Your data

• Your account profile (display name, locale, geo tier), a one-way hash of your email address, and an encrypted copy of that address that we use only to email you. The copy is deleted with your account.
• Sessions you have completed — transcripts, audio, generated reports.
• The days you used InterviewSparrow, how many times you signed in on each, and how (password, Google, phone link, or at sign-up) — no IP address, device or page. Deleted after about 13 months, or with your account.
• Resumes and job descriptions you upload, plus the parsed text.
• The full text taken from your resume, together with how the page was laid out — kept with the resume and deleted with it.
• The score we work out for your resume, and the fixes we work out from it.
• Frames the monitoring flags in an interview an employer set up — kept as evidence that organisation can see for 30 days, then deleted. A practice session keeps none.
• Snapshots of the work on your screen during a session — the diagram or code you produce. Kept until you delete them; in an interview an employer set up, that organisation sees them alongside your report.
• Interviews an employer set up — a recording of your screen and camera with both voices, which that organisation can watch, and, where the interview uses your phone as a second camera, the phone’s video. Deleted after 30 days.
• Payment metadata (amounts, currency, provider IDs) — never card numbers. Kept for 8 years after you delete your account, no longer linked to you, as accounting and tax law require.
• Resume drafts you build in Resume Studio — a draft you have not bought a download for is kept for 90 days after you last edited it and is then deleted with its score; a draft you have downloaded is kept until you delete the draft or your account.
• The PDF and Word files you create from a draft — deleted with that draft, or with your account.
• A record of each Resume Pass: its dates and purchase reference — deleted with your account.
• Sign-up checks — the country you signed up from and the price region it sets, a one-way hash of the network address you signed up from, and a one-way hash of a random device identifier your browser sent when you signed up.
• Support cases you open from Help & feedback — what you write and the team’s replies, screenshots you attach, your browser type, the page you were on and any session or report you were looking at, and, if you give a different address for replies, that address, encrypted, until the case closes. A case is kept after you delete your account, apart from its screenshots.
• Billing details you add for an invoice — business name, address and GSTIN — and the invoices we issue. Deleting your account deletes the billing details; the invoices are kept for 8 years, no longer linked to you, and then deleted.
• Which version of the Terms of Service and of the Resume Studio notice you accepted, and when, and your benchmark contribution choice. Your cookie choices are kept in your browser.
• If an organisation invited you to an interview: the name, email address and job it gave us, and any resume it added.

• Video of your practice sessions — your screen is not recorded as video, and nothing from your camera is recorded, sent or monitored.
• Your password — only a one-way bcrypt hash.
• Your email after account deletion — only a one-way hash for duplicate-signup prevention.
• Card numbers — those live with our payment provider, Razorpay.

Your account, transcripts, reports and recordings are stored in ap-south-1 (Mumbai). During an interview, ElevenLabs processes your voice on its global infrastructure, which may be outside India, and receives your first name, the details from your resume and job description that the interview is built on; once your report is produced we copy the recording and transcript to Mumbai and, once both copies are safe, delete them from ElevenLabs; ElevenLabs also deletes them automatically after a 30-day retention period. Reports use OpenRouter for LLM analysis — parsed resume, JD, and transcript text are sent to OpenRouter providers, which may process them in the United States or another country; when we check your resume, its text is sent too. Audio and video never go to OpenRouter, and the resume file you uploaded never leaves Mumbai. Still images do: in a practice session only while the role exercise runs, and throughout an interview an employer set up, stills of your screen go through OpenRouter, a provider based in the United States, to Anthropic’s Claude models so the interviewer can follow your work and the exercise can be scored, and in an interview an employer set up, stills from your webcam go the same way to check the interview conditions. In a practice session nothing from your camera is sent. When Resume Studio checks a line it rewrote, your resume’s text, the details you added and the rewritten line go to Cloudflare (Workers AI), which runs TypeSafe’s Jev model, and may be processed outside India. Where What we store gives a period or an exception, that applies; everything else is kept until you delete it or your account.