Privacy Policy
Last updated: July 2026
1. Who We Are
Intervizly ("Intervizly", "we", "us", or "our") is an AI-powered mock interview platform, operated from India. Our platform helps job seekers practise interviews through voice-based AI conversations and receive detailed feedback reports.
This Privacy Policy explains how we collect, use, share, and protect your personal data when you use our website and services (the "Platform"). It is designed with reference to India's Digital Personal Data Protection Act, 2023 (DPDP Act).
By using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
2. Data We Collect and Why
We collect only what is necessary to provide the service. Here is a complete account of every category of personal data we hold:
| Data | Source | Why We Need It |
|---|---|---|
| Name, email address, profile photo | Google OAuth on sign-up | Create and identify your account; send you transactional emails (feedback reports, welcome email, streak reminders) |
| Spoken interview answers (live speech-to-text transcripts — no audio is recorded or stored) | Captured during live interview sessions | Evaluate your answers in real time; generate your feedback report; identify topics to practise. We automatically strip email addresses, phone numbers, and URLs from transcripts before storage or AI processing. |
| Job description, company name, role, years of experience | Entered by you during interview setup | Generate role-specific interview questions tailored to the target job. Job description text is scrubbed of email addresses, phone numbers, and URLs before storage or AI processing. |
| Resume / CV text | Optionally uploaded or pasted by you | Personalise questions to your actual projects and experience. Before use, we automatically strip email addresses, phone numbers, and URLs from the text. Resume text is never stored in our database — it is processed in memory during question generation and then discarded. |
| AI coach chat messages | Typed by you when chatting with the post-interview AI coach | Answer your follow-up questions about your performance. Scrubbed of email addresses, phone numbers, and URLs before being sent to our AI provider. Not persisted after your session ends. |
| Interview scores, strengths, gaps, feedback narrative | Generated by AI after each session | Show you your performance report; track your improvement over time; compute your Focus Areas on the dashboard |
| Practice streak and session history | System-generated | Display your progress on the dashboard; send you streak-at-risk reminder notifications |
| Browser push notification token | Browser Web Push API (only if you opt in) | Send you streak reminders and re-engagement notifications. You can revoke permission in your browser settings at any time. |
| Device fingerprint | Generated client-side by FingerprintJS (open-source, no external lookup) on your first dashboard visit | A soft anti-abuse signal to help detect duplicate accounts. Deleted when you delete your account. |
| App experience feedback (star rating + suggestions) | Optionally submitted after each session | Improve the product. Entirely optional. |
3. Legal Basis for Processing
Under the DPDP Act, we rely on the following legal grounds:
- Consent — You actively sign in with Google and agree to these terms, thereby consenting to processing your name, email, interview content, and feedback.
- Legitimate interests — We retain anonymised authentication records (without any personal profile data) to prevent system abuse (e.g., repeatedly circumventing rate limits via duplicate accounts). This retention is the minimum necessary and does not materially affect your privacy.
4. Third-Party Services That Receive Your Data
We use the following sub-processors. By using Intervizly, you acknowledge that your data may be transferred to and processed by these services:
| Service | Purpose | Data Sent | Privacy Policy |
|---|---|---|---|
| Anthropic (Claude) | Generate interview questions, evaluate answers, and power the post-interview AI coach chat | JD text, resume text (transient), interview transcripts, company/role, coach chat messages | anthropic.com/privacy |
| Deepgram | Real-time speech-to-text transcription | Live audio stream from your microphone during the interview | deepgram.com/privacy |
| ElevenLabs | AI interviewer voice synthesis | Question text strings (no personal data) | elevenlabs.io/privacy |
| Supabase | Database and authentication | All account and interview data (hosted on Supabase infrastructure) | supabase.com/privacy |
| Resend | Transactional email delivery | Your name, email, and interview scores (for report email) | resend.com/privacy |
| PostHog | Product analytics | Page view events and URLs (may include session IDs) | posthog.com/privacy |
| Sentry | Error monitoring | JavaScript error stack traces (may include page URLs) | sentry.io/privacy |
| Vercel | Application hosting | HTTP request logs (IP addresses, headers) | vercel.com/legal/privacy-policy |
5. Data Retention
- Active accounts: All personal data is retained for the lifetime of your account.
