Draft
This is a draft for your lawyer to review before launch. It is not legal advice, and it describes what the software is designed to do — it must be checked against what the software actually does on the day you publish it.
Last updated: [DATE] · Controller: [LEGAL BUSINESS NAME], [JURISDICTION AND BUSINESS ADDRESS]
What we collect
| Data | Why | How long |
|---|---|---|
| Email address | To sign you in and send receipts | Until you delete your account |
| Job title and job description you paste | To generate questions for that job | Until you delete the target job |
| Resume file, if you upload one | To extract facts about your experience | Deleted within 24 hours. Facts extracted from it are kept only if you tick the box. |
| Resume text, if you paste it instead | Same purpose | Until you delete it |
| Your answers, as text | To give feedback, and to show your pattern across sessions | Until you delete the session or your account |
| Audio recording | Converted to text in your browser | Never stored and never uploaded. It exists only while you are speaking. |
| Payment records | Legal and accounting obligation | Seven years, as required. Card details are never seen by us. |
| Anonymous usage events | To see where people get stuck | Aggregated. Contains no text you wrote. |
The honest trade-off
We keep your answers as text. We have to: the most useful thing this product does is tell you what you keep getting wrong across several sessions, and that is impossible without remembering what you said. If that is not a trade you want to make, use the free session, which you can delete immediately afterwards.
What we never do
- Sell or rent your data to anyone.
- Share your answers, resume or job descriptions with employers, recruiters or job boards.
- Publish your words as an example without explicit written permission.
- Put transcript text, resume text, job description text, names or email addresses into analytics.
Who else processes your data
Named on the AI Use and Limitations page: who hosts the database, who processes the language model requests, who handles payment, and who sends email. That page is kept current because a general statement here would go stale.
A claim we are not making
We do not currently state that our providers never train on data sent to them. That claim is only true under specific contracts and settings, and we will only make it once the contracts we are actually on support it.
Your rights
Ask what we hold, get a copy, or have it deleted — from your account settings, or by emailing us. Deletion requests are actioned within seven days and usually the same day. Deleting your account removes everything except the payment record we are legally required to retain.
Cookies
We use a cookie to keep you signed in, and privacy-respecting analytics that do not set advertising cookies or follow you to other sites. No advertising pixels are installed. See Cookies.
Children
This service is not intended for anyone under 16.
Contact
support@straightwithme.com