This Privacy Policy describes how Jahnvar LLC, a Delaware limited liability company ("Jahnvar," "we," "us"), collects, uses, and shares information about you when you use the Intervu website, mobile applications, and related services (collectively, the "Service"). By using the Service, you agree to the practices described in this Policy. Capitalized terms not defined here have the meanings given in our Terms of Service.

1. Information We Collect

We collect the following categories of information:

Account Information: Email address, name, and (if you sign in with Google or another identity provider) profile picture and unique identifier from that provider.
Authentication Data: Tokens, session metadata, and device identifiers used to keep you signed in and to detect suspicious access.
User Content: Audio and video recordings of your practice responses, text and transcribed responses, uploaded resumes, uploaded job descriptions, and any other content you submit.
Usage Data: Pages visited, features used, session length, response times, interview scores, progress, error logs, and similar telemetry.
Device & Technical Data: IP address, browser type, operating system, device type, language preferences, and approximate location derived from IP address.
Communications: Messages you send us (for example, support requests) and your responses to surveys or in-app prompts.
Payment Data: If you purchase a paid plan, our payment processor collects your payment card information and billing address. Jahnvar receives only a limited token and transaction metadata; we do not store full card numbers.
Cookies & Similar Technologies: See Section 9.

We do not knowingly collect government identifiers (such as Social Security numbers) or precise geolocation, and we ask that you not include such information in your User Content. Hiring interviews are audio-only: they never request camera access and involve no facial, body-language, or biometric analysis. In the optional practice camera mode, and only when you choose it, we analyze body-language signals from your video (such as facial landmarks and posture) solely to generate your own private feedback; you can always choose audio-only or text practice instead. We do not use any of this data to uniquely identify you.

2. How We Use Your Information

We use your information to:

Provide, maintain, secure, and improve the Service.
Generate AI-powered feedback, transcriptions, scoring, and practice content.
Authenticate users, detect and prevent fraud and abuse, and enforce our Terms.
Communicate with you about your account, security alerts, support requests, and changes to the Service.
Send service-related notifications (e.g., when feedback is ready). With your separate consent, send marketing communications, which you can unsubscribe from at any time.
Aggregate and de-identify data for analytics and product research. Aggregated data does not identify you.
Comply with legal obligations, respond to lawful requests, and protect our legal rights.

We do not use your User Content to train our own AI models, and we do not sell your personal information.

3. Legal Bases for Processing (EEA / UK Users)

If you are in the European Economic Area, United Kingdom, or Switzerland, our legal bases under the GDPR or UK GDPR are:

Performance of a contract — to deliver the Service you have signed up for.
Legitimate interests — to secure, improve, and analyze the Service, and to prevent fraud, provided those interests are not overridden by your rights.
Consent — for optional features (such as push notifications, marketing emails, and certain cookies), which you can withdraw at any time.
Legal obligation — to comply with applicable law.

4. How We Share Information

We do not sell or rent your personal information. We share information only in the following circumstances:

Service Providers (Subprocessors): We share information with vendors who process data on our behalf under written agreements requiring confidentiality and security. See Section 5.
Legal & Safety: We may disclose information if required by law, subpoena, court order, or other legal process; to enforce our Terms; or to protect the rights, property, or safety of Jahnvar, our users, or others.
Corporate Transactions: In the event of a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of the transaction, subject to standard confidentiality protections.
With Your Direction: When you choose to share content or connect a third-party service.

5. Third-Party Subprocessors

We rely on the following categories of subprocessors to operate the Service. Each is contractually obligated to safeguard your data and use it only to provide services to us.

Cloud hosting & storage: Amazon Web Services (United States) — hosts our servers, databases, and stored audio.
AI feedback & analysis: Anthropic, PBC (Claude) — processes your responses and resumes to generate feedback. Anthropic does not use API inputs to train its models.
Speech-to-text: OpenAI, LLC (Whisper) — transcribes your audio responses.
Text-to-speech: Self-hosted Kokoro TTS — generates interviewer audio. Runs on our own infrastructure; no data is sent to a third party.
Authentication: Keycloak (self-hosted) and, if you choose, third-party identity providers such as Google.
Email delivery: Amazon Simple Email Service (United States).
Payments: Our payment processor (disclosed at checkout) handles card data directly under its own privacy policy.

We may update this list as our vendors change. The most current list is available on request to support@intervu.io.

6. Data Storage, Security & International Transfers

Your data is stored in the United States. We use industry-standard administrative, technical, and physical safeguards, including encryption in transit (TLS) and at rest, access controls, isolated per-service databases, and audit logging. No system is fully secure; we cannot guarantee absolute security, and you use the Service at your own risk.

If you access the Service from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, which may have data protection laws different from those of your country. Where required, we rely on appropriate transfer mechanisms (such as the Standard Contractual Clauses) to protect your information.

7. Data Retention

We retain your account information and User Content for as long as your account is active or as needed to provide the Service. After you delete your account, we will delete or de-identify your personal information within 30 days, except for (a) information we are legally required to retain (such as transaction records), (b) backup copies retained for a reasonable period before being overwritten, and (c) aggregated or de-identified data that no longer identifies you.

8. Your Rights & Choices

Depending on where you live, you may have some or all of the following rights:

Access — request a copy of the personal information we hold about you.
Correction — ask us to correct inaccurate information.
Deletion — request that we delete your personal information, subject to legal exceptions.
Portability — request a copy of certain information in a structured, machine-readable format.
Restriction or Objection — ask us to restrict or object to certain processing.
Withdraw Consent — where we rely on consent, withdraw it at any time without affecting prior processing.
Opt out of Marketing — unsubscribe from marketing emails via the link in any such email.
Lodge a Complaint — EEA/UK users may complain to their local supervisory authority.

To exercise any right, email support@intervu.io. We will verify your request using the information associated with your account and respond within the time required by applicable law (typically 30–45 days). We will not discriminate against you for exercising any privacy right.

U.S. State Privacy Rights (CA, CO, CT, NJ, OR, TX, UT, VA & others)

If you are a resident of a U.S. state with a comprehensive consumer privacy law, you have the rights listed above as applicable. We do not "sell" or "share" your personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA) or analogous laws. We do not use sensitive personal information for purposes that trigger a right to limit. You may designate an authorized agent to submit a request on your behalf; we will require verification of your identity and the agent's authority.

California "Shine the Light"

California residents may request information about disclosures of personal information to third parties for direct marketing purposes. We do not make such disclosures.

9. Cookies & Similar Technologies

We use cookies and similar technologies to authenticate sessions, remember preferences, secure the Service, and measure performance. Most cookies we use are strictly necessary; optional analytics cookies are used only where permitted. You can control cookies through your browser settings, though disabling them may affect the Service.

10. Automated Decision-Making & AI Output

The Service uses AI to generate feedback and scoring based on your User Content. For practice sessions, these outputs are educational, are private to you, and have no legal or similarly significant effect. For hiring interviews that an employer invites you to complete, the recording, transcript, and AI-generated scores and summary are shared with that employer and inform the employer's hiring process; human beings at the employer make the decisions. You may request access to, correction of, or deletion of your interview data at any time via support@intervu.io. You should not rely on AI Output as professional advice (see Section 8 of the Terms of Service).

11. Camera, Microphone & Recording

When you grant access, we use your device's microphone (and, in practice camera mode only, your camera) to record your practice interview responses and — when an employer invites you to interview through the Service — your audio-only responses to that hiring interview. Recordings are uploaded to our secure storage and processed for transcription and feedback. We do not share recordings with other users. You can revoke camera and microphone access at any time through your device settings; doing so may prevent you from using certain features.

12. Push Notifications & Email

With your permission, we may send push notifications and emails about your practice sessions and feedback. You can disable push notifications in your device settings and unsubscribe from marketing emails using the link in any marketing message. Transactional emails (such as security alerts and account changes) cannot be disabled while you maintain an account.

13. Children's Privacy

The Service is not directed to, and we do not knowingly collect personal information from, children under 16. If we learn that we have collected personal information from a child under 16 without verified parental consent, we will delete it promptly. If you believe a child has used the Service, contact support@intervu.io.

14. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will provide reasonable advance notice by email, in-app notification, or a notice on the Service. The "Last updated" date at the top reflects the effective date. Continued use of the Service after the effective date constitutes acceptance.

15. Contact

Jahnvar LLC Email: support@intervu.io