Privacy Policy

Effective October 1, 2026

PanelPrep ("we") runs mock interviews. To do that we store personal data you give us. This policy explains what we store, why, who processes it on our behalf, and how you can get it back or delete it. We do not sell your data and we do not share it with third parties for their own purposes.

1. What we collect

  • Account: your email address (used as your sign-in), optional name and profile picture if you sign in with Google, timestamps of when you accepted these terms, and your marketing-email preference.
  • Interview setup: company name, role, industry; job descriptions and resumes you paste, upload or link; interviewer names, titles, LinkedIn links and notes you enter; the research notes and committee brief we generate from them.
  • Interview content: your spoken or typed answers (as text), the panel's questions, audio clips of the panel's lines, coaching notes, retakes and the deliberation report.
  • Billing: purchase records (amount, date, Stripe identifiers), credit balance, promo codes you redeem. Card numbers never reach our servers; Stripe handles payment.
  • Usage and metering: token counts, audio seconds and cost of each AI call, so we can enforce session budgets and understand costs. Server logs with IP addresses are kept briefly for security.

Audio of your voice is processed to produce text and is not stored unless you use our transcription fallback, in which case the audio is sent to the transcription processor and discarded after transcription; only the text is kept.

2. Why we use it

  • To run your interviews: the job description, resume, panel and your answers are sent to our AI processor to generate questions, coaching and scoring for your session only.
  • To let you resume, review and export past interviews.
  • To bill you and prevent abuse of the free tier and promo codes.
  • To send account emails (sign-in codes, receipts). Marketing emails only if you opt in; unsubscribe anytime.
  • To improve the product using aggregate, de-identified statistics (for example average session length). We do not use your documents, transcripts or answers to train AI models, and our AI processor is configured not to train on them either.

3. Interviewer names you enter

If you enter real interviewers' names and titles, that is personal data about third parties. We use it only to build the simulation for your session, never to look those people up, contact them, or build profiles. Generated panels use fictional names. Please enter only what you need for practice.

4. Processors (who touches the data on our behalf)

We use these service providers under contracts that restrict them to processing data on our instructions:

  • Amazon Web Services (Amazon Bedrock), running Anthropic's Claude models: the AI that runs the panel, brief, coaching and scoring. Bedrock does not store prompts or outputs or use them to train models.
  • Anthropic: web research when we build a panel for you. Only the company, role, industry, a job description excerpt and any interviewer names you entered are sent, never your resume. Not used for training.
  • ElevenLabs (text-to-speech for the panel's lines)
  • Deepgram (speech-to-text when your browser cannot transcribe locally, or on the high-accuracy setting)
  • Convex (database and file storage) and Vercel (web hosting)
  • Stripe (payments) and Resend (transactional email)
  • Google (only if you choose to sign in with Google)

No one else receives your data unless the law requires it or you ask us to.

5. Retention

  • Account, documents, transcripts, briefs, coaching and reports: until you delete the interview or your account.
  • Panel audio clips: 30 days, then deleted automatically (the text remains).
  • Billing records: 7 years, as required for tax and accounting, in anonymized form after account deletion.
  • Deleted accounts: data is removed within 7 days of your request; backups expire within 30 days.

6. Your rights

From Settings you can export everything we hold about you as a JSON file, or delete your account. You may also email support@example.com to access, correct, export or delete your data, or to object to a particular use. If you are in the EU/UK you have these rights under GDPR; California residents have them under CCPA/CPRA. We do not "sell" or "share" personal information as those laws define it.

7. Security

Data is encrypted in transit and at rest by our hosting providers. Access to production data is limited to the people who operate the service. Sign-in uses one-time email codes or Google; we never store passwords.

8. Children

PanelPrep is for adults seeking employment. We do not knowingly collect data from anyone under 16.

9. Cookies

We use only the cookies needed to keep you signed in and, if enabled, a cookieless analytics tool that does not identify you. No advertising cookies.

10. Changes

If we change this policy in a way that affects you, we will email you before it takes effect. The effective date above tells you the current version.

Contact

support@example.com