Privacy Policy for PrimerInterview
Last Updated: February 26, 2026
1. Introduction
Welcome to PrimerInterview ("we," "our," or "us"). We are committed to protecting your privacy and ensuring your personal data is handled in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application and services.
Company Name: GrundLayer
Data Controller Contact: contact@primerinterview.com
2. Information We Collect
We collect information to provide and improve our services, including AI-powered interview practice and resume building.
A. Personal Data You Provide
- Identity Data: Name, email address, profile picture (via authentication providers).
- Professional Data: Job title, industry, experience level, resumes (including education, work history, contact details), and cover letters.
- Interview Data: Audio recordings and transcripts from mock interview sessions, answers to practice questions.
- Financial Data: Payment information and transaction history (processed securely by Stripe; we do not store full credit card details).
- Communication Data: Information provided during support inquiries or feedback.
B. Data Collected Automatically
- Usage Data: Log files, IP address, browser type, device information, and interaction data (e.g., pages visited, features used).
- Cookies: We use cookies to manage sessions and authentication.
3. How We Use Your Data
We process your personal data for the following purposes and legal bases:
| Purpose | Type of Data | Legal Basis |
|---|---|---|
| Service Provision | Identity, Professional, Financial, Interview | Contractual Necessity |
| AI Analysis | Professional, Interview | Contractual Necessity |
| Service Improvement | Usage, Interview (Anonymized) | Legitimate Interests |
| Communication | Identity, Contact | Legitimate Interests |
| Marketing | Identity, Contact | Consent |
| Legal Compliance | Identity, Financial | Legal Obligation |
4. AI and Automated Decision Making
Our service uses Artificial Intelligence (AI) to analyze your data (e.g., resumes, interview answers) to provide feedback and scoring.
- Generative AI: We share input data (resumes, questions) with third-party AI providers (e.g., Google, OpenAI) to generate content.
- No Automated Legal Decisions: Our AI provides advice and practice tools; it does not make significant decisions that produce legal effects concerning you (e.g., we do not make hiring decisions).
5. Data Sharing and Disclosure
We do not sell your personal data. We share data only with stringent safeguards:
Service Providers:
- Hosting & Infrastructure: Vercel (App Hosting), Postgres Provider (Database).
- AI Providers: Google Gemini/OpenAI (for content generation).
- Payments: Stripe (for payment processing).
- Authentication: Better Auth (for user login).
Legal Requirements: If required by law, court order, or government regulation.
Business Transfers: In connection with a merger, sale, or asset transfer of our UK LTD company.
6. International Data Transfers
Some of our service providers (e.g., Google, Stripe, Vercel) may be located outside the UK/EEA (e.g., in the USA). We ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses (SCCs), to protect your data.
7. Data Retention
- Account Data: Retained while your account is active. You may delete your account at any time.
- Financial Data: Retained for 6 years to satisfy UK tax and accounting requirements.
- Usage Data: Retained for a limited period for analytics purposes, or anonymized.
8. Your Rights
Under the UK GDPR, you have the following rights:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate data.
- Right to Erasure: Request deletion of your data ("Right to be forgotten"), subject to legal retention obligations.
- Right to Restriction: Request suspension of processing in certain scenarios.
- Right to Data Portability: Request transfer of your data to another service.
- Right to Object: Object to processing based on legitimate interests or direct marketing.
To exercise these rights, please contact us at contact@primerinterview.com.
9. Data Security
We implement appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS) and at rest (database encryption), and strict access controls.
10. Children's Privacy
Our service is typically intended for professionals and job seekers. We do not knowingly collect data from children under 13.
11. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via email or a prominent notice on our application.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact:
GrundLayer
Email: contact@primerinterview.com