Privacy Policy

1. Introduction

Interview Sparring is operated by Ezequiel Carrizo (Tenerife, Spain) ("we", "us", "our"). We are committed to protecting your privacy. This Privacy Policy explains what information we collect when you use interviewsparring.com ("Service"), how we use it, and your rights as a data subject under the General Data Protection Regulation (GDPR) and applicable Spanish law.

2. Information We Collect

Account Information

When you register, we collect your email address and a hashed password. If you sign in via OAuth (Google), we receive your name and email from that provider.

Content You Upload

Resumes/CVs, job descriptions, and STAR stories you upload are stored to provide the AI coaching features. This content is stored in AWS S3 and DynamoDB, associated with your account.

Session & Usage Data

We record metadata about your interview sessions (start time, duration, question count, scores) to power your dashboard and debrief reports. Audio during real-time sessions is streamed to OpenAI for transcription and coaching — it is not stored by us.

Analytics Data

We use PostHog to collect anonymized usage analytics (pages visited, features used, session counts). This is only activated with your consent via the cookie banner. All form inputs and passwords are masked and never recorded.

Billing Data

Payment is handled by Stripe. We do not store your credit card details. We store only your Stripe customer ID to manage your subscription and billing history.

3. How We Use Your Information

We use your information for the following purposes:

• To provide and improve the Service
• To process payments and manage subscriptions
• To generate AI coaching feedback during interview sessions
• To send transactional emails (email verification, password reset)
• To analyze usage patterns and improve product quality (with consent)
• To enforce our Terms of Service

We do not sell your personal data to third parties. We do not use your content to train AI models.

4. Third-Party Services

We use the following third-party processors:

5. Cookies & Tracking

We use cookies and local storage for:

• Authentication: A JWT stored in localStorage to keep you signed in (essential, no consent required)
• Analytics: PostHog tracking cookies to understand feature usage (optional, requires consent)
• Preferences: Theme and language settings stored in localStorage (essential)

You can decline analytics cookies using the cookie banner shown on your first visit. Essential cookies cannot be disabled as they are required for the Service to function.

6. Data Retention

We retain your account data for as long as your account is active. Session metadata is retained to power your history and dashboard. Uploaded documents are retained until you delete them or your account is deleted.

Upon account deletion, all personal data is permanently removed within 30 days.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Portability — receive your data in a machine-readable format
• Object to processing for analytics purposes
• Withdraw consent at any time (for optional processing)

To exercise these rights, contact us at support@interviewsparring.com. We will respond within 30 days.

8. Data Security

We use industry-standard security measures: HTTPS for all data in transit, encrypted storage on AWS, IAM least-privilege access controls, and password hashing with bcrypt. While we take reasonable precautions, no system is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

The Service is not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. International Transfers

Your data is processed and stored on AWS infrastructure. As the data controller is based in Spain (EU), your data is processed within the EU/EEA wherever possible. Some sub-processors (OpenAI, PostHog) may process data outside the EEA. We rely on Standard Contractual Clauses (SCCs) and appropriate safeguards to ensure your data remains protected.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes by email or via an in-app notice at least 7 days before the change takes effect. Your continued use of the Service after changes take effect constitutes acceptance.

12. Contact

For privacy-related requests or questions, contact us at: support@interviewsparring.com

Ezequiel Carrizo
Tenerife, Spain