Privacy Policy

About Us

Interview Clarity is a UK-based service committed to protecting your privacy and complying with UK GDPR (General Data Protection Regulation) and the Data Protection Act 2018.

What data we collect

When you create an account and use Interview Clarity, we collect:

• Your name and email address (used to create and manage your account)
• CV content you create — work history, skills, qualifications, and achievements
• STAR examples and career stories you write within the app
• Interview session data — questions, answers, scores, and AI feedback
• Payment information — handled entirely by Stripe; we store only your Stripe customer ID and subscription status
• Theme and display preferences
• Usage data to help us improve the product

How we use your data

We use your information to:

• Provide and operate the Interview Clarity service
• Generate AI-powered CV scoring, STAR analysis, and interview feedback
• Manage your subscription and process payments via Stripe
• Send you important account and service communications
• Improve our product based on aggregated, anonymised insights

Content you submit (CV blocks, STAR examples, interview answers) is sent to OpenAI's API to generate AI feedback. OpenAI processes this data in accordance with their data processing terms. We do not use your content to train AI models.

Data sharing

We will never sell your personal data or share it with third parties for their marketing purposes. We use the following trusted service providers to operate the platform, each bound by strict data protection agreements:

• Neon — cloud database hosting (EU/US region)
• Railway — application hosting
• Stripe — payment processing
• OpenAI — AI-powered feedback generation

Data security

Sensitive career data — your STAR examples and saved job details — is encrypted at rest using AES-256-GCM encryption before storage in our database. All connections use TLS. We apply the principle of least privilege throughout our infrastructure.

Data retention

We retain your data for as long as your account is active. If you delete your account, your personal data and all associated content will be permanently deleted from our systems within 30 days, except where we are required to retain it for legal or financial compliance purposes.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent at any time
• Object to processing of your data
• Data portability — receive your data in a structured, machine-readable format

How to contact us

If you have any questions about your data or wish to exercise your rights, please email us at [email protected]. We will respond within 30 days.

Updates to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. Where changes are material, we will notify you by email or through the product.