Privacy Policy
Last updated: 16 August 2026
This is a draft prepared for review. It has not been checked by a lawyer and should be reviewed before launch.
1. Who we are
LoopReady provides AI mock interview practice. This policy explains what we collect, why we collect it, who processes it, and the control you have. Contact: support@loopready.io.
2. What we collect
- Account: email address, and a hashed password if you set one. If you sign in with Google or GitHub we receive your email and basic profile, never your password.
- Interview content: transcripts of what you say, code you write, diagrams you draw, and the feedback generated for you.
- Audio: your microphone audio is streamed for transcription during a session. We do not store audio recordings; we store the resulting text.
- Billing: your plan, status and PayPal subscription or order identifiers. We never see or store your card details.
- Technical: IP address and request counts, used for rate limiting and abuse prevention.
3. Why we use it
To run interviews and produce feedback, to keep your history, to take payment, to enforce fair usage and prevent abuse, and to fix problems. We do not sell your data, we do not advertise to you, and we do not use your interview content to train our own models.
4. Who processes it
- OpenAI — conducts the interview, transcribes speech and generates feedback. Content is sent through their API and, under their API terms, is not used to train their models.
- ElevenLabs — converts interviewer text to speech when the higher-quality voice is enabled.
- Supabase — stores your account and interview data.
- Vercel — hosts the app and runs your code in isolated, short-lived sandboxes.
- Upstash — rate limiting counters keyed to your account and IP.
- PayPal — takes payment and holds your payment details directly.
These providers process data on our instructions. Some are located outside your country, including the United States.
5. How long we keep it
Interview transcripts and feedback are kept until you delete them or close your account, so you can review past sessions. Rate limit counters expire within days. Billing records are kept as long as required for tax and accounting.
6. Your rights
You can access and correct your details in Settings, and delete your account at any time. Deleting your account permanently removes your login, sessions, transcripts, feedback, loops, credits and profile, and cancels any active subscription. This cannot be undone.
Depending on where you live you may also have rights to export your data, object to processing, or complain to a data protection authority. Email us and we will help.
7. Security
Data is encrypted in transit. Database access is restricted per user by row-level security, so one account cannot read another’s data. Code you write runs in an isolated sandbox that is destroyed after each run. No system is perfectly secure, and we will notify affected users promptly if a breach occurs.
8. Children
LoopReady is not intended for anyone under 16. If we learn we have collected data from a child under 16 we will delete it.
9. Changes
We will post material changes here and notify you by email before they take effect.