Privacy Policy

This Privacy Policy explains how TrueCode Technologies Inc (“TrueCode Technologies Inc,” “we,” “us”) collects, uses, discloses, stores, and protects personal information when you use the TrueInterview service (the “Service”). This Policy is incorporated into our Terms of Service. By using the Service, you agree to the practices described herein.

This Policy applies to all users of the Service, regardless of location. Additional rights may apply depending on your jurisdiction. You acknowledge that automated resume submission, LLM processing of your career data, and cross-platform data sharing carry inherent privacy risks.

(a) Information you provide directly.

• Account information: name or username, email address, and password credentials.
• User Content: interview recollections, interview questions, problem write-ups, solutions, and other material you submit, whether through the Service, as an uploaded file, or by email to us. Such content may contain personal information, including names of companies, interviewer identities, your employment history, and other identifying details.
• Practice records: the work you do on practice questions, such as the code you write and run. On AI Coding questions this includes your conversation with the exam assistant — your messages, its replies, and which of its proposed changes you applied — kept with your practice record so that an AI Review can assess how you directed the assistant and checked its work.
• Resume files: when you upload a resume file to be read into your profile, we keep the original file and technical details about it — its file type, size, page count, and the software that created it, as recorded in the file itself.
• Communications: messages you send to us (support requests, feedback).

(b) Payment information. If you make purchases, payment is processed by a third-party payment processor. We do not store full payment-card numbers.

(c) Information collected automatically. Usage and device data (IP address, browser type, device identifiers, pages viewed, and interaction logs), and cookies and similar technologies (see Section 11). This includes:

• Product analytics: events that record what you do on the Service, for example the pages and features you open, the buttons and links you click (with their labels), whether a practice submission passed, and which plan you bought. Once you are signed in, these events are linked to your account, along with your account email address, when you signed up, your plan and its status, and how you found the Service (what you told us, and the channel, campaign, and country of your first visit). For each request to an AI feature, an event records which model answered, how many tokens it used, what it cost, and how long it took, and never what you or the model wrote; when a request cannot be tied to a visitor who has allowed analytics, that event carries nothing that identifies you.
• Error reports and performance measurements: when the Service fails in your browser, a report of the error (its type and message, where in our code it happened, and the page you were on), linked to your account like the events above; and how long our servers took to answer your browser, kept only as totals per part of the Service. Errors on our servers, and timings of our servers and of AI requests, are sent to our product-analytics provider with nothing that identifies you.
• Session recordings: a reconstruction of what our pages showed you and how you moved through them, including what you typed into their fields, so that we can see where the Service confuses or fails the people using it. A recording can therefore include content you enter, such as code, resume text, and messages to our AI assistants. The replies those assistants write in their chat panels, and the written feedback of an AI Review, including an interview report, are hidden in a recording. So are the scoped requirements, the step questions, the written feedback, the interviewer’s answers and the sample answers of system-design guided practice, and the written feedback and follow-up questions on answers in an AI Coding assessment. Recordings never capture: passwords, including one you have chosen to show on screen; the token that connects our browser extension to your account; the files you upload or their names; payment-card details, which you enter on our payment processor’s hosted pages and never on ours; the employer-portal logins we keep for you; the Address and Employment sections of your settings; your street address, postal code, and voluntary demographic, disability, veteran, and work-authorization answers on the screens where you check an application before it is sent and review what it sent, in the application drafts we prepare for you, in your saved answers, in your visa-sponsorship setting, and in the work-authorization requirements you choose to hide job listings by; the mail relayed through your application address, in your settings and on each saved role’s page; the explanations you write after each stage of an interview session, where you write them and where the session or its report shows them back to you; or the AI interviewer’s questions and your spoken or typed answers in a mock interview, where you answer them and where your interview report shows them back to you.

We do not intentionally collect health data, racial/ethnic origin, religious beliefs, biometrics, or other CCPA-defined sensitive personal data unless you voluntarily embed such information within your resume or application materials.

(d) Information from public sources. Job postings and company information shown on the Service are compiled from publicly available sources, such as employers’ career pages, public job boards, and company websites. This is information about employers and their openings, not about you; where a public page names an individual in a professional capacity (for example, a recruiter listed on a posting or a company’s website), we use it only to help you research that employer and its openings. To ask us to remove such information, contact us as described in Section 9.

