Your privacy matters.

InterviewUp ("we", "our", or "us") provides an AI-powered interview practice, resume optimization, and career preparation platform. This Privacy Policy governs the processing of personal data across our public marketing website (https://www.interviewup.ai) and our interactive web application (https://www.app.interviewup.ai) (collectively, the "Services").

This policy outlines our commitments regarding how we collect, process, store, protect, and delete your personal information, practice answers, resumes, and evaluation reports. It also explains the privacy rights available to you under applicable data protection legislation, including the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the CPRA (CCPA), and India's Digital Personal Data Protection Act, 2023 (DPDP Act).

We collect personal information directly from you when you register, upload career documents, or participate in mock interview rounds; automatically through your browser or device interaction; and via verified service providers (such as authentication and payment processors).

The categories below summarize the data elements processed across our website and application. We only process data that is relevant to delivering the career preparation features you request.

• Spoken audio responses and generated speech-to-text transcripts.
• Written answers to technical, behavioral, and company-specific interview prompts.
• Code snippets, pseudocode, and system design submissions.
• Uploaded resumes, CVs, portfolios, and pasted job descriptions.
• AI-generated evaluation scores, performance feedback, and rubrics.
• Customization settings (target company, target seniority, focus areas).

We process personal information only for legitimate, transparent purposes and where authorized by a valid legal basis under applicable data protection laws.

• Deliver adaptive AI mock interview rounds tailored to your role and target company.
• Evaluate interview responses across clarity, structure, confidence, and technical accuracy.
• Analyze resume keywords, section formatting, and ATS compatibility against job descriptions.
• Manage user registration, authentication sessions, and password recovery via Firebase Auth.
• Facilitate subscription checkout, billing cycles, and invoice processing via Razorpay.
• Provide responsive product support, handle user inquiries, and resolve technical issues.
• Detect, prevent, and mitigate security threats, fraudulent activities, and platform abuse.
• Comply with statutory tax, financial, and regulatory legal recordkeeping obligations.

• Contractual Necessity: To create and maintain your account, conduct AI interview simulations, generate requested feedback, and process paid subscription access.
• Legitimate Interests: To safeguard our systems against malicious activity, monitor uptime, maintain service reliability, and debug technical issues.
• Legal Compliance: To maintain statutory financial, tax, and corporate records, and respond to lawful government requests.
• Consent: Where required by law, such as for voluntary surveys, optional promotional communications, or non-essential cookies.

Advisory Notice: InterviewUp provides practice simulations and automated feedback for personal career preparation. AI-generated evaluations and scores do not represent official hiring assessments or employment decisions on behalf of any company.

We do not sell, rent, or trade your personal information. We share information only with authorized service providers who process data strictly under our direction and subject to binding confidentiality and data protection agreements.

• Cloud & Infrastructure Providers: Google Cloud and Firebase provide secure hosting, real-time database management, file storage, and authentication.
• Payment Processors: Razorpay securely handles subscription payments, renewals, and invoice management under PCI-DSS Level 1 compliance.
• Enterprise AI Inference Providers: Trusted commercial AI engines process prompts, interview responses, and resume texts statelessly under enterprise terms.
• Legal and Regulatory Obligations: Disclosures made to law enforcement or regulators only when legally compelled by valid subpoena, court order, or applicable law.
• Corporate Transactions: In the event of a merger, acquisition, reorganization, or asset sale, user data may be transferred subject to equivalent privacy commitments.

We maintain a comprehensive technical and organizational security program designed to protect your personal data against accidental loss, unauthorized access, destruction, and disclosure.

• Encryption in transit across all endpoints utilizing TLS 1.3 / HTTPS.
• Encryption at rest for all database records and stored files using AES-256.
• Cloud infrastructure hosted in ISO 27001 and SOC 2 certified Google Cloud environments.
• Strict role-based access control (RBAC) ensuring internal staff access data solely on a need-to-know basis.
• Tokenized authentication via Firebase Auth, eliminating plain-text password storage.
• Zero retention of raw payment card numbers; all billing is processed through PCI-DSS Level 1 certified Razorpay.

While we implement robust safeguards, no method of transmission over the Internet or electronic storage is completely secure. We encourage you to use a strong, unique password, maintain the confidentiality of your sign-in details, and notify us immediately if you suspect unauthorized account access.

Depending on your jurisdiction, you have statutory rights concerning your personal information under laws such as the GDPR, UK GDPR, California CCPA/CPRA, and India DPDP Act 2023.

