1. Introduction
RapidPrep.ai (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered interview practice platform service.
By using our Service, you consent to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.
This Privacy Policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable privacy laws.
🛡️ Privacy Compliance Statement
🇪🇺 GDPR Compliant
Full compliance with European Union General Data Protection Regulation
- ✓ Lawful basis for data processing
- ✓ Right to access, rectify, and delete data
- ✓ Data portability and objection rights
- ✓ Data Protection Officer available
🇺🇸 CCPA Compliant
Full compliance with California Consumer Privacy Act
- ✓ Right to know what data we collect
- ✓ Right to delete personal information
- ✓ Right to opt-out of data sales (we don’t sell data)
- ✓ Non-discrimination for exercising rights
Contact our Data Protection Officer: Contact Us
2.5 Voice Data Collection and Processing
RapidPrep.ai uses voice-based interview practice sessions. This section explains how we handle voice data:
2.5.1 Microphone Capture
During interview practice sessions, we capture your voice through your device's microphone. This is necessary to:
- Enable realistic voice-based interview practice
- Generate real-time speech-to-text transcription
- Provide accurate feedback on your communication style and delivery
- Analyze your responses for coaching purposes
2.5.2 Transcript-Only Storage
Important: We do not store raw audio files. We only store:
- Text Transcripts: Written transcripts of your interview responses generated from speech-to-text processing
- Session Metadata: Information about your interview session (duration, questions asked, feedback scores)
Raw audio data is processed in real-time using Google Cloud Speech-to-Text services and is not retained after transcription.
2.5.3 30-Day Feedback Access Window
Interview session transcripts and feedback are available for 30 days after your practice session. After this period:
- All session transcripts are automatically deleted
- Feedback data is permanently removed from our systems
- You will no longer be able to access historical session details
This 30-day window allows you to review your feedback and improve before your next interview, while ensuring your data is not retained longer than necessary.
2.5.4 Voice Data Processing Services
We use the following third-party services for voice processing:
- Google Cloud Speech-to-Text: Converts your spoken responses into text transcripts
- Google Cloud Text-to-Speech: Generates AI interviewer voice responses
These services process your voice data in real-time and do not retain audio files. Please review Google's privacy policy for information about their data handling practices.
3. How We Use Information
We use the collected information for the following purposes:
3.1 Service Provision
- Provide and maintain our AI-powered interview practice platform
- Process your interview practice sessions and facilitate AI interviewer interactions
- Manage your account and session purchases
- Store and retrieve your interview session history and feedback
- Generate personalized interview questions based on your job description and resume
3.2 Communication
- Send service-related notifications and updates
- Respond to your inquiries and support requests
- Notify you of changes to our Service or policies
3.3 Service Improvement
- Analyze usage patterns to improve AI interviewer performance and interview practice experience
- Monitor service performance and reliability
- Develop new AI model integrations and interview practice features
- Improve feedback quality and coaching recommendations
3.4 Legal and Security
- Comply with legal obligations and regulations
- Protect against fraud, abuse, and security threats
- Enforce our Terms of Service
- Resolve disputes and investigate violations
4. Information Sharing and Disclosure
We do not sell, trade, or otherwise transfer your personal information to third parties except as described below:
4.1 Service Providers
- Payment Processing: Stripe for secure payment processing
- Authentication: Supabase for user authentication and account management
- Infrastructure: Cloud hosting providers for data storage and service delivery
- Voice Processing: Google Cloud Speech-to-Text and Text-to-Speech for voice interview functionality
- Hosting & Analytics: Cloud hosting and basic usage monitoring
4.2 Third-Party AI Services
Our Service integrates with third-party AI model providers:
- OpenAI: For GPT model access and processing
- Anthropic: For Claude model access and processing
- Google: For Gemini model access and processing
- Other AI Providers: Additional model providers as we expand our offerings
These providers may process your conversation data to generate responses. We encourage you to review their privacy policies.
4.3 Legal Requirements
We may disclose your information if required by law or in good faith belief that such disclosure is necessary to:
- Comply with legal processes or government requests
- Protect our rights, property, or safety
- Protect the rights, property, or safety of our users
- Investigate potential violations of our Terms of Service
4.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.
5. Data Retention
We retain your information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy:
- Account Information: Until you delete your account plus 30 days for backup purposes
- Interview Session Transcripts: Automatically deleted after 30 days from session completion
- Feedback Data: Available for 30 days, then automatically deleted
- Payment Information: As required by law and for tax/accounting purposes (typically 7 years)
- Usage Data: Basic usage patterns (anonymized) retained for service improvement
- Legal Holds: Information may be retained longer if required by law or legal proceedings
You can request deletion of your data at any time by contacting us or using account deletion features in our Service.
6. Data Security
We implement appropriate technical and organizational security measures to protect your personal information:
- Encryption: Data encryption in transit and at rest
- Access Controls: Limited access to personal information on a need-to-know basis
- Authentication: Multi-factor authentication for administrative access
- Regular Audits: Security assessments and vulnerability testing
- Incident Response: Procedures for detecting and responding to security breaches
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
7. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request access to your personal information
- Correction: Request correction of inaccurate or incomplete information
- Deletion: Request deletion of your personal information
- Portability: Request a copy of your data in a portable format
- Restriction: Request restriction of processing in certain circumstances
- Objection: Object to processing based on legitimate interests
- Withdraw Consent: Withdraw consent for processing where consent is the legal basis
7.1 GDPR Rights (EU Users)
If you are located in the European Union, you have additional rights under the GDPR:
- Legal Basis: We process your data based on contract performance, legitimate interests, and consent
- Data Protection Officer: You can contact our DPO via our contact form
- Supervisory Authority: You have the right to lodge a complaint with your local data protection authority
- Automated Decision-Making: We do not engage in automated decision-making that significantly affects you
7.2 CCPA Rights (California Users)
If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):
- Right to Know: Request disclosure of personal information collected, used, or shared
- Right to Delete: Request deletion of personal information
- Right to Opt-Out: Opt-out of the sale of personal information (we do not sell personal information)
- Right to Non-Discrimination: Not be discriminated against for exercising your rights
7.2.1 Do Not Sell My Personal Information
RapidPrep.ai does not sell your personal information. We do not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration.
We may share your information with service providers (such as payment processors, authentication services, and AI model providers) solely for the purpose of providing our interview practice service. These service providers are contractually obligated to use your information only as necessary to provide their services to us and are not permitted to sell or use your information for their own purposes.
If you have questions about how we handle your personal information or wish to exercise your CCPA rights, please contact us:
Contact: Contact Us
Subject Line: “CCPA Privacy Request”
Please include your name, email address, and the specific CCPA right you wish to exercise. We will respond within 45 days as required by law.
8. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience:
- Essential Cookies: Required for basic site functionality and security
- Preference Cookies: Remember your settings and preferences
- Analytics Cookies: Help us understand how you use our Service
You can control cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of our Service. For more detailed information, please see our Cookie Policy.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place:
- Adequacy Decisions: Transfers to countries with adequate data protection laws
- Standard Contractual Clauses: EU-approved contractual protections
- Certification Programs: Privacy Shield successors and similar frameworks
- Consent: Your explicit consent for transfers where required
10. Children's Privacy
Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
If we learn that we have collected personal information from children under 13 without verification of parental consent, we will take steps to remove that information from our servers.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending an email notification to your registered email address
- Displaying a prominent notice on our Service
Your continued use of our Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.
This Privacy Policy is effective as of 2025-06-30. We reserve the right to modify this policy at any time, so please review it frequently.