Legal

Privacy Policy

Effective March 1, 2026

The short versionWe collect only what we need to run the service. We never sell your data. Your interview sessions are private and never shared with any employer. You can delete your account and all data at any time.

1. Who we are

PrepSense, Inc. operates the platform at prepsense.com. Privacy questions: [email protected].

2. Information we collect

Information you provide

Account info: name, email address, and password when you register.
Session data: professional background, target role, and job descriptions you enter during setup.
Interview content: audio recordings of your answers and webcam frames captured during sessions.
Communications: messages you send via the contact form or email.

Collected automatically

Usage data: pages visited, features used, session duration.
Device data: browser type, OS, IP address.
Cookies: see our Cookie Policy for details.

From third parties

Google OAuth: if you sign in with Google, we receive your name, email, and profile picture only.

3. How we use your information

Provide, operate, and improve the PrepSense service.
Transcribe your audio answers and generate AI feedback reports.
Analyse webcam frames for body language feedback (processed in real time, not stored permanently).
Send transactional emails such as account verification and password resets.
Respond to support requests and communications.
Detect and prevent fraud, abuse, and security incidents.

We never share your interview results with employersYour sessions are completely private. We do not use your recordings to train AI models without your explicit consent.

4. How we share your information

We do not sell, rent, or trade your personal data. We share data only in these limited cases:

OpenAI: audio is sent to OpenAI's Whisper API for transcription and GPT for feedback generation. We do not use your data to train OpenAI models.
Legal requirements: if required by law, court order, or governmental authority.
Business transfers: if PrepSense is acquired, your data may transfer to the successor entity under the same privacy commitments.

5. Data retention

Account data is kept while your account is active. Interview transcripts and feedback are retained for 12 months by default. Audio files and webcam frames are deleted within 24 hours of session completion. Request full deletion at any time: [email protected].

6. Your rights

You may have the right to access, correct, delete, or export your data. To exercise any right, email [email protected]. We will respond within 30 days.

7. International transfers

PrepSense is based in the United States. Data transferred from the EEA, UK, or Switzerland is protected by Standard Contractual Clauses.

8. Children's privacy

PrepSense is not directed at children under 16. We do not knowingly collect data from anyone under 16.

9. Changes to this policy

We will notify you of material changes by email or prominent notice on the platform at least 14 days before they take effect.

Privacy questions?

Email [email protected] or write to PrepSense, Inc., 123 Market St, San Francisco CA 94105.

Legal

Terms of Service

Effective March 1, 2026

The short versionUse the service for lawful purposes only. Don't abuse it, share your account, or reverse-engineer the AI. You own your content. We may suspend accounts that violate these terms.

1. Acceptance

By creating an account or using PrepSense, you agree to these Terms. If you do not agree, do not use the Service.

2. Eligibility

You must be at least 16 years old to use the Service and have the legal capacity to enter a binding agreement.

3. Your account

Provide accurate information when registering. You are responsible for all activity under your account. Notify us immediately at [email protected] if you suspect unauthorised access.

4. Permitted use

You may use PrepSense solely for lawful, personal interview preparation.

5. Prohibited conduct

Use the Service for any unlawful purpose.
Attempt to reverse-engineer or extract the AI models underlying the Service.
Scrape or systematically extract data using automated tools.
Impersonate another person or misrepresent your identity.
Upload or transmit malware, viruses, or malicious code.
Circumvent authentication, rate limits, or access controls.
Resell or sublicense access to the Service without written consent.

6. Intellectual property

The Service and all its components are owned by PrepSense, Inc. We grant you a limited, non-exclusive, non-transferable licence to use the Service for personal use.

7. Subscriptions & payments

Paid subscriptions are billed in advance monthly or annually. All fees are non-refundable except as required by law. We may change pricing with 30 days' notice.

8. Termination

Cancel your account anytime from account settings. We may suspend or terminate your account for violations of these Terms.

9. Disclaimers

The Service is provided "as is" without warranties of any kind. AI-generated feedback is for practice purposes only and is not professional career advice.

10. Limitation of liability

To the maximum extent permitted by law, our total liability for any claim shall not exceed the fees you paid us in the 12 months preceding the claim.

11. Governing law

These Terms are governed by the laws of Delaware, USA.

12. Changes

We may update these Terms at any time with at least 14 days' notice for material changes.

Legal questions?

Email [email protected].

Legal

Cookie Policy

Effective March 1, 2026

The short versionWe use cookies to keep you logged in and understand how the service is used. We don't use advertising cookies. You can control cookies through your browser settings.

1. What are cookies?

Cookies are small text files stored on your device when you visit a website. InterviewAI also uses browser localStorage and sessionStorage for similar purposes.

2. Cookies we use

Category	Name	Purpose	Duration
Essential	`iai`	Stores your auth token to keep you logged in	7 days
Essential	sessionStorage	Holds interview session state during a session	Session
Functional	`iai_prefs`	Remembers your display preferences	1 year
Analytics	`_iai_analytics`	Anonymous usage patterns to improve the product	90 days

No advertising cookiesWe do not use third-party ad cookies, tracking pixels, or any technology that tracks you across other websites for advertising.

3. Essential cookies

Essential cookies are required for the Service to work. You cannot opt out of these and continue to use the Service.

4. Analytics

We use privacy-respecting analytics to understand feature usage and improve the product. This data is anonymised and aggregated.

5. How to control cookies

Browser settings: most browsers let you view, delete, and block cookies.
Private mode: cookies set during private browsing are typically deleted when you close the window.
Clear manually: you can clear localStorage and cookies for prepsense.com from your browser's developer tools at any time.

Cookie questions?

Email [email protected].

Legal

Security

Last updated March 1, 2026

Our commitmentWe take the security of your data seriously. This page describes our security practices and how to report vulnerabilities responsibly.

Infrastructure & data storage

Data stored in SOC 2 Type II certified data centres in the United States.
Data at rest encrypted using AES-256.
All data in transit protected by TLS 1.2 or higher. HTTPS enforced across all endpoints.
Encrypted database backups retained for 30 days.

Authentication & access control

Passwords hashed using bcrypt with a cost factor of 12. Plaintext passwords are never stored.
Auth tokens are signed JWTs with a 7-day expiry stored in localStorage.
Google OAuth available as a more secure, passwordless login option.
Internal production access requires multi-factor authentication and follows least-privilege principles.

Interview data handling

Audio is sent to OpenAI's API over TLS and not stored on our servers after transcription.
Webcam frames are captured in-browser, used for analysis, and deleted within 24 hours.
Interview transcripts and feedback are stored encrypted and accessible only to the account holder.
Interview data is never shared with employers, recruiters, or any third party.

Application security

All interview API endpoints require authentication. Unauthenticated requests are rejected with HTTP 401.
Rate limiting on authentication endpoints to prevent brute-force attacks.
CORS configured to restrict cross-origin requests to authorised domains.
Dependencies regularly audited for known vulnerabilities.

Responsible disclosureIf you discover a security vulnerability, please report it to us privately before public disclosure so we can fix it promptly.

Reporting a vulnerability

Email [email protected] with a clear description, steps to reproduce, and any proof-of-concept. We will acknowledge your report within 48 hours and aim to resolve confirmed issues within 90 days.

Security concerns?

Email [email protected]. For urgent issues include "URGENT" in the subject line.

Report issue