Privacy Policy

Effective date: July 23, 2026

This Privacy Policy explains what information InterviewMe (“we”, “us”) collects, how we use and share it, and the choices you have. It applies to the InterviewMe website and services (the “Service”) and is incorporated into our Terms of Service. InterviewMe is the controller of the personal information described here.

1. Information we collect

Account information. Your email address, display name, profile handle, and password. Passwords are stored only as salted argon2 hashes — we cannot read them.

Profile content you provide. Documents, résumés, professional highlights, portfolio items and images, links, profile photos and background images, testimonials, and the answers you give during onboarding. Contact details you add (such as phone or address) are encrypted at rest and shown only per your visibility settings.

Communications. Messages you send and receive on the platform, questions asked of profiles, and the AI-generated answers to them.

Payment information. Payments are processed by Stripe. We store subscription and invoice records, plan and token-balance information, and a reference to your Stripe customer record — never full card numbers.

Usage information. For profile owners we keep per-day aggregate counters of profile views, résumé downloads (by viewer tier and by résumé), questions asked, and the referring web domains that sent visitors. For recruiter searches we record the query, its results, and per-result interactions (position, profile opens, list adds, résumé downloads). For anonymous visitors who ask questions we store a keyed, one-way hash derived from the network address for rate-limiting and counting — not the address itself. Standard server logs are kept for security and operations.

We do not collect information from data brokers, and we do not run third-party advertising or tracking on the Service.

2. How we use information

• To operate the Service: hosting profiles, powering recruiter search, delivering messages, and processing payments and subscriptions.
• To generate AI answers and search indexes: material you provide is converted into text, embeddings, and summaries so a profile’s assistant can answer questions grounded in it.
• To show profile owners their own analytics, as aggregate counts and the disclosures described in Section 3.
• To protect the Service: spam classification of messages, rate limiting, abuse and fraud prevention, and moderation of reported content.
• To send transactional email (verification, notifications you have not opted out of, billing). We do not sell your information, and we do not send third-party marketing.

3. Disclosures that are part of how the Service works

These are deliberate product behaviors; using the relevant feature is agreement to them.

• Your public profile is visible to visitors according to your settings, including any settings that restrict résumé download or contact visibility (for example, to paying hirer accounts only).
• Questions and answers are visible to the profile owner. Every question asked of a profile — in chat or through recruiter tools — and the AI’s answer, including yes/no assessments, can be seen by that profile’s owner. Askers are identified to the owner only by category (signed-in or anonymous), never by name.
• Search queries are visible to the professionals they return. A profile owner (on the paid tier) may see the text of each search their profile appeared in, the position at which it appeared, and whether the searcher downloaded their résumé or added them to a list — never the searcher’s identity or organization.
• Owner analytics are aggregate. Profile owners see counts and recognized referrer sites — never the identity of any viewer or downloader.
• Testimonials you submit are displayed on the recipient’s profile, with your attribution, once the recipient places them.

4. Service providers

We share information with processors who handle it on our instructions: Stripe (payments), Amazon Web Services (email delivery and receiving), and AI model providers that process profile material and questions to produce embeddings and answers. Our search index and vector database run on infrastructure we operate. We may also disclose information where the law requires it or to protect the Service and its users, and in a merger or acquisition subject to this Policy.

5. Cookies

The Service uses a single first-party, HttpOnly session cookie to keep you signed in. We do not use third-party advertising or analytics cookies. Blocking the session cookie prevents signing in.

6. Retention and deletion

We keep your information while your account exists. Deactivation hides your profile without deleting data, and you can return. Deletion (available in Settings, with confirmation) is permanent: your profile, documents, portfolio, messages, questions, analytics counters, and search history are deleted in a single cascade, active subscriptions are canceled at the payment processor, and your entries in other users’ records (for example a recruiter’s search history) are anonymized so they no longer identify you. We retain what the law requires or a dispute reasonably needs: payment and invoice records, suppression-list entries needed to honor email opt-outs, and a deletion audit log that records only the counts of what was deleted. System notices expire and are purged automatically. Backups age out on a fixed schedule.

7. Security

We protect information with, among other measures: argon2 password hashing, encryption at rest for contact details, HttpOnly session cookies, transport encryption in production, entitlement checks on every gated action, and access limited to what operating the Service requires. No system is perfectly secure; notify us immediately of any suspected compromise of your account.

8. Your rights and choices

You can view and correct your profile and account information directly in the app, control visibility of your résumé and contact details in Settings, opt out of non-essential email (including testimonial invitations, via the suppression link), and deactivate or permanently delete your account in Settings. Depending on where you live you may have additional legal rights — access, portability, correction, erasure, restriction, or objection — and complaints may lie to your local supervisory authority. To exercise any right you cannot exercise in-app, contact us (Section 11) and we will respond as applicable law requires. We do not discriminate against you for exercising privacy rights.

9. Children

The Service is for adults. We do not knowingly collect information from anyone under 18; if we learn we have, we will delete it.

10. International use

The Service is operated from the United States, and information is processed there and in the locations of the processors listed in Section 4. Where the law requires safeguards for international transfers, we rely on our processors’ compliance frameworks and contractual commitments.

11. Contact

Privacy questions and requests may be sent to realhuman@interviewme.now or through the Messages feature of your InterviewMe account. We will respond to verified requests within the time applicable law allows.

12. Changes to this Policy

We may update this Policy. Material changes will be announced by system message or email at least 14 days before taking effect; the effective date above always reflects the current version. Continued use after the effective date constitutes acceptance.