Privacy policy
Your interview data belongs to you.
We collect only what is necessary to deliver personalised interview coaching. This page explains exactly what we collect, how we use it, who we share it with, and how to delete it.
For questions contact privacy@aicareermentor.co.uk.
Data we hold about you.
Profile context
CV text, target role details and interview goals you choose to save. Stored securely in your account.
Practice session data
Your answers, AI feedback, scores, voice delivery metrics and camera presence metrics from completed sessions you choose to save.
Microphone input
When you use voice mode, live transcription uses your browser's built-in speech recognition (Chrome/Chromium use Google, Edge uses Microsoft, Safari uses Apple; Firefox is unsupported). Separately, for filler-word and voice-delivery analysis, a short audio clip is sent to OpenAI's Whisper API, transcribed, and then discarded — it is not stored on our servers. Voice mode is entirely optional; typed answers receive identical feedback and send no audio anywhere.
Camera input
Camera video processed locally in your browser for presence signals. Raw video frames are never sent to our servers or stored.
What your data is used for.
Your profile context (CV text, role details, goals) and practice answers are sent to OpenAI to generate personalised interview questions, feedback, scores, and session summaries. OpenAI is also used to generate spoken question audio (TTS) and to screen content through its moderation API. This is necessary to deliver the core coaching features.
We have disabled all data-sharing and training settings in our OpenAI account. OpenAI's API terms prohibit using API inputs to train models, and we operate under a Data Processing Agreement with OpenAI.
If you choose to save a session, your feedback and scores are stored in your account. Unsaved sessions are discarded at the end of the session.
Voice delivery metrics (pace, fillers, energy) are calculated locally in your browser from your answer text. They are not derived from audio files sent to a server.
Camera presence signals are generated locally in your browser using MediaPipe (a client-side library). No video frames are ever transmitted to our servers or to any third party.
Rate limiting uses Upstash Redis to store anonymised request identifiers only — no personal data or content is stored there. Error monitoring via Sentry receives crash reports with PII scrubbing applied to prevent interview or CV content from appearing in logs.
Your data is never used to train AI models, never sold to third parties, and never shared with employers.
Who we share your data with.
We use the following trusted sub-processors to deliver the platform.
OpenAI
Generates interview questions, feedback, scores, model answers, and audio question prompts (TTS). Also used for content moderation. Your CV text, role details, and practice answers are sent to OpenAI's API to deliver these features. We have disabled all data-sharing and model-training settings in our OpenAI account — OpenAI's API terms prohibit using API inputs to train models. Data is processed under a Data Processing Agreement.
Clerk
Handles authentication, account management and session tokens for both candidates and hiring teams. Stores your email address, name, and account metadata. No interview content or CV data is stored by Clerk.
Neon / PostgreSQL
Stores your saved practice sessions, scores, feedback, candidate profile context, and corporate assessment data in a managed PostgreSQL database hosted on AWS eu-west-2 (London, UK).
Stripe
Handles payment processing for individual and corporate subscriptions. Receives your email address and billing details. No interview content, CV data, or assessment responses are ever shared with Stripe.
Resend
Sends transactional emails such as assessment invite links, account notifications, and result emails. Receives your email address only — no CV content, interview answers, or assessment scores are included in any email.
Upstash Redis
Provides in-memory rate limiting across API endpoints to protect the platform from abuse. Receives anonymised request identifiers (a hash of your IP address or user ID) only — no personal content, CV data, or interview answers are stored.
Sentry
Error monitoring and alerting. When an unexpected application error occurs, Sentry receives a crash report that may include a stack trace and partial request context. We apply PII scrubbing rules to prevent CV content, interview answers, or personal profile data from appearing in error logs. Sentry does not receive audio or video data.
Vercel
Hosts and serves all pages and API routes for the AI Career Mentor platform. Collects anonymous page-view analytics and Core Web Vitals via Vercel Analytics and Speed Insights — no personal identity data is captured by these tools.
How long we keep your data.
Profile context — Stored until you delete it from your profile or delete your account. You can clear CV text, role context or goals individually.
Saved practice sessions — Stored until you delete them individually or bulk-delete all sessions from your profile page.
Voice and camera data — Processed in your browser only. Never stored on our servers.
Account data — Managed by Clerk. Deleting your Clerk account removes authentication access. Contact us to request full data deletion.
Control your data.
Under UK GDPR and applicable data protection law, you have the following rights.
Access your data
You can export your profile and saved sessions at any time from your profile page.
Delete your data
You can delete all saved sessions and your full candidate profile from the Privacy & data controls section on your profile page.
Correct your data
You can update your CV context, role details and interview goals at any time from your profile.
Withdraw consent
You can stop using the platform at any time. Deleting your account removes access to your data.
To exercise any of these rights, use the data controls on your profile page or contact privacy@aicareermentor.co.uk. We will respond within 30 days.
Cookies and analytics.
AI Career Mentor uses essential cookies for authentication (set by Clerk). We do not use advertising cookies or third-party tracking.
We collect anonymous page-view data and Core Web Vitals via Vercel Analytics — no personal identity is captured.
If we introduce additional analytics in the future, this page will be updated and you will be informed.