Privacy Policy

Account. When you sign in we collect your email address via Clerk (our authentication provider). We do not store passwords.

CV text. If you paste or upload a CV it is stored locally on your device — in your browser's storage on the web app, or Chrome extension storage in the extension. It is transmitted to our API over HTTPS when you generate a report, and is never stored server-side beyond the duration of that request.

Job postings. The job description text from the page you are viewing is sent to our API to generate your report. It is not stored after the response is returned.

Voice recordings. If you record a spoken answer — in the optional Speak input mode, or while running a voice mock interview — your audio (up to roughly three minutes per take) is transmitted to OpenAI's Whisper API for transcription. The audio is not stored after the transcript is returned, and OpenAI does not train on API traffic by default. Voice recording is opt-in: nothing is captured unless you start a recording.

Mock interviews. During a voice mock interview your transcribed answers are sent to our API for AI grading, and the interviewer's spoken questions are generated from text via OpenAI's text-to-speech. Your mock transcripts and debriefs are stored locally on your device — they are never stored server-side.

Free scan & free resume review. These two work differently from the rest, so here is exactly what happens. You give us an email address, we write the report, and we send it to you as a PDF. To reach you, that report passes through our email provider, Resend. We keep your address so that each address gets one free scan and one free review.

There is a tick box on the form. Tick it and we also add you to our email list and send you occasional interview-prep guides, each with an unsubscribe link. Leave it alone and the report is the only thing you ever get from us. The box starts unticked.

Your CV, the job description and the report are all discarded once the email is sent.

Practice answers and feedback. Spoken practice on our interview-prep guides is anonymous: we do not attach a name or an account to it. We keep a count per IP address for one day, to stop one person exhausting a free service for everyone else. Feedback you leave through the thumbs or the feedback button carries no user ID at all.

Usage & billing. We record report generation events and credit usage tied to your account in order to enforce plan limits. Payments are handled by Stripe — we do not see or store your card details.

We use your data solely to:

• Authenticate you and manage your account
• Generate your interview report and AI coaching responses
• Transcribe spoken answers, and voice the interviewer's questions, when you use Speak mode or a mock interview
• Enforce credit and plan limits
• Send transactional emails (sign-in codes, receipts, and the PDF report from a free scan or free resume review)
• Send you interview-prep guides, but only if you ticked the box asking for them

We do not sell your data, share it with advertisers, or use it to train AI models.

These are every company that touches your data on our behalf, and what each one is for:

• Clerk — authentication and session management
• Stripe — payment processing
• Vercel — hosting for the website and our API, and the page-view analytics described below
• Neon — the database holding account records, credit balances and usage counters. Your CV, job descriptions and reports are not in it.
• Resend — email delivery: sign-in notices, receipts, the PDF report from a free scan or free resume review, and the interview-prep guides if you opted in
• Upstash — rate limiting, so one person cannot exhaust a shared service
• Cloudflare — the bot check (Turnstile) on forms that anyone can submit without an account
• Sentry — error monitoring, so we find out when something breaks. Reports include your account ID when you are signed in, so we can tell whether a fault hit one person or everyone. They do not include your CV, job descriptions or report content.
• Anthropic — AI inference for report generation and interview coaching, including mock-interview grading and debriefs (Claude API). Prompts are not used to train models. Anthropic may retain API data for up to 30 days for safety purposes per their usage policy.
• OpenAI — voice-to-text transcription (Whisper API) for spoken answers, and text-to-speech for the interviewer's voice in a mock interview, only when you use those voice features. Audio is sent for transcription and not stored after the transcript is returned. OpenAI does not train on API traffic by default; see their enterprise privacy commitments.

Account records are kept for as long as your account is active. You can request deletion at any time by emailing privacy@calibrd.com and we will remove your account and associated usage records within 30 days.

Two things outlive a single request. The email address you gave for a free scan or free resume review, which we keep so the offer stays one per address, and to send you guides if you ticked the box. And a count of anonymous voice practice per IP address, which resets after a day. You can leave the email list from any email we send, and the address above removes you entirely.

We do not use advertising cookies or cross-site tracking, and there are no advertising or social pixels anywhere on the site. Clerk sets a session cookie required for authentication.

We do run one analytics script: Vercel Web Analytics, which counts page views so we can see which pages are worth keeping. It is served from our own domain, sets no cookie, does not build a profile of you, and cannot follow you to other sites.

All data in transit is encrypted with TLS. CV text and job descriptions are never written to persistent storage on our servers. We apply principle of least privilege to all internal data access.

Depending on your jurisdiction you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights email privacy@calibrd.com.

If we make material changes we will update the effective date above and, where appropriate, notify you by email. Continued use of Calibrd after the update constitutes acceptance.

Questions about this policy? privacy@calibrd.com