Your interview stays between you and the interviewer.

Interview speech-to-text is streamed live through our commercial live-transcription partner under a zero-retention agreement. Audio flows through transcription in real time and is not persisted to our servers. Our current subprocessor list is available to customers on request at [email protected].

So you can review how an interview went, we store an encrypted archive of the transcript and the AI's responses in encrypted cloud storage under your account, kept until you delete it or close your account. Raw audio is never part of it. Email us and we'll switch it off for your account.

Uploaded files are processed into a searchable index that lives in your account and only your account (encrypted at rest, mirrored to encrypted cloud storage so the desktop app can sync). This is required so the AI can ground answers in your actual resume and role.

Delete any file from the KB page and it's gone the same second — no trash bin, no delayed backup.

Live interview answers stream through commercial AI providers we've chosen because they don't train on API traffic by default. We forward the retrieved context (relevant chunks of your resume + JD + KB) and the question. We don't send your identity to the providers.

This landing site runs our own analytics — no third-party pixels, no data leaves our server. It logs pageviews, referrer, country (from IP, not stored), device type, and a handful of named button clicks. No cross-site identifiers, no session recording, no IP address retained after the request. No Google Analytics, no Meta Pixel, no ad trackers.

The app (app.miprep.ai) uses no analytics; every page is server-rendered on demand.

Two, both first-party, neither one an ad network's. One remembers your language. The other is written only if you arrive from an ad or a link that carries campaign tags — it records which campaign sent you, the page you landed on, and the time, so we can tell which ads are worth paying for. It is written once, never overwritten, and expires after 90 days. Arrive directly and nothing is written at all.

It holds no name, no email, and no identifier that works on anyone else's site.

When a subscription is paid, we send the sale — its value, the time, and the campaign tags from the cookie above — back to the ad platform that sent you (Google, Microsoft, or Meta). That is how an ad platform learns which ads produce customers rather than clicks. It happens on our server after the fact, which is why this site carries no conversion pixel.

Ask us to delete your data and the pending uploads are cancelled and the copies erased along with everything else.

If you sign up, we store your email in our own database on our own server. We use it to sign you in (via one-time code) and send billing / account emails. We do not sell, rent, or share it.

Account sign-in uses email + one-time code (no passwords). Sign-in uses standard secure session cookies that expire quickly and can only be renewed if nothing suspicious happened. We don't use third-party sign-in buttons that watch you across sites.

Email [email protected] to request a copy of the data we hold, correct it, or delete it entirely. GDPR + CCPA scope, honored regardless of where you're based.

When we change this policy, we update the effective date at the top and post a notice on the homepage for 14 days. We do not silently expand data collection.

Effective 2026-08-29. Written by a human, not a lawyer, so if something reads ambiguously, email us — we'll clarify plainly rather than hide behind jargon. Changed on this date: the campaign cookie and the conversion upload above, both new.