Privacy Policy

1. What We Collect

We collect information you give us directly when you sign up or use the Service:

• Name, email, and (if you sign in by phone) your Bangladeshi mobile number.

• Practice activity: which questions you attempted, the text/voice answer you gave, sample answers shown, AI feedback, timestamps.

• Device & connection info: IP address, browser/OS, language preference. Used for security and to fix bugs.

• Optional voice recordings (only while you are actively practicing; you control the mic).

2. How We Use Your Information

To provide the Service (host your practice, show your report, save your progress).

To verify your identity via Google, email magic-link, or SMS one-time code (OTP) sent through our SMS partner mimsms.com.

To improve our question bank, sample answers, and AI feedback. Voice and text data may be reviewed in aggregated, anonymized form.

To send transactional emails (account, payment) and, only with your consent, occasional product news.

To detect abuse, fraud, and security incidents.

3. Sharing Your Data

We do not sell your personal data.

Limited service providers may receive data needed to run the Service: Firebase (authentication), mimsms.com (SMS OTP delivery), bKash and similar partners (payment), our hosting provider (Hostinger VPS in Europe).

If you accessed the Service through a recruiting agency (e.g. for an overseas barista role), the agency that invited you may see your practice report.

We will disclose data to authorities if required by a valid order under Bangladeshi law.

4. How Long We Keep Data

Account data: as long as your account is active. If you delete your account, we delete your personal data within 30 days (we may keep limited records to comply with the law).

Practice answers & voice recordings: 12 months by default, then deleted or anonymized.

SMS OTPs: deleted as soon as they are used or after 5 minutes.

Activity logs (sign-in, payment): up to 2 years for fraud protection.

5. Your Rights

You can: view, correct, or download your data; delete your account; revoke consent for marketing; ask us to stop processing your data for non-essential purposes.

To exercise these rights, email support@interviewboss.net from the address linked to your account. We respond within 30 days.

6. Security

Passwords are hashed with bcrypt. Sessions use signed JWT cookies. Data is encrypted in transit (HTTPS).

No internet service is 100% secure. If we ever have a breach involving your personal data, we will notify you and the relevant Bangladeshi authority as soon as possible.

7. Children

The Service is intended for adults aged 18+. We do not knowingly collect personal data from anyone under 18 without parental consent.

8. Changes to This Policy

We may update this Privacy Policy. The "Effective" date will change. If the change is significant, we will notify you in-app or by email.

9. Contact

Privacy questions or requests: support@interviewboss.net.