We use personal information to:

• Provide, operate, and maintain the Service;
• Host, display, and distribute your User Content as licensed in our Terms of Service;
• Process your User Content through third-party LLM providers to deliver Service features (see Section 5);
• Authenticate users and secure accounts;
• Respond to inquiries and provide support;
• Detect, prevent, and address fraud, abuse, and violations of our Terms;
• Comply with legal obligations and enforce our agreements;
• Understand how the Service is used and improve it, including through the product analytics and session recordings described in Section 2(c), which are linked to your account once you are signed in.

You acknowledge that AI processing may alter, rephrase, or restructure your personal career data; TrueCode Technologies Inc does not guarantee the accuracy, completeness, or legal compliance of any AI-modified resume or application output, and you must independently review all AI-generated content prior to submission to employers.

Legal bases (where GDPR applies): performance of a contract; our legitimate interests in operating and securing the Service; compliance with legal obligations; and, where required, your consent.

Product analytics and session recordings. If you are in the European Economic Area, the United Kingdom, Switzerland, or Quebec, or we cannot tell where you are, our product-analytics provider (Section 4) records nothing about you and makes no session recording until you accept on the cookie banner, and your consent is our legal basis for both. Elsewhere, we rely on our legitimate interest in understanding and improving the Service, and you can object at any time by choosing “Reject all” under “Cookie settings” in the site footer. Wherever you are, if you reject, or have not yet accepted where consent is required, our product-analytics provider is not loaded in your browser at all: it collects nothing from your browser, makes no session recording, and stores nothing on your device. Rejecting after you accepted stops it in every open tab and removes the identifiers it stored.

We disclose personal information to:

• Service providers and processors acting on our behalf (including cloud-hosting providers, analytics providers, payment processors, and customer-support platforms);
• Our product-analytics provider: PostHog, Inc. (product analytics, session recording, error reports and performance measurements, hosted on PostHog US Cloud, so this data is stored in the United States — see posthog.com/privacy). It processes the analytics events and session recordings described in Section 2(c) on our behalf, as our service provider, and we do not use any of its features that pass data on to advertising networks;
• Third-party LLM providers as described in Section 5;
• Third-party job & ATS platforms: only the specific employer portals, job boards, and recruitment websites you explicitly select for one-click auto-submission. These third parties are independent data controllers with separate privacy policies, data-retention rules, and security practices. TrueCode Technologies Inc has no control over their data handling.
• Legal and safety recipients when required by law, legal process, or to protect rights, safety, and property;
• Business transfers, in connection with a merger, acquisition, financing, or sale of assets.

We do not sell your personal information for money. To the extent any data practice constitutes a “sale” or “sharing” under the CCPA/CPRA, see Section 7 for your rights and opt-out.

To deliver core features, your User Content and certain inputs may be transmitted to and processed by third-party large-language-model (LLM) providers (for example, providers of AI evaluation and feedback services).

• These providers process the data to return results to the Service.
• Each provider’s handling of data is governed by its own terms and data-processing commitments. Current provider(s) and their applicable data-use / API terms: OpenRouter (model routing, including DeepSeek models — see openrouter.ai/privacy) and Anthropic (see anthropic.com/legal/privacy); under the API terms we use, your inputs are processed only to provide the Service and are not used to train their models.
• We use these providers under API terms that limit the use of submitted data to providing the Service; your inputs are not used to train their models.
• In an AI Coding assessment, when you ask for feedback on a written answer, that answer and the code it is about (the starter project, or the changes your workspace last saved) are sent to these providers to grade it. Neither the answer nor the feedback is stored.

We retain personal information for as long as your account is active or as needed to provide the Service, and thereafter as required for legitimate business or legal-compliance purposes (including tax, audit, and litigation-preservation obligations). When information is no longer needed, we delete or anonymize it.

You may request deletion of your account and User Content as described in Section 9. Upon a verified deletion request, we will delete or anonymize your personal information within thirty (30) calendar days, subject to legal exceptions. Some residual copies may persist in backups for a limited period and in records we are legally required to retain.

Product analytics and session recordings. Deleting your personal information includes deleting the person record our product-analytics provider holds for your account, together with the analytics events and session recordings linked to it, within the same period. Session recordings are also deleted automatically after a limited retention period, whether or not you ask.

Resume files you upload. We keep the original of each resume file you upload for as long as your account exists, in private storage that no other user can reach. Authorized members of our team may open these files to provide support and to understand which resume formats our tools need to handle better; every such access is logged. We do not share them with employers or anyone else unless you send them as part of an application. They are deleted together with your account.

