1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

2. What Data Do We Collect?

We collect the following data when you use our service:

• Account Data: Email address, name (via Hanko authentication)
• Interview Data: Interviews created by you, chat messages, interview descriptions
• Payment Information: Processed exclusively via Stripe (see below)
• Usage Data: Credits status, access times
• Cookies: Technically necessary cookies for authentication

3. Third-Party Services

Hanko (Authentication)

We use Hanko for authentication. Hanko processes your email address and provides JWT tokens for secure login. More information: Hanko Privacy

Stripe (Payment Processing)

Payments are processed via Stripe. We do not store any payment information. Stripe processes payment data in accordance with PCI-DSS standards. More information: Stripe Privacy

LLM Processing (Interview Chat)

Interview conversations are processed by a language model (LLM). Your chat data is only used to provide the service.

FastEmbed (Local Processing)

For semantic search, we use local FastEmbed. Your data does not leave our server for embedding generation.

4. Purpose of Data Processing

We process your data exclusively for:

• Providing the interview training service
• Authentication and account management
• Processing payments (credits)
• Improving service quality

5. Legal Basis

Processing is based on Art. 6 Para. 1 lit. b GDPR (contract fulfillment) and Art. 6 Para. 1 lit. f GDPR (legitimate interest in providing the service).

6. Storage Duration

Your data is stored as long as you use your account. After deleting your account, all personal data will be deleted within 30 days.

7. Your Rights

You have the following rights:

• Access: Right to information about your stored data
• Rectification: Right to correction of inaccurate data
• Erasure: Right to deletion of your data ("right to be forgotten")
• Restriction: Right to restriction of processing
• Data Portability: Right to receive your data in structured format
• Objection: Right to object to processing

To exercise your rights, please contact us using the contact details provided in the imprint.

8. Data Security

We implement technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. These include: encryption (HTTPS/TLS), secure database access, regular backups, and access control.

9. Cookies

We exclusively use technically necessary cookies for authentication. These cookies are required for the website's functionality and cannot be deactivated. No tracking or marketing cookies are used.

10. Changes to this Privacy Policy

We reserve the right to update this privacy policy to reflect changes in legal requirements or service modifications. The current version can always be found on this page.

11. Privacy Contact

For privacy-related questions, please contact us using the contact details provided in the imprint.