Privacy Policy

Last updated: May 2026

1. Information We Collect

When you use CopilotInterview.ai, we collect:

• Account information: Email address and name when you sign up.
• CV data: If you upload a CV, we process it to generate a professional summary. The raw file is deleted immediately after processing (zero-knowledge architecture).
• Session data: Practice session transcripts and AI-generated suggestions during active sessions.
• Usage data: Session count, feature usage, and performance metrics.

2. How We Use Your Information

• To provide real-time interview preparation coaching and AI-generated answers.
• To personalize responses based on your CV and session context.
• To improve our AI models and service quality.
• To communicate important service updates.

3. Data Storage & Security

All data is stored on AWS infrastructure with encryption at rest (AES-256) and in transit (TLS 1.2+). We use AWS KMS for key management and follow SOC 2 security practices.

• CV files are deleted from storage within 60 seconds of processing.
• Only the AI-generated summary is retained.
• Session transcripts are encrypted and access-controlled.
• PII is automatically redacted from stored data.

4. Data Sharing

We do not sell, rent, or share your personal data with third parties. Data is processed exclusively through AWS services within our secured infrastructure.

5. Your Rights

• Access your data at any time through your account.
• Request deletion of your account and all associated data.
• Export your session history.
• Opt out of data processing for service improvement.

6. Audio Data

Audio captured during interview practice sessions is processed in real-time for transcription and is never stored permanently. Audio data is streamed directly to AWS Transcribe and discarded immediately after transcription.

7. Chrome Extension

The CopilotInterview.ai Chrome Extension requests the following permissions:

• tabCapture: Captures tab audio to transcribe speech in real-time during active practice sessions only. Audio is never recorded or stored.
• offscreen: Required to run Web Audio API for audio processing, as this API is not available in the extension's service worker.
• storage: Stores user preferences, session state, and authentication tokens locally on your device.
• identity: Authenticates you via a secure OAuth flow with AWS Cognito.
• webNavigation: Detects the OAuth redirect URL to complete the authentication flow securely.

The extension's content script runs only on Google Meet, Microsoft Teams, and Zoom domains to display a "Disclosed Mode" badge when enabled by the user.

Data retention:

• Audio: never stored — processed ephemerally in real-time.
• Transcripts: retained for 30 days, then automatically deleted.
• CV summaries: retained until you delete your account.
• Session metadata: retained for 90 days for analytics.

8. Data Deletion

You can request deletion of all your data at any time by:

• Using the "Delete Account" option in your account settings.
• Emailing builder@copilotinterview.ai with your account email.

All data will be permanently deleted within 30 days of your request.

9. Contact

For privacy-related inquiries, contact us at builder@copilotinterview.ai