Third-party retention exception. Once your resume or application data is transmitted to external job boards, ATS, or LLM providers via your authorized action, TrueCode Technologies Inc cannot delete or control copies retained by those independent third parties. You must submit separate data-deletion requests directly to such third-party platforms.

If you are a California resident, you have the right to:

• Know / access the categories and specific pieces of personal information we have collected;
• Delete personal information we have collected, subject to exceptions;
• Correct inaccurate personal information;
• Opt out of any “sale” or “sharing” of personal information for cross-context behavioral advertising;
• Limit the use of sensitive personal information to what is necessary to provide the Service;
• Non-discrimination for exercising these rights.

To exercise these rights, contact us at kevin@trueinterview.io. We will verify your request before responding. You may use an authorized agent. We do not sell or share your personal information for cross-context behavioral advertising; accordingly, we do not offer a “Do Not Sell or Share My Personal Information” link at this time.

If you are in the European Economic Area or the United Kingdom, you have the right to access, rectify, erase, restrict, and port your personal data, to object to certain processing, and to withdraw consent where processing is based on consent. You may also lodge a complaint with your local supervisory authority.

Automated-processing disclosure. Our AI resume-rewriting and auto-fill features constitute automated processing of your personal data; all AI outputs are advisory only, and no legally binding employment decisions are made by our platform.

Data controller: TrueCode Technologies Inc — contact: kevin@trueinterview.io.

EU/UK representative (where required): none appointed at this time.

Data Protection Officer (where appointed): none appointed at this time.

Submit requests to kevin@trueinterview.io or through your in-product account settings. We will respond within the timeframes required by applicable law.

We are based in the United States, and your information will be processed in the United States and potentially other countries where we or our providers operate. Where we transfer personal data out of the EEA or UK and an appropriate safeguard is required, we rely on the following transfer mechanism: our service providers' data-processing agreements incorporating the European Commission's Standard Contractual Clauses (SCCs), where required. Product analytics and session recordings are stored in the United States by our product-analytics provider (see Section 4).

We use cookies and similar technologies for authentication, preferences, security, analytics, and session recording. You can control cookies through your browser settings. Where a cookie-consent mechanism is required for your jurisdiction, our approach, including the cookie categories disclosed, how affirmative consent is obtained before non-essential cookies are set, and how you may withdraw consent, is described here: if you are in the European Economic Area, the United Kingdom, Switzerland or Quebec (or we cannot tell where you are), a consent banner is shown on your first visit, and non-essential (analytics, session-recording and advertising) cookies and identifiers stay off until you accept; elsewhere, analytics, session recording and advertising cookies are on by default and you can turn them off. Anywhere, you can change or withdraw your choice at any time via the "Cookie settings" link in the site footer. Signups and purchases are recorded on our own servers as business records whatever you choose.

Product analytics. Our product-analytics provider (Section 4) sets a first-party cookie and stores entries in your browser’s local and session storage, all with names beginning “ph_”. They hold a random identifier for your browser and your current session and, once you are signed in, your account ID; the cookie lasts up to one year. A separate local-storage entry, “ti_ph_consent”, records that you accepted analytics. None of these is set unless analytics is allowed: after you accept where consent is required, and by default elsewhere. If you reject analytics, the provider is not loaded, these entries are removed and not set again, and your sessions are not recorded.

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information. No method of internet transmission, cloud storage, or third-party LLM API transfer is completely secure, and we cannot guarantee absolute protection. You are responsible for safeguarding your account credentials and for avoiding submission of extremely sensitive unredacted personal identifiers (full SSN, passport numbers) unless absolutely required for job applications.

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be posted with an updated “Last Updated” date and, where required by law, communicated to you via email or site notification.

You agree to indemnify, defend, and hold harmless TrueCode Technologies Inc from all third-party claims, regulatory investigations, fines, damages, settlements, court costs, and reasonable attorney fees arising out of:

1. Your submission of unauthorized confidential, copyrighted, or third-party personal data into our AI processing pipeline;
2. Your use of auto-submit features to send personal data to third-party recruitment platforms in violation of those platforms’ rules;
3. Breach of any warranty you provide regarding ownership or authorization of User Content;
4. Any data-privacy complaint, GDPR/CCPA enforcement action, or DMCA copyright notice triggered by your personal inputs or AI outputs.

This Policy and any disputes arising hereunder are governed by the laws of the State of Delaware, United States, without regard to its conflict-of-laws principles, with exclusive venue in the state or federal courts located in the State of Delaware.

TrueCode Technologies Inc
8 The Green, Suite B, Dover, DE 19901, USA
Privacy contact: kevin@trueinterview.io