Privacy Policy

Who we are

HireInterviewAI provides live, adaptive, proctored AI technical interviews — voice, an in-browser code editor, and chat — and reports per-concept skill depth across engineering domains. This policy explains what we collect, why, and the rights you have over that data. It applies to our website and the interview platform.

We act as a processor on behalf of the hiring organization for candidate interview data, and as a controller for the account data of the organizations and HR users who use the platform.

Data we collect

Organization & HR account data

Names, work email addresses, organization name, role, authentication credentials, billing details (processed by our payment provider), and product usage needed to operate accounts, workspaces, and wallets.

Candidate interview data

When a candidate takes an interview we capture the evidence that makes the evaluation defensible:

• Interview transcripts (the conversation between the candidate and the AI interviewer)
• Code the candidate writes and submits in the in-browser editor
• Voice / audio of spoken answers
• Screen recordings of the interview session
• Proctoring signals and snapshots (e.g. focus changes, anomaly events)

How we use data

We use the data above to deliver and operate the interview, generate per-concept skill reports, run proctoring and integrity checks, provide the evidence trail to the hiring organization (and to the candidate via their evidence link), prevent abuse, process payments, and meet legal obligations. We do not sell personal data, and we do not use candidate interview content to train third-party foundation models.

Legal bases

Where GDPR applies, we rely on: contract (to provide the service to organizations and run the interview a candidate has been invited to); legitimate interests (security, fraud and integrity, improving the product); consent where required (collected by the hiring organization before an interview — see below); and legal obligation (tax, accounting, lawful requests). Under India's DPDP Act, processing is carried out for the stated, lawful purposes with notice and the consent obtained by the organization.

Sub-processors

We use a small set of trusted infrastructure and service providers to run the platform. Each processes data only as needed for the purpose below.

Your rights

Subject to applicable law (GDPR and India's DPDP Act), you can exercise the following rights over personal data:

• Access. Candidates can review the evidence captured about them — transcript, submitted code, recordings, and proctoring signals — directly via the token-authenticated evidence link issued with their interview. This implements the access right under DPDP §11 / GDPR Art. 15.
• Correction. Ask us to correct inaccurate account information.
• Deletion. Request deletion of personal data. For candidate interview data, we route the request to the hiring organization on whose behalf we hold it, and delete on confirmed request.

To exercise any of these, email privacy@hireinterviewai.com. If your data was collected by a hiring organization, we may direct you to them as the controller.

Data retention

Account data is retained while the organization's account is active. Candidate interview data — including recordings and proctoring evidence — is retained for the hiring organization's review window and then deleted on the organization's instruction or on a verified deletion request. Billing records are kept as required by law.

International transfers

We host primarily on Google Cloud and route traffic through Cloudflare's global edge. Some sub-processors (e.g. Anthropic, AssemblyAI) are based in the United States, so data may be processed outside your country. Where required, transfers are made under appropriate safeguards such as Standard Contractual Clauses.

Cookies

We use a minimal set of cookies and similar technologies that are strictly necessary to run the application — for authentication (keeping you signed in), security (CSRF/abuse protection), and preserving your session during an interview. We do not use advertising or cross-site tracking cookies. You can block cookies in your browser, but strictly-necessary cookies are required for the platform to function.

Security

Data is encrypted in transit (TLS) and at rest. The platform runs on Google Cloud behind Cloudflare's edge (WAF and TLS), with tenant isolation so each organization's data — and the candidate evidence within it — is scoped to that organization. For the full picture see our Security & Trust page.

Changes to this policy

We may update this policy as the product and our obligations evolve. Material changes will be reflected by an updated date at the top of this page.