Privacy Policy

SortMyInterview ("we," "us," or "our") is operated by SortMyInterview, a company registered in India. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at sortmyinterview.com and our AI-powered interview preparation services (collectively, the "Service").

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with the terms of this policy, please do not access the Service.

1. Information We Collect

1.1 Personal Information You Provide

• Account Data: Name, email address, and password when you create an account, or profile information received from Google or GitHub if you use social sign-in.
• Payment Data: Billing name, billing address, and payment method details. Payment processing is handled securely by Stripe; we do not store your full credit card number on our servers.
• Interview Data: Audio recordings, transcriptions of interview sessions, and AI-generated responses produced while you use the Service.
• Communications: Any information you provide when contacting our support team.

1.2 Information Collected Automatically

• Device & Usage Data: IP address, browser type, operating system, referring URLs, pages viewed, and timestamps.
• Cookies & Similar Technologies: We use cookies, local storage, and similar tracking technologies to maintain sessions, remember preferences, and gather analytics data.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Process audio in real time to deliver AI-powered interview assistance.
• Process payments and manage your subscription.
• Improve and personalise your experience, including training and improving our AI models (using aggregated and anonymised data only).
• Communicate with you about updates, security alerts, and support matters.
• Detect, prevent, and address fraud, abuse, or technical issues.
• Comply with legal obligations.

3. Third-Party Services

We rely on trusted third-party service providers to deliver the Service. Each provider processes data only as necessary for its designated purpose:

4. Cookies and Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for authentication, session management, and security. These cannot be disabled.
• Functional Cookies: Remember your preferences and settings to enhance your experience.
• Analytics Cookies: Help us understand how visitors interact with the Service (e.g., Google Analytics).

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Service.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account Data: Retained until you delete your account.
• Interview Audio & Transcriptions: Audio streams are processed in real time and are not permanently stored. Transcriptions and AI responses are retained for the duration of your session and may be stored for up to 30 days to enable session history features, after which they are automatically deleted.
• Payment Records: Retained as required by applicable tax and financial regulations (typically 7 years in India).
• Analytics Data: Aggregated analytics data is retained indefinitely; personally identifiable analytics data is deleted within 14 months.

When you delete your account, we will remove or anonymise your personal data within 30 days, except where retention is required by law.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Secure authentication with hashed passwords and OAuth 2.0.
• Regular security audits and vulnerability assessments.
• Access controls limiting employee access to personal data on a need-to-know basis.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Restriction: Request that we limit the processing of your data.
• Portability: Request a machine-readable copy of your data.
• Objection: Object to processing of your data for direct marketing or legitimate interest purposes.
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at support@sortmyinterview.com. We will respond to your request within 30 days.

8. GDPR Compliance

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the following additional provisions apply:

• Legal Bases for Processing: We process your data based on (a) your consent, (b) the performance of a contract with you, (c) our legitimate interests, or (d) compliance with legal obligations.
• International Transfers: Your data may be transferred to and processed in countries outside the EEA, including India and the United States. We ensure adequate safeguards are in place, such as Standard Contractual Clauses (SCCs), for such transfers.
• Data Protection Officer: For GDPR-related enquiries, please contact us at support@sortmyinterview.com.
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority if you believe your rights have been infringed.

9. Indian Data Protection Compliance

As an India-based company, we comply with the Digital Personal Data Protection Act, 2023 (DPDPA) and the Information Technology Act, 2000. We process personal data only for lawful purposes and with appropriate consent. You may exercise your rights as a Data Principal under the DPDPA by contacting us at the email address below.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this page periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: