Privacy Policy
Last updated: 8 May 2026
1. Who we are
AI Interview Preparation Studio ("we", "us", "our") is operated by Focus AI Studio, based in the United Kingdom. We are the data controller for personal data collected through this service. For data protection enquiries, contact us at support@aiinterviewstudio.com.
2. What data we collect
We collect the following personal data when you use our service: - Account data: your name and email address, collected when you sign in via Google OAuth. - Usage data: interview sessions you create, questions generated, answers submitted, mock interview scores, and STAR builder drafts. This data is used to provide the service and track your progress. - Payment data: if you purchase a pass, payment is processed by Stripe. We do not store your card details. We retain a record of your purchase and pass type. - Technical data: IP address, browser type, and device information collected automatically for security and analytics. - Communications: if you contact us by email, we retain that correspondence.
3. How we use your data
We use your data to: - Provide and personalise the interview preparation service - Track your session history and readiness score - Process payments and manage your pass - Send transactional emails (purchase confirmation, pass expiry reminders) - Improve the product through aggregated, anonymised analytics - Comply with legal obligations We do not sell your data to third parties. We do not use your data for advertising. AI training: We do not use your personal interview answers, STAR builder drafts, or session content to train our own AI models. Data sent to Anthropic is processed via their API solely to generate your questions and feedback. Anthropic does not use API data to train their AI models by default. We have not opted in to any data sharing arrangement with Anthropic for model training purposes. Audio and video: Our service is text-based only. We do not collect, store, or process audio recordings, video recordings, or any biometric data. Confidentiality: Your session data and interview answers are treated as confidential and processed only to provide the service. We recommend you avoid submitting confidential employer information or commercially sensitive material during practice sessions.
4. Legal basis for processing
Under UK GDPR, we process your data on the following legal bases: - Contract: processing necessary to provide the service you have signed up for - Legitimate interests: improving our product and ensuring security - Legal obligation: where required by law - Consent: where you have explicitly consented (e.g. marketing communications)
5. Data sharing
We share your data only with trusted third-party service providers who help us operate the service: - Supabase: database hosting (EU region) - Stripe: payment processing - Anthropic: AI question and feedback generation (your answer text is sent to Anthropic's API for processing) - Vercel: frontend hosting - Railway: backend hosting - PostHog: product analytics. IP addresses are masked before being sent to PostHog. PostHog is configured to minimise the collection of personally identifiable information where possible. - Sentry: error monitoring (error logs do not contain interview answer content) All providers are contractually bound to handle your data securely and in accordance with applicable data protection law.
6. Data retention
We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes. Payment records are retained for 7 years under UK financial regulations. Where possible, the link between payment records and your specific session data is severed at the point of account deletion, so that retained financial records cannot be used to identify your interview content. Session data, answers, and scores are retained to provide the progress tracking features of the service. You can request deletion of your session data at any time by contacting us at support@aiinterviewstudio.com.
7. Your rights under UK GDPR
You have the following rights regarding your personal data: - Right of access: request a copy of the data we hold about you - Right to rectification: request correction of inaccurate data - Right to erasure: request deletion of your data - Right to restrict processing: request we limit how we use your data - Right to data portability: request your data in a machine-readable format - Right to object: object to processing based on legitimate interests To exercise any of these rights, email us at support@aiinterviewstudio.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. Automated processing: AI-generated scores and feedback are produced automatically using AI models and are intended for self-improvement purposes only. They do not constitute a legal or professional decision about your employability and have no formal standing with any employer or institution.
8. Cookies
We use the following cookies: - Authentication cookies: to keep you signed in to your account (essential) - Analytics cookies: PostHog uses cookies to track anonymised usage patterns. PostHog is configured to minimise the collection of personally identifiable information where possible. You can control cookies through your browser settings. Disabling essential cookies will prevent you from signing in.
9. Security
We implement appropriate technical and organisational measures to protect your data, including: - Encrypted connections (HTTPS) for all data in transit - Encrypted storage provided by our database host (Supabase) - Access controls limiting data access to authorised systems only - Secure authentication via Google OAuth - Regular dependency updates and security monitoring via Sentry However, no internet transmission is completely secure. If you have concerns about the security of your data, contact us at support@aiinterviewstudio.com.
10. International transfers
Some of our third-party providers (including Anthropic and Vercel) are based in the United States. Where data is transferred outside the UK, we ensure appropriate safeguards are in place, including the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses where required.
11. Children
Our service is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.
12. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a notice on the website. The date at the top of this page shows when the policy was last updated.
13. Contact us
For any privacy-related questions or to exercise your data rights, contact us at: Email: support@aiinterviewstudio.com Website: aiinterviewstudio.com We aim to respond to all requests within 30 days.