Privacy Policy

Account. When you sign in we collect your email address via Clerk (our authentication provider). We do not store passwords.

CV text. If you paste or upload a CV it is stored locally on your device — in your browser's storage on the web app, or Chrome extension storage in the extension. It is transmitted to our API over HTTPS when you generate a report, and is never stored server-side beyond the duration of that request.

Job postings. The job description text from the page you are viewing is sent to our API to generate your report. It is not kept afterwards, beyond anonymous counts that help us improve the product.

Voice recordings. If you record a spoken answer — in the free practice tool on our interview-prep guides, in the optional Speak input mode, or while running a voice mock interview — your audio is transmitted to OpenAI's Whisper API for transcription. A practice take is capped at 90 seconds; a Speak or mock take can run to roughly three minutes. The audio is not stored after the transcript is returned, and OpenAI does not train on API traffic by default. The transcript is then sent to Anthropic's Claude API to be scored, and we do not store that either. Voice recording is opt-in: nothing is captured unless you start a recording.

Mock interviews. During a voice mock interview your transcribed answers are sent to our API for AI grading, and the interviewer's spoken questions are generated from text via OpenAI's text-to-speech. Your mock transcripts and debriefs are stored locally on your device — they are never stored server-side.

Free scan & free resume review. These two work differently from the rest, so here is exactly what happens. You give us an email address, we write the report, and we send it to you as a PDF. To reach you, that report passes through our email provider, Resend. We keep your address so that each address gets one free scan and one free review.

There is a tick box on the form. Tick it and we also add you to our email list and send you occasional interview-prep guides, each with an unsubscribe link. Leave it alone and the report is the only thing you ever get from us. The box starts unticked.

Your CV, the job description and the report are all discarded once the email is sent.

Practice answers and feedback. Spoken practice on our interview-prep guides is anonymous: we do not attach a name or an account to it. We keep a count per IP address for one day, to stop one person exhausting a free service for everyone else. Feedback you leave through the thumbs or the feedback button carries no user ID at all.

Usage & billing. We record report generation events and credit usage tied to your account in order to enforce plan limits. Payments are handled by Stripe — we do not see or store your card details.

We use your data solely to:

• Authenticate you and manage your account
• Generate your interview report and AI coaching responses
• Transcribe spoken answers, and voice the interviewer's questions, when you use Speak mode or a mock interview
• Enforce credit and plan limits
• Send transactional emails (sign-in codes, receipts, and the PDF report from a free scan or free resume review)
• Send you interview-prep guides, but only if you ticked the box asking for them

We do not sell your data, share it with advertisers, or use it to train AI models. We do not store your reports, your CV, your practice answers or your scores.

These are every company that touches your data on our behalf, and what each one is for:

• Clerk — authentication and session management
• Stripe — payment processing
• Vercel — hosting for the website and our API, and the page-view analytics described below
• Neon — the database holding account records, access state and anonymous usage counts. Your CV, job descriptions and reports are not in it.
• Resend — email delivery: sign-in notices, receipts, the PDF report from a free scan or free resume review, and the interview-prep guides if you opted in
• Upstash — rate limiting, so one person cannot exhaust a shared service
• Cloudflare — the bot check (Turnstile) on forms that anyone can submit without an account
• Sentry — error monitoring, so we find out when something breaks. Reports include your account ID when you are signed in, so we can tell whether a fault hit one person or everyone. They do not include your CV, job descriptions or report content.
• Anthropic — AI inference for report generation and interview coaching, including mock-interview grading and debriefs (Claude API). Prompts are not used to train models. Anthropic may retain API data for up to 30 days for safety purposes per their usage policy.
• OpenAI — voice-to-text transcription (Whisper API) for spoken answers, and text-to-speech for the interviewer's voice in a mock interview, only when you use those voice features. Audio is sent for transcription and not stored after the transcript is returned. OpenAI does not train on API traffic by default; see their enterprise privacy commitments.

Calibrd Agent runs inside your assistant. Your CV, the job description and the report pass through your assistant's provider (Anthropic, OpenAI or xAI) under their terms. Calibrd itself keeps none of it: reports and CVs are generated and returned, not stored.

When you connect it, you sign in once and your assistant receives a token for your Calibrd account. The token lets it run the same tools you could run on the web, under the same limits and access. Disconnect the connector in your assistant's settings to stop it. We record the same usage counters as the web (reports today, access) and nothing about the conversation.

Account records are kept for as long as your account is active. You can request deletion at any time by emailing privacy@calibrd.com and we will remove your account and associated usage records within 30 days.

Three things outlive a single request. The email address you gave for a free scan or free resume review, which we keep so the offer stays one per address, and to send you guides if you ticked the box. A count of anonymous voice practice per IP address, which resets after a day. And anonymous usage counts that show us which parts of the product to improve. Those counts hold no name, no account and no employer, and nothing in them can be traced back to you. You can leave the email list from any email we send, and the address above removes you entirely.

We do not use advertising cookies or cross-site tracking, and there are no advertising or social pixels anywhere on the site. Clerk sets a session cookie required for authentication.

We do run one analytics script: Vercel Web Analytics, which counts page views so we can see which pages are worth keeping. It is served from our own domain, sets no cookie, does not build a profile of you, and cannot follow you to other sites.

All data in transit is encrypted with TLS. CV text and job descriptions are never written to persistent storage on our servers. We apply principle of least privilege to all internal data access.

Depending on your jurisdiction you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights email privacy@calibrd.com.

If we make material changes we will update the effective date above and, where appropriate, notify you by email. Continued use of Calibrd after the update constitutes acceptance.

Questions about this policy? privacy@calibrd.com