caching is not personalized.

Data retention

We retain your data for as long as your account is active. If you delete your account, all associated personal data is hard-deleted from our database within 30 days. Backup snapshots containing residual data may persist up to an additional 30 days before being overwritten.

Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data (e.g., via your profile page).
• Delete your account and associated data.
• Export a copy of your data in a machine-readable format.
• Object to certain types of processing.

To exercise any of these rights, email support@preploy.tech. We will respond within 30 days.

Children’s privacy

Preploy is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. Material changes will be announced on the service and take effect 14 days after the updated policy is posted. Your continued use of the service after that date means you accept the revised policy.

Contact

For any privacy question, request, or complaint, email support@preploy.tech.