- After account deletion — what is deleted: Your name, email address, profile photo, interview transcripts, feedback reports, session history, focus area analysis, referral relationships, push notification tokens, and device fingerprint are permanently deleted immediately (no more than 30 days) upon your request.
- After account deletion — what is retained:
- Authentication record — a minimal technical record (no name, email, or profile data) is retained indefinitely to prevent the same identity from re-registering to circumvent rate limits or other abuse protections.
6. Public Report Sharing
When you share your interview report, a unique link is generated (e.g., intervizly.com/report/abc123). Anyone with this link can view your full report — including your scores, strengths, gaps, and quotes from your answers — without logging in.
This link never expires. Share it only with people you trust. You cannot revoke a shared link once distributed, but you can delete your account to permanently remove the underlying report data (the link will then return a “not found” error).
7. Cookies and Analytics
We use session cookies set by Supabase to maintain your login state. We do not use advertising or third-party tracking cookies. PostHog analytics uses a first-party cookie stored in your browser's localStorage to count unique visitors. You can disable cookies in your browser settings, though this will prevent you from staying logged in.
8. Children's Privacy
Intervizly is intended for users who are 18 years of age or older. We do not knowingly collect data from children under 18. If you believe a minor has created an account, please contact us immediately and we will delete the account.
9. Data Security
We implement the following technical and organisational measures to protect your data:
- All data is encrypted in transit (TLS 1.2+) and at rest (AES-256 via Supabase).
- Row-Level Security (RLS) ensures database queries are scoped to the authenticated user — you can only access your own data.
- Deepgram API keys issued to browsers are short-lived (2-hour expiry) and scoped to transcription only.
- Access to production infrastructure is restricted to authorised personnel.
In the event of a data breach that is likely to result in a risk to your rights, we will notify affected users and, where legally required, the relevant authorities without undue delay.
10. Your Rights
Under India's DPDP Act 2023, you have the following rights:
You can view all your personal data on your dashboard and account page. You may also contact us to request a full data export.
Your name and email are sourced from your Google account. To correct them, update your Google account and reconnect. Contact us for any other corrections.
You can delete your personal data at any time from your Account Settings page. The following is permanently deleted: your name, email, profile photo, interview transcripts, feedback reports, session history, focus area analysis, referral relationships, push notification tokens, and device fingerprint.
The following is retained even after deletion, for the reasons stated:
- Authentication record — to prevent re-registration under the same identity to circumvent rate limits or other abuse protections (fraud prevention, legitimate interest).
Contact us to request an export of your data in machine-readable format (JSON/CSV).
You may withdraw consent at any time by deleting your account. This does not affect the lawfulness of processing carried out prior to withdrawal.
You may file a grievance with our Grievance Officer (see Section 12). If unresolved within 30 days, you may escalate to the Data Protection Board of India once constituted.
11. Cross-Border Data Transfers
Your data may be processed by our sub-processors (Anthropic, Deepgram, ElevenLabs, Resend, Vercel) whose servers are located in the United States and other countries. These transfers are necessary to provide the service. We rely on the contractual safeguards provided by each sub-processor. By using the Platform, you consent to these transfers.
12. Grievance Officer
As required under the DPDP Act 2023 and the IT Act 2000, we have designated a Grievance Officer to address any concerns regarding the processing of your personal data:
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email (if you have an active account) and by posting a notice on the Platform at least 14 days before the changes take effect. Your continued use of the Platform after that date constitutes acceptance of the updated policy.
14. Contact Us
For any privacy-related questions, data export requests, or to exercise your rights, contact us at: intervizly@gmail.com
This policy should be read alongside our Terms of Service.