Privacy Policy

1. Information We Collect

Information you provide directly:

• Account information: Name, email address, and password when you register.
• Interview content: Your spoken or written responses during mock interviews, including audio recordings that are transcribed and then discarded; only the text transcript is stored.
• Resume data: Documents or text you upload for resume review features.
• Payment information: Billing details processed by Stripe. We do not store raw card numbers — only a tokenized reference from Stripe.
• Support communications: Emails or messages you send to our support team.

Information collected automatically:

• Usage data: Pages visited, features used, interview completion rates, and session duration.
• Device and browser information: Browser type and version, operating system, screen resolution, and IP address (used for security and fraud prevention).
• Cookies and similar technologies: Session cookies for authentication and analytics cookies for understanding how users engage with the platform (see Section 8).

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service — including generating AI feedback, scoring your interviews, and saving your transcripts.
• Personalize your experience, such as recommending relevant companies or practice areas based on your activity.
• Process payments and manage your subscription.
• Send transactional emails (account confirmation, password reset, receipt of payment). We will only send marketing emails if you have opted in, and you can unsubscribe at any time.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our Terms of Service.
• Analyze aggregate, anonymized usage trends to improve the platform (never tied to individual identities).

We do not use your interview content or personal data to train AI models.

3. Data Sharing

We do not sell your personal data. We share data only in the following limited circumstances:

• Service providers: Trusted third-party vendors who process data on our behalf under strict data processing agreements. These include Stripe (payments), Vercel (hosting), PostHog (analytics), and OpenAI (AI inference for generating feedback). These providers may only use your data to perform services for us.
• Legal requirements: If required by law, subpoena, or court order, or to protect the rights, property, or safety of AcingIt, our users, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of our business, user data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our site before your data is transferred and becomes subject to a different privacy policy.

4. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

• Interview transcripts and feedback reports are retained indefinitely while your account exists, so you can review your history at any time.
• Audio recordings (voice mode) are processed in real time and deleted immediately after transcription — they are never stored on our servers.
• Billing records are retained for 7 years as required by financial regulations.
• When you delete your account, all profile data, transcripts, and interview history are permanently deleted within 30 days. Anonymized aggregate data (never tied to your identity) may be retained for platform analytics.

5. Security

We take security seriously and implement industry-standard protections:

• All data in transit is encrypted using TLS 1.3.
• All data at rest is encrypted using AES-256.
• Our database uses row-level security to ensure users can only access their own data.
• Passwords are hashed using bcrypt — we never store plaintext passwords.
• We conduct periodic security reviews and promptly address identified vulnerabilities.

No system is completely secure. If you believe your account has been compromised, contact us immediately at support@acingit.com.

6. Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete personal data.
• Deletion: Request that we delete your personal data ("right to be forgotten"). You can also do this yourself via Account Settings.
• Portability: Request your data in a structured, machine-readable format.
• Objection / Restriction: Object to or request restriction of processing for certain purposes, such as direct marketing.
• Opt out of sale (CCPA): California residents have the right to opt out of the sale of personal information. We do not sell personal information, but you may exercise this right by contacting us.
• Non-discrimination: We will not discriminate against you for exercising any of these rights.

To exercise any of these rights, email privacy@acingit.com. We will respond within 30 days. We may need to verify your identity before processing your request.

7. Cookies

We use the following types of cookies and similar technologies:

• Strictly necessary cookies: Required for authentication and to keep you logged in. These cannot be disabled without breaking core functionality.
• Analytics cookies: PostHog analytics cookies help us understand how users navigate the platform, which features are used most, and where drop-offs occur. This data is aggregated and anonymized.
• Preference cookies: Remember settings like your preferred interview mode (voice vs. text).

You can control non-essential cookies via your browser settings. Note that disabling cookies may affect certain features of the Service.

8. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have inadvertently collected data from a child under 13, we will promptly delete that data. If you believe we have collected information from a child under 13, please contact us at privacy@acingit.com.

9. International Data Transfers

AcingIt is operated from the United States. If you access the Service from outside the United States, your data will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to this transfer. For users in the European Economic Area (EEA) and United Kingdom, we rely on Standard Contractual Clauses as the legal mechanism for international data transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and/or by updating the "Effective Date" at the top of this page. We encourage you to review this policy periodically. Your continued use of the Service after changes take effect constitutes your acceptance of the updated policy.

11. Contact

For privacy-related questions, data requests, or concerns, contact our privacy team: