Privacy Policy

This policy explains what personal data InterviewOS collects, why, who it's shared with, how long it's kept, and the rights you have over it.

Who we are

InterviewOS is a job-search platform: it scores companies and job listings against your resume, tracks your application pipeline, and offers optional 1:1 advisory sessions. This policy covers the InterviewOS website and product at interviewos.ai.

Information we collect

• Account information — name and email address when you create an account, and sign-in data if you use Google sign-in.
• Resume/CV contents — the documents you upload and the text, work history, and skills extracted from them, used to compute your fit scores and power AI review features.
• Job-search activity — companies you favorite, jobs you save or move through your pipeline, contacts you track, settings and preferences.
• Payment information — if you subscribe to Pro or book an advisory session, Stripe processes the payment. InterviewOS never receives or stores your card number, expiration date, or CVC — only a payment status and a Stripe-issued customer/subscription id.
• Usage analytics — product usage events (pages viewed, features used) tied to your account id, not your name or email. See Cookies & local storage below.
• Error diagnostics — when something breaks, technical details of the error (stack trace, browser, the page you were on) are sent to our error-tracking tool so we can fix it.
• Testing program membership — if you join our invite-only testing program (a separate consent checkbox at signup), your product activity and any feedback you submit may be associated with your invited test cohort by an internal cohort and membership id, not your name, so we can understand how the product is used. No session recording or screen capture. Leave anytime from Settings → Testing program → Leave program: new activity stops being associated with the cohort, though data already collected isn't deleted, and your CV data controls are unchanged. Any interviews or observed sessions are arranged separately, with their own consent.

How we use it

To run the product: compute your fit scores, show you matching companies and jobs, power AI resume review and outreach drafting, process subscription and advisory payments, keep the service reliable, and improve it based on aggregate usage patterns. We do not sell your personal data, and we do not use your resume contents to train third-party AI models.

Who we share it with

We use a small set of service providers (subprocessors) to run InterviewOS. Each only receives the data it needs to do its job:

• Supabase — our database and authentication provider (U.S.-hosted). Stores your account, resume contents, and application data.
• Stripe — payment processing for subscriptions and advisory sessions. Handles all card data directly; see Stripe's own privacy policy.
• Cloudflare — hosts the website and public pages and provides content delivery/DDoS protection.
• Sentry — error tracking, so we can detect and fix bugs.
• PostHog — product analytics. Session recording is off; we only send explicit product events and pageviews, and PostHog honors your browser's Do Not Track signal.
• Anthropic (Claude) — powers AI features: resume review and feedback, outreach message drafting, and meeting prep. Your resume text and prompts are sent to Anthropic's API to generate these results.
• OpenAI — generates the embeddings used to match your resume against job listings and companies (semantic search only, not a chat feature).

We may also disclose information if required by law, or to protect the rights, property, or safety of InterviewOS, our users, or others.

How long we keep it

• Account & application data — kept while your account is active, and deleted on request (see Your rights below). Deleting an account does not automatically delete retained CV data.
• Resume/CV documents and reviews — retained indefinitely by default, including after you delete your account, so you can recover your CV history if you come back. After account deletion, InterviewOS keeps a one-way hash of the verified email address. If the same address is used to create an account again, the CV page tells that account what was found and reattaches it only after the person signed in confirms — nothing is restored automatically, because confirming an email address proves control of the mailbox today, not that it is the same person. You can permanently delete all retained CV data at any time from Settings → Delete CV data: that removes the CV documents held under your account and the AI reviews of them, permanently and irreversibly. It does not reach the separate pre-signup record described in the next item.
• CVs submitted before you had an account — if you used the public CV review page without signing up, that CV, its extracted text and its review are kept indefinitely as a separate record. This is true whether or not you later create an account: signing up copies the CV into your account rather than moving it, so both copies exist and only the copy in your account is reachable from Settings. “Delete CV data” does not remove the separate record — email privacy@interviewos.ai to have it deleted.
• Job-listing data (the public company/job data that powers scoring, not your personal data) — active listings are refreshed daily; closed listings are purged after 60 days. Company-level hiring aggregates (e.g. the public Hiring Velocity Index) are retained indefinitely, since they contain no personal data.

Your rights

Regardless of where you live, you may request to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and associated personal data. Retained CV data is excluded unless you separately use Settings → Delete CV data or explicitly include it in your request.

To exercise any of these rights, email privacy@interviewos.ai. We'll respond as promptly as we can. This applies whether or not you're covered by a specific law like the EU/UK GDPR or the California CCPA/CPRA — we extend the same rights to every user.

Cookies & local storage

InterviewOS does not use tracking cookies. The app uses your browser's local storage to keep you signed in (your Supabase session token) and to remember interface preferences — theme, dismissed banners, saved filters, and similar UI state. These stay on your device and are not sent to third parties except as part of normal sign-in.

Children's privacy

InterviewOS is not directed at, and is not intended for use by, anyone under 16. We do not knowingly collect personal data from children.

Data location

Our database (Supabase) is hosted in the United States. If you access InterviewOS from outside the U.S., your data will be transferred to and processed in the U.S.

Changes to this policy

If we make material changes to this policy, we'll update the date below and, where appropriate, notify account holders by email.

Contact

Privacy questions or requests: privacy@interviewos.ai. General contact: contact@interviewos.ai.