Privacy Policy

Data controller

PassPrep.io is operated by the PassPrep team (UK). Contact: hello@passprep.io. If you'd like our registered legal entity details for a formal data request, email us and we will provide them.

1. What we collect

• Account data: email and authentication identifiers.
• Content you upload: CVs, job descriptions, interview answers.
• Usage data: matches and interview sessions, scores, timestamps.
• Billing data: handled by Stripe — we store only customer IDs and subscription state, never card numbers.

2. How we use it & legal basis

• Run CV matching and interview scoring — legal basis: performance of our contract with you (Art. 6(1)(b) UK/EU GDPR).
• Manage your subscription and billing — contract and legal obligation (tax records).
• Prevent abuse, secure the service, debug — our legitimate interests.
• Product improvement — legitimate interests, using aggregated/anonymised data.
• Marketing emails — only with your consent at signup; you can withdraw at any time.

We do not sell your data and we do not use your content to train third-party AI models.

3. AI processing & automated decisions

PassPrep uses AI models to extract text from your CV, score your CV against a job description, generate interview questions, and score your interview answers. Your CV text, job description text and interview answers are sent to our AI providers (Lovable AI Gateway, which routes to Google Gemini and OpenAI; ElevenLabs for voice transcription and speech).

Scores and feedback are generated automatically. Under Art. 22 UK/EU GDPR you have the right to request human review of any AI-generated score that you believe is inaccurate or unfair — email hello@passprep.io.

AI outputs are guidance only and may contain mistakes. They are not a guarantee of interview outcomes or employment.

4. Processors & international transfers

• Supabase (database, auth, file storage) — EU/US hosting.
• Stripe (payments) — global, US-headquartered.
• Lovable (hosting & AI Gateway) — EU/US.
• Google (Gemini models via AI Gateway) — US.
• OpenAI (models via AI Gateway, where used) — US.
• ElevenLabs (voice transcription and TTS) — US.

Where data is transferred outside the UK / EEA, we rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses as the transfer safeguard, and each provider acts as a data processor under a Data Processing Agreement.

5. Retention

• Account & profile: until you delete your account.
• CVs and uploaded files: until you delete them in-app, or immediately on account deletion.
• Match & interview sessions: until you delete them, or on account deletion.
• Server logs (errors, security): up to 90 days.
• Billing records (Stripe invoices): retained for 7 years to meet UK/EU tax law.

You can delete your account at any time from Settings → Account. This permanently removes your profile, CVs, uploaded files, match sessions, interview sessions and usage history.

6. Your rights

Under UK / EU GDPR you have the right to:

• Access your data — use "Export My Data" in Settings.
• Rectify inaccurate data — edit your name in Settings or email us.
• Erase your data — use "Delete Account" in Settings.
• Portability — the export is provided as machine-readable JSON.
• Object to processing based on legitimate interests.
• Restrict processing while a query is investigated.
• Withdraw consent (e.g. marketing emails) at any time.
• Human review of automated AI scoring decisions.
• Lodge a complaint with your local supervisory authority — in the UK, the ICO.

Email hello@passprep.io for any data request. We will respond within one month.

7. Security

Data is encrypted in transit (HTTPS) and at rest. CV file storage is private and protected by row-level security so only you can access your files. Access to production systems is restricted. If we become aware of a personal data breach affecting you we will notify the relevant supervisory authority within 72 hours and you without undue delay where required.

9. Children

PassPrep is not intended for users under 16. Do not create an account if you are under 16.

10. Changes to this policy

We will notify you in-app or by email of material changes. Continued use after a change means you accept the updated policy.

11. Contact

Email hello@passprep.io for any privacy question or data request.