Privacy Policy

Intervu is operated by Kishna Kushwaha, an individual developer based in India. We provide an AI-powered interview preparation and ATS resume analysis platform.

We collect the minimum data necessary to provide our services. Here is a complete breakdown:

Category	Specific Data	Source	Required?
Account & Identity	Full name, email address, profile picture URL, Google User ID	Google OAuth (Sign In with Google)	Yes – to create your account
Resume Data	Resume text content, parsed skills, experience, education, job titles	Uploaded by you	Yes – for interview prep & ATS analysis
Interview Responses	Your answers to AI-generated interview questions, AI scores (1–10), feedback	Generated during your sessions	Yes – to provide history & feedback
Usage Data	Pages visited, features used, session duration, number of uploads	Automatically collected via Google Analytics	No – can be opted out
Payment Data	Transaction ID, subscription plan, payment status	Payment gateway (we do NOT store card numbers)	Only for paid plans
Technical Data	IP address, browser type, operating system, device type, language	Automatically collected	No – for security & debugging
Communication	Emails you send us, support queries, feedback forms	You provide this directly	Only if you contact us

We use your data strictly for the following purposes:

• Account Authentication: To securely identify you using Google Sign-In (OAuth 2.0).
• Core Service Delivery: To parse your resume, generate AI-powered interview questions, analyse ATS compatibility, provide scores and feedback, and display your history.
• AI Processing: Your resume text and interview answers are sent to the Groq AI API for generating questions and feedback. This is the core function of the app.
• Job Matching: If you use the Job Search feature, your skills and preferences are used to surface relevant job listings.
• Platform Analytics: Google Analytics data helps us understand how the platform is used so we can improve it.
• Service Communications: We may send you transactional emails (e.g., subscription confirmation, important account updates). We will not send marketing emails without your explicit consent.
• Security & Fraud Prevention: To detect, investigate, and prevent abusive, fraudulent, or illegal activity.
• Legal Compliance: To comply with applicable laws, regulations, and government requests.

Under Indian law (DPDP Act 2023) and international standards, we rely on the following legal bases:

• Consent: You provide explicit consent by clicking "Sign in with Google" and by agreeing to these terms when creating an account. You can withdraw consent at any time by deleting your account.
• Contractual Necessity: Processing your resume and interview data is necessary to deliver the service you have requested.
• Legitimate Interest: We have a legitimate interest in analysing usage patterns to improve the platform, provided this does not override your rights.
• Legal Obligation: We may process data to comply with applicable laws.

We do not sell your personal data. We share it only with trusted service providers to deliver the platform:

Service Provider	Purpose	Data Shared	Privacy Policy
Supabase (USA)	Database & Authentication	Account data, resume data, interview history	supabase.com/privacy
Google OAuth (USA)	Sign-In Authentication	Name, email, profile picture	policies.google.com/privacy
Groq API (USA)	AI Question Generation & Feedback	Resume text, interview answers (anonymised where possible)	groq.com/privacy-policy
Google Analytics (USA)	Usage Analytics	Anonymised usage behaviour, IP address	policies.google.com/privacy
Vercel (USA)	Frontend Hosting & CDN	IP address, request logs	vercel.com/legal/privacy-policy
Render (USA)	Backend API Hosting	IP address, API request logs	render.com/privacy

We may also share data with law enforcement or government authorities if required by law, court order, or to protect the safety and rights of our users.

We retain your data only for as long as necessary to provide our services or as required by law:

• Account Data: Retained as long as your account is active. Deleted within 30 days of account deletion request.
• Resume Uploads: Retained until you delete them from your account, or upon account deletion.
• Interview History: Retained as long as your account is active. You can delete individual sessions at any time.
• Payment Records: Retained for 7 years as required by Indian tax laws.
• Analytics Data: Anonymised aggregated data may be retained indefinitely. Individual-level data is retained per Google Analytics defaults (26 months).
• Server Logs: Technical logs are retained for a maximum of 90 days for security and debugging purposes.

Under the Indian DPDP Act 2023, you have the following rights:

• ✅ Right to Access: Request a copy of all personal data we hold about you.
• ✅ Right to Correction: Request correction of inaccurate or incomplete data.
• ✅ Right to Erasure: Request deletion of your personal data. We will act within 30 days.
• ✅ Right to Withdraw Consent: Withdraw consent at any time. This will not affect processing done before withdrawal.
• ✅ Right to Nominate: Nominate another person to exercise your rights on your behalf.
• ✅ Right to Grievance Redressal: File complaints with our Grievance Officer.

You can also delete your account directly from the app's profile settings, which will trigger automatic deletion of your data.

We use cookies and similar technologies as follows:

• Essential Cookies: Required for the application to function (e.g., keeping you logged in). These cannot be disabled.
• Analytics Cookies (Google Analytics): We use Google Analytics to understand platform usage. For users in the EU/EEA/UK, we request explicit consent via our cookie banner (CookieYes) before setting analytics cookies. For Indian users, analytics cookies are enabled by default but you can opt out via the cookie banner.
• Authentication Cookies: Set by Supabase to manage your secure session.

You can manage cookie preferences at any time using the cookie settings link in our banner. You can also disable cookies in your browser settings, though this may impact platform functionality.

We implement industry-standard security measures to protect your data:

• All data transmission is encrypted using HTTPS/TLS.
• Your account is protected using Google OAuth 2.0 — we never store your Google password.
• Database access is protected using Supabase Row Level Security (RLS) policies, ensuring you can only access your own data.
• API keys and secrets are stored securely as environment variables and are never exposed to the frontend.
• We conduct periodic reviews of our security practices.

Intervu is designed for adults who are job seekers and professionals. Our service is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us immediately and we will delete it promptly.

Intervu is operated from India. However, some of our service providers (Supabase, Groq, Vercel, Google) are based in the United States. By using our service, you acknowledge that your data may be processed in the USA or other countries.

We ensure our third-party providers maintain adequate data protection standards. Our primary infrastructure provider, Supabase, complies with GDPR and employs appropriate safeguards including Standard Contractual Clauses for international transfers.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Send an email notification to registered users for significant changes.
• Display a prominent notice on the platform.

Continued use of Intervu after the effective date of a revised policy constitutes your acceptance of the new policy.

As required by Rule 5(9) of the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, we have designated a Grievance Officer: