Privacy Policy
Last updated: February 10, 2026
1. Introduction
The Interview Ninja ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, desktop application, and related services (collectively, the "Service").
By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, and password when you create an account
- Resume Data: Resume text content you upload for personalized AI answers
- Job Descriptions: Job postings you paste for training question generation
- Payment Information: Processed by Lemon Squeezy; we do not store credit card numbers
- Training Responses: Your answers during mock interview sessions
2.2 Information Collected Automatically
- Usage Data: Session duration, features used, AI requests made, and session metadata
- Device Information: Browser type, operating system, and device type
- Log Data: IP address, access times, and pages visited
- Audio Transcriptions: Processed in real-time during interview sessions; transcription text may be temporarily stored for AI processing
2.3 Information from Third Parties
- Google Authentication: If you sign in with Google, we receive your name, email, and profile picture
- Lemon Squeezy: Payment status, subscription details, and purchase history
3. How We Use Your Information
We use your information to:
- Provide the Service: Generate AI answers, run mock interviews, create performance reports
- Personalize Responses: Use your resume data to tailor AI-generated interview answers
- Process Payments: Manage subscriptions and billing through Lemon Squeezy
- Improve the Service: Analyze usage patterns to enhance features and performance
- Enforce Limits: Track session usage to enforce plan-based limits
- Communicate: Send account-related notifications and important updates
- Security: Detect and prevent fraud, abuse, and unauthorized access
4. AI Processing & Third-Party AI Services
Our Service uses the following third-party AI services to process your data:
- AI Service Providers: Interview questions, resume content, and conversation context are sent to our AI providers' APIs to generate answers. Each provider's data usage policies apply.
- AI Training Providers: Used for training question generation and evaluation.
- Speech Recognition Providers: Used for real-time audio transcription. Audio data is processed in real-time and is not stored after processing.
Important: When you use our Service, portions of your data (interview questions, resume text, conversation context) are sent to third-party AI providers for processing. While we select providers with strong privacy practices, you should be aware that your data is processed on their servers.
5. Data Storage & Security
Your data is stored using the following services:
- Firebase/Firestore: User accounts, resumes, session data, and training records are stored in Google Cloud's Firestore database
- Google Cloud Platform: Our application is hosted on Google Cloud Run with industry-standard security
We implement the following security measures:
- All data transmitted over HTTPS/TLS encryption
- Firebase Authentication for secure user sessions
- API keys stored as server-side environment variables, never exposed to clients
- Firestore security rules that enforce user-level data isolation
- Server-side token verification for all API requests
6. Data Retention
- Account Data: Retained as long as your account is active
- Resume Data: Retained until you delete it or your account is closed
- Session Data: Interview session metadata and summaries are retained for analytics and your review
- Training Data: Mock interview sessions and reports retained for your access
- Audio Data: Real-time transcription is processed in-memory and not permanently stored on our servers
- Payment Data: Managed by Lemon Squeezy per their data retention policies
Upon account deletion, we will delete your personal data within 30 days, except where retention is required by law.
7. Data Sharing
We do NOT sell your personal data. We share data only with:
- AI Service Providers: Third-party AI providers — only the data necessary to provide AI features
- Payment Processor: Lemon Squeezy — only payment and subscription information
- Infrastructure Providers: Google Cloud Platform — for hosting and data storage
- Legal Requirements: If required by law, regulation, or legal process
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data (you can delete resumes and close your account)
- Portability: Request your data in a machine-readable format
- Objection: Object to certain processing of your data
- Restriction: Request restriction of processing in certain circumstances
To exercise these rights, contact us at support@theinterviewninja.com. We will respond within 30 days.
9. Cookies & Tracking
We use essential cookies and local storage for:
- Authentication: Firebase session tokens to keep you logged in
- Preferences: User interface preferences and settings
We do not use third-party advertising cookies or tracking pixels. We do not participate in ad networks.
10. Desktop Application
The Interview Ninja desktop application runs locally on your computer. Additional privacy considerations:
- Audio capture is performed locally on your device
- Audio is streamed to our transcription service in real-time and is not saved locally
- The application communicates with our web API using your authenticated session
- The stealth overlay renders locally and does not capture or transmit screen content
- No keylogging, screen recording, or system monitoring is performed
11. Children's Privacy
The Service is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If we discover that we have collected data from a child, we will delete it promptly.
12. International Data Transfers
Your data may be processed in the United States and other countries where our service providers operate. By using the Service, you consent to the transfer of your data to these locations. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date and, where required, sending an email notification. Your continued use of the Service after changes are posted constitutes acceptance of the updated Privacy Policy.
14. Contact Us
For questions, concerns, or requests related to this Privacy Policy, contact us at: