Privacy Policy

Scope and where your data lives

This policy covers InterviewSparrow, operated by Globebots IT Solutions Private Limited. We aim to align with India’s DPDP Act and with GDPR-style rights for users it applies to.

Your account data, transcripts, and reports are stored in MongoDB Atlas in the AWS Mumbai region (ap-south-1). Audio recordings are stored in AWS S3 in the same region, encrypted at rest and reachable only through short-lived signed links.

Some processing happens outside India: live voice runs on ElevenLabs’ global infrastructure; still images of your shared screen (and, in an interview an employer set up, of your webcam) go to Anthropic’s Claude models through OpenRouter (United States); and text for your report and your resume goes to language-model providers. The providers, what each receives, and what we delete from them are listed under “AI processing and the providers we use” and “International transfers” below.

What we collect

• Account: your email address, optional display name, and authentication details (password hash or Google sign-in). With your account we keep a one-way hash of your email address and an encrypted copy of it, which we use only to email you (for example, replies to your support cases and your purchase receipts) and which is deleted with your account.
• Sign-up and fraud checks: the country you sign up from, which sets your prices and is kept with your account; a one-way hash of the network address you sign up from; and a one-way hash of a random device identifier your browser stores and sends when you sign up, which can also be recorded with a session you start. We use them to enforce one person, one account and to price your region.
• Support: the cases you open from Help & feedback — what you write and the team’s replies, screenshots you attach, your browser type, the page you were on and any session or report you were looking at — and, if you give a different address for replies, that address, encrypted, until the case closes.
• Billing: if you add them for an invoice, your business name, address and GSTIN, and the invoices we issue.
• Records of your choices: which version of the Terms and of the Resume Studio notice you accepted and when, and your benchmark contribution choice. Your cookie choices are kept in your browser.
• From an employer: if an organisation invites you, the name, email address and job it gives us, and any resume it adds.
• Session content: your spoken answers (audio), the transcript of the session, and the resume / job description you provide for context.
• Reports: the analysis and scores we generate from your session.
• From your resume: the full text we take from it and how its pages were laid out, and the score and fixes we work out from that text — kept with the resume and deleted with it.
• Screen and camera: while your screen is used, the interviewer summarises what it sees in the moment, from still images of your screen sent to Anthropic’s Claude models through OpenRouter (United States); no image of your screen or camera goes to ElevenLabs. In a practice session you run for yourself, your screen is used only while the role exercise runs, which the interviewer starts and ends, and not at all in an interview with no exercise; your camera is not used — nothing from it is recorded, sent to us or to any provider, or kept — and the session runs no proctoring. We keep snapshots of the work on your screen — the diagram or code you produce — which are kept until you delete them, because your report scores your applied work from them; in an interview an employer set up, those snapshots are shown to that organisation. In an interview an employer set up, your screen and camera are also recorded as one video — the organisation that set up the interview can watch it, and it is deleted after 30 days. That interview is monitored: still images from your webcam also go to Anthropic’s Claude models through OpenRouter, to check the conditions the interview is taken in. Frames the monitoring flags in that interview are kept as evidence the organisation can see, and are also deleted after 30 days. A practice session you run for yourself keeps no flagged frames.
• Phone camera: if an interview an employer set up uses your phone as a second camera, the video the phone records from the start of the interview to its end (video only, never sound), when the phone connected and when it stopped and why (for example a call, or the screen locking), signals about the phone such as whether its screen is kept on and battery or charging warnings, the version of the phone notice you were shown, and the type of browser and operating system on the phone — never a phone number or a device fingerprint. To connect the phone we email a single-use link to the address on your invitation, or show it as a QR code on your laptop.
• Payment: handled by our payment provider, Razorpay; we receive a confirmation and never store your full card number.
• Usage: operational logs — the requests your browser makes, errors, and timings — which we keep to run the service and diagnose faults. We also keep our own record of the days you used InterviewSparrow and how many times, and how (password, Google, phone link, or at sign-up), you signed in on each, with no IP address, device or page detail, to count active users and sign-ins; it is deleted after about 13 months, or when you delete your account. Page-level product analytics beyond that are only collected if you accept analytics cookies.

How we use your data

We do not sell your personal data. If you accept marketing cookies, the Meta Pixel and Conversions API share hashed identifiers with Meta for advertising, which some US state laws call “sharing”; you can decline marketing cookies, or change your choice at any time from Privacy choices, to stop it.

If InterviewSparrow is sold or merged, your data moves to the new operator, which must keep to this policy, and we will tell you in the product.

Where GDPR or UK GDPR applies to you: we run your interviews, reports and Resume Studio to perform our contract with you; we use duplicate-signup checks, security logs, error monitoring, and counting active users and sign-ins for our legitimate interest in preventing abuse, keeping the service running and knowing how many people use it; analytics and marketing cookies and benchmark contribution rely on your consent, which you can withdraw at any time from Privacy choices and Your data; and sending an interview an employer set up to that employer relies on your agreement in the notice shown before it starts.

• To run your interview and generate your report.
• To let the interviewer follow the work on your shared screen and to score your role exercise; in an interview an employer set up, also to check the conditions the interview is taken in.
• In an interview an employer set up that uses your phone as a second camera, to connect the phone and record the interview from it, for the organisation to review. We use what the phone records only to provide that interview to the organisation — never for your own practice report, for another product, for benchmarks, to choose, train or test AI models, for marketing or for product analytics.
• To show your history, streaks, and progress over time.
• To check the resume you upload and tell you what to fix.
• To build and rewrite a resume draft in Resume Studio, and to check that each rewritten line says only what your resume supports.
• To provide support, and to detect fraud and abuse of our sign-up and of the limits on the service.
• To keep the service secure and to improve it.

AI processing and the providers we use

Running a voice interview, generating a report and running the site involve a few specialist providers. This is the full list, and each only receives what it needs for its task:

• ElevenLabs — runs the real-time voice interview (speech-to-text, the interviewer model, and the voice you hear). ElevenLabs processes your voice on its global infrastructure, for every user wherever they are, so it may be processed outside India. To run the interview, ElevenLabs also receives your first name, the details we take from your resume and from any job description you add, and the interview plan we prepare from them; if a call reconnects, it also receives the transcript so far. Once your report is produced, we copy the recording and transcript to AWS Mumbai and, once both copies are safe, delete them from ElevenLabs. ElevenLabs deletes the recording and transcript automatically after a 30-day retention period. No image of your screen or camera is sent to ElevenLabs. ElevenLabs is set not to use your data to train its models.
• OpenRouter — routes text to the language models that write your report and check your resume. OpenRouter (United States) passes it, and the still images described below, to Anthropic’s Claude models only; on every request we tell OpenRouter to use only hosts that do not store your data or train on it, and those hosts may process it in the United States or in another country. For the one part of the resume check that needs a model, your resume’s text is sent to a language-model provider through this gateway; the uploaded file itself stays in AWS Mumbai. Throughout an interview an employer set up, and in a practice session only while the role exercise runs — which the interviewer starts and ends — still images of your screen are sent through OpenRouter to Anthropic’s Claude models, which run on Google Cloud’s Vertex AI in the United States, so the interviewer can follow your work and your role exercise can be scored; in an interview an employer set up, still images from your webcam are sent the same way to check the interview conditions. For these images we tell OpenRouter to use only that Google host, with no fallback to any other, and only under zero-data-retention terms. In a practice session nothing from your camera is sent. Audio and video are never sent to OpenRouter.
• Cloudflare (Workers AI) and TypeSafe (Jev) — check the lines Resume Studio rewrites against your resume. Cloudflare runs TypeSafe’s Jev language model on its Workers AI service; for that check, your resume’s text, the details you have added to it in Resume Studio, and the rewritten line are sent to it and may be processed outside India. The uploaded file itself stays in AWS Mumbai.
• Amazon Web Services — hosting for the website (AWS Amplify) and the service, encrypted storage (S3), verification / notification email (SES), and operational logs and metrics (CloudWatch), all in the Mumbai region. Pages reach you through Amazon CloudFront, whose edge servers are around the world, so a page you load may pass through a server outside India.
• MongoDB Atlas (MongoDB, Inc.) — runs our database, in AWS Mumbai (ap-south-1).
• Razorpay — processes your payments.
• PostHog — product analytics: which pages and features are used, so we can improve the product. It runs in the United States, and it only loads if you accept analytics cookies.
• Meta (the Meta Pixel and the Conversions API) — measures whether our ads lead to sign-ups and purchases. It only runs if you accept marketing cookies. The events carry a one-way hashed identifier for your account, and a hashed email address where one is sent, never the raw values, and Meta processes them outside India.
• Sentry — error monitoring for the website and the service, so we can find and fix faults. It is set not to collect personal details, identifying fields are stripped from each report before it is sent, and reports may be processed outside India.

When an employer sets up your interview

If an organisation invited you to an interview, that organisation is not one of our suppliers — it receives your data in its own right, and decides for itself how to use what it receives. The notice shown before that interview starts names the organisation, and taking the interview is how you agree to it receiving the results.

Where your details come from: the organisation gives us your name and email address to invite you, and may add your resume and the job. Until you accept the invitation, we hold them on the organisation’s behalf, and use them to send the invitation, set up the interview and check your resume against the job’s requirements.

What it receives: a hiring recommendation with its reasoning; scores on the seven dimensions and the quotes from your answers they were drawn from; whether your resume meets the must-have requirements it set for the job, which we check automatically from your resume; where you rank among the candidates it interviewed for that job; notes on the session conditions and the frames the monitoring flagged; snapshots of your on-screen work; the transcript; a recording of your screen and camera; and, where the interview used your phone as a second camera, the phone recording.

How it is worked out: the interviewer is an AI, and an AI model scores your answers, and your work on the shared screen, against a fixed rubric for the role. The recommendation is worked out from those scores by a fixed formula, the monitoring notes never change a score, and the candidates who have a score are ordered by their overall score. The recommendation, the requirement checks and the ranking are advice to people at the organisation, who make the decision; the organisation must not use them as an automated decision, and InterviewSparrow does not decide whether you are hired or progressed.

The phone camera: some interviews an employer sets up use your phone as a second camera, and the invitation says so. The phone records video only, never sound. We do not send that recording, or anything else from your phone, to OpenRouter, Google or any other AI model, and no automatic check looks at it: people at the organisation watch the recording themselves.

Connecting the phone: we email a single-use link to the address on your invitation, only to connect your phone for that interview, with no open or click tracking; the same link is also shown as a QR code on your laptop. Before the interview starts, the phone’s picture is shown live on your laptop, sent directly between your two devices and never recorded. When that live picture can’t show, your laptop says so in words and nothing stands in for it. To set up that direct connection, the two devices exchange their network (IP) addresses through InterviewSparrow’s servers; we do not log those messages, and we delete them within 10 minutes, and always when the interview starts. No third party receives those addresses: we use no outside connection server, and we will name one here before we ever use one. Everything from your phone is used only to provide that interview to the organisation.

How long: the recording and the flagged frames are deleted after 30 days, and the ranking is kept for up to 24 months. A phone recording is deleted after 30 days too. The report and the requirement checks stay in the organisation’s workspace until the organisation deletes its workspace, even if you delete your InterviewSparrow account.

• Your InterviewSparrow account is yours, not the organisation’s. It cannot delete your account, see your practice sessions, or read a coaching report you bought for yourself.
• We and the organisation each answer for our own use of your data. To reach your data held by InterviewSparrow — access, export, deletion — contact us. To ask why you were screened, how the report was used, or how long the organisation keeps its own copy, contact the organisation.

Voice, and what we do not do

We record your voice so we can transcribe and analyse your answers. We do not build voiceprints or other biometric identifiers, we do not match your face against any database, and we do not use your voice or your face to identify you anywhere else. The phone camera’s video is not analysed by any model or checked automatically.

In an interview an employer set up, your browser measures head and eye position from your camera on your own device, to tell whether you are looking at the screen. Those measurements stay in the browser: they are never sent to us and never stored. What we receive is only that a moment was flagged — and, on a flagged moment, the webcam frames from the few seconds around it, kept as evidence for 30 days and then deleted.

Benchmark contribution (opt-in)

Our reports compare your scores with a fixed strong-performance bar. You can choose to let your anonymised session data help us build better benchmarks. This is a separate, explicit opt-in: it is off unless you turn it on with the Benchmark contribution switch on Your data, you can turn it off there at any time, and declining does not limit your use of InterviewSparrow.

How long we keep it

We keep your account, sessions, transcripts, and reports while your account is open so your history is available to you. You can delete your whole account from the Your Data page, with two exceptions: an account that belongs to an organisation must leave it first (from the portal’s settings page), and if you took an interview an employer set up in the last 30 days, deletion waits until those 30 days have passed. If either starts to apply during the grace period described below, the deletion is cancelled, and you can ask for it again once it no longer applies. You can delete a resume, its Health Check or a Resume Studio draft yourself from Your data, and the resume file itself is erased from storage within about 30 days; to remove an individual interview session, ask us. Server and access logs, which can include IP addresses and device information, are kept for 180 days and then deleted automatically. Our record of the days you used InterviewSparrow, and how you signed in on each, is kept for 400 days (about 13 months) and then deleted automatically, or with your account if you delete it sooner.

Resume Studio drafts follow their own clock: a draft you have not bought a download for is kept for 90 days after you last edited it and is then deleted with its score; a draft you have bought a download for, and the PDF and Word files made from it, are kept until you delete the draft or your account.

When you delete your account, we begin a 30-day grace period during which you can change your mind. After that, a daily clean-up job permanently purges your account data — your audio recordings, transcripts, reports, uploaded files, billing details and the encrypted copy of your email address, together with any credits or Resume Pass days you had not used. Your payment records are the exception: accounting and tax law require us to keep the invoices we issued you and the records of what you paid, so we keep them for 8 years after the deletion, no longer linked to your account and without your email address, and then delete them automatically. An invoice keeps what was printed on it, such as the name, billing address and tax number you gave. We keep a one-way hash of your email address, so that the deletion holds and the same address cannot be registered as a new account; it is not reversible, it is not linked to anything we deleted, and it is not used for anything else. We also keep the support cases you opened: what you wrote and the team’s replies, the browser, page and session details sent with each one, your account identifier and a one-way hash of your email address, and, on a case that is still open, any different address you gave for replies, encrypted, until the case closes. The screenshots you attached are deleted. If an organisation set up an interview with you, its own copy of that interview’s results, and the details it gave us to invite you, stay in its workspace (see When an employer sets up your interview).

Your rights and choices

To exercise a right that is not self-service, email support@interviewsparrow.ai. If you are not satisfied with our answer, you can take it to our grievance officer (see Complaints and grievance officer) and then complain to the Data Protection Board of India; if GDPR applies to you, you can also complain to your data-protection authority.

• Access and export your data (a self-service export is available in the product).
• Correct your account details.
• Delete your entire account from the Your Data page, with two exceptions: an account that belongs to an organisation must leave it first (from the portal’s settings page), and if you took an interview an employer set up in the last 30 days, deletion waits until those 30 days have passed. You can delete a resume, its Health Check or a Resume Studio draft yourself from Your data; to remove a single interview session, email support@interviewsparrow.ai and we will delete it.
• Withdraw benchmark-contribution consent at any time.
• Object to processing based on our legitimate interests, and ask us to restrict processing.
• Nominate someone to exercise your rights for you if you die or become unable to exercise them yourself (the right to nominate under section 14 of India’s DPDP Act). To name them, email support@interviewsparrow.ai with their name and how to reach them.

Security

We use encryption in transit (TLS) and at rest (KMS-encrypted storage), signed-link-only access to audio, scoped access controls, and logging that redacts sensitive fields. No system is perfectly secure, but we work to protect your data and to limit who can reach it.

International transfers

Your core data — your account, transcripts, reports, audio, and any interview recording — is stored in India (AWS Mumbai). During an interview, your voice may be processed outside India: ElevenLabs runs the voice interview on its global infrastructure for every user, wherever they are, and once your report is produced we copy the recording and transcript to AWS Mumbai and, once both copies are safe, delete them from ElevenLabs; ElevenLabs also deletes them automatically after a 30-day retention period. Other processing outside India sends text to a language model through OpenRouter (United States): the text of your session for the report-writing step, and your resume’s text when we check it. The text of your resume and of any job description you add is sent the same way to prepare your interview and, in Resume Studio, to build and tailor your draft; the details and the interview plan prepared from them are then sent to ElevenLabs for the voice interview. OpenRouter passes text to Anthropic’s Claude models only, and on every request we tell it to use only hosts that do not store your data or train on it; those hosts may process it in the United States or in another country. Still images of your shared screen, and in an interview an employer set up still images from your webcam, are sent the same way to Anthropic’s Claude models in the United States, for the live interview, to check the conditions the interview is taken in, and to score your role exercise; audio and video are not. When Resume Studio rewrites your resume, your resume’s text and the rewritten lines are also sent to Cloudflare, which runs TypeSafe’s Jev model on its Workers AI service to check the rewrite, and that text may be processed outside India. Payments are processed by Razorpay in India. Any transfer outside India is only for the task described and under the provider’s own commitments.

Cookies and tracking

Some cookies and similar storage are strictly necessary — they sign you in, keep the product working, and hold a random device identifier we use to stop duplicate accounts, and they are always on. Everything else is your choice, split into two categories you control from the cookie banner: analytics (PostHog), which tells us how the product is used, and marketing (the Meta Pixel and Conversions API), which covers advertising and retargeting trackers run by third parties.

We ask every visitor for this choice, wherever they are, and nothing in either optional category loads unless you accept that category. Decline marketing and no third-party advertising tracker is loaded at all; decline analytics and we fall back to the operational logs we need to run the service and to our own count of the days you use InterviewSparrow, which sets no cookie of its own (see What we collect). You can change your choices at any time from Privacy choices.

Children

InterviewSparrow is for people aged 18 and over. We do not knowingly collect data from children.

Changes to this policy

We may update this policy. When we do, we change the “Last updated” date at the top of this page, and a signed-in account sees a notice in InterviewSparrow, with a link to the updated policy, until it is dismissed.

Complaints and grievance officer

Our grievance officer, for consumer complaints and for DPDP matters, is Harish Seth. You can write to him at support@interviewsparrow.ai, or by post to our registered office, at the address under Who we are in the Terms of Service.

We acknowledge every complaint within 48 hours and resolve it within one month of receiving it.

If you are not satisfied with how we resolved it, you can get help from the National Consumer Helpline (call 1915), file a consumer complaint with the Consumer Commission online on e-Daakhil, and take a complaint about how we handle your personal data to the Data Protection Board of India. If you live outside India, you can also use your local consumer or data-protection authority.

Contact

Privacy questions or requests: support@interviewsparrow.ai. Our grievance officer for DPDP matters is Harish Seth (support@interviewsparrow.ai). He also handles consumer complaints; how to reach him, how quickly we respond and where to escalate are under Complaints and grievance officer.