• Right of Access: Request a copy of the personal information and session history we hold about you.
• Right to Rectification: Correct inaccurate, out-of-date, or incomplete account details.
• Right to Erasure ('Right to be Forgotten'): Request the permanent deletion of your account and practice data.
• Right to Restrict or Object: Restrict specific processing activities or object to legitimate interest processing.
• Right to Data Portability: Receive your submitted materials in a structured, machine-readable format.
• Right to Withdraw Consent: Revoke previously granted consent without affecting past lawful processing.
• Right to Non-Discrimination: You will never be penalized, denied services, or charged different rates for exercising your privacy rights.

To exercise any of these rights, please submit a request through our contact portal or email info@interviewup.ai. We will verify your identity before processing requests and respond within the statutory timeframe (typically within 30 days).

Cookies and browser local storage enable essential functionality, maintain sign-in continuity, and deliver aggregated performance telemetry.

• Strictly Necessary / Authentication: Firebase Auth tokens and session identifiers required for sign-in and security.
• Functional & Preferences: Cookies that store your display settings, theme choices, and interview parameters.
• Performance & Analytics: Google Analytics 4 uses G-C2X628W5MK for platform telemetry and G-PX4Z9VG06R for public website page views. Website page-view URLs omit query strings.
• No Third-Party Advertising: We do not deploy third-party advertising cookies or cross-context tracking pixels.

You can configure your browser to reject all or some cookies, or to alert you when cookies are placed. Note that disabling strictly necessary cookies will prevent you from signing in to the InterviewUp web application.

InterviewUp integrates with reputable third-party technology providers to deliver AI simulation, secure checkout, and reliable cloud operations.

• Google Cloud Platform & Firebase: Cloud Firestore database, Firebase Authentication, and Cloud Storage.
• Razorpay Software Pvt. Ltd.: Secure payment processing for Pro and Elite plan subscriptions under PCI-DSS Level 1 compliance.
• Commercial AI Inference Providers: Enterprise AI APIs (such as Google Cloud Vertex AI / OpenAI API) used to generate interview questions and feedback.
• Google Analytics: Platform telemetry (G-C2X628W5MK) and public website page views (G-PX4Z9VG06R).
• Legal and Regulatory Authorities: Only when compelled by valid legal process or statutory obligations.

InterviewUp is intended exclusively for adults, university students, and job seekers who are at least 18 years of age (or the legal age of majority in their jurisdiction). We do not knowingly solicit, collect, or process personal data from children under 18 years of age (or under 13/16 where permitted by regional legislation).

If we become aware that we have inadvertently collected personal data from a child without verified parental authorization, we will take immediate steps to delete that information from our active records. If you believe a minor has created an account, please alert us immediately at info@interviewup.ai.

InterviewUp operates globally. Your personal information may be transferred to, stored, and processed in cloud environments located in countries other than your country of residence, including Google Cloud data centers in the United States, India, and the European Union.

When we transfer personal data across international borders from the European Economic Area (EEA), United Kingdom, or Switzerland, we ensure adequate protection through standard contractual safeguards recognized by applicable authorities, including the European Commission's Standard Contractual Clauses (SCCs) and enterprise Data Processing Addenda (DPAs).

We retain your personal data only for as long as necessary to provide the Services, support active accounts, and comply with applicable statutory obligations.

• Active Account Information: Account credentials, profiles, resumes, and interview histories remain accessible while your account is active so you can track preparation progress.
• Interview Recordings & Transcripts: Maintained in your private dashboard for practice review until deleted by you or upon account closure.
• Billing & Transaction Records: Retained for statutory tax and accounting retention periods as mandated by financial regulations and Razorpay guidelines.
• Account Deletion: You can initiate permanent account deletion directly through account settings in https://www.app.interviewup.ai or by contacting info@interviewup.ai. We will purge your personal data within 30 days of verified request, except where retention is legally required.

We may periodically revise this Privacy Policy to reflect platform updates, technical changes, or evolving legal and regulatory standards. When updates occur, we will revise the "Last updated" date at the top of this document.

For material changes that significantly affect your rights or data processing terms, we will provide prominent advance notice (such as via an in-app banner or an email notification) prior to the changes taking effect. We encourage you to review this policy periodically to stay informed about our data protection practices.

If you have questions, feedback, or concerns regarding this Privacy Policy, or if you wish to exercise your data protection rights, please reach out to us:

• Web Contact Portal: Submit inquiries directly via https://www.interviewup.ai/contact
• Contact Email: info@interviewup.ai
• Operating Entity: InterviewUp [Scalar TechHub Pvt.Ltd.]
• Grievance Officer (India DPDP Act): Data principals located in India may direct statutory grievances to our designated Grievance Officer at info@interviewup.ai.