Privacy Policy

1. Data controller

The controller responsible for processing your personal data is:

• Owner: Manuel Domínguez Vázquez
• NIF: 70078501P
• Address: Calle Emilio Tuñón 1, Portal 2, 3J, 28760 Tres Cantos (Madrid)
• Privacy email: privacidad@interviewcrusher.com

You may also contact the controller through the contact form available within the Service itself. Given the controller's nature (a self-employed individual / sole trader), no Data Protection Officer has been appointed, as the circumstances set out in artículo 37 del RGPD (GDPR Article 37) do not apply.

2. Data we process

Depending on how you use the Service, we may process the following categories of data:

• Account data: email address and data associated with sign-up and the management of Service credits.
• CV content: the résumé you provide, whether in PDF format or as text. We expressly warn you that a CV constitutes personal data and may include information about third parties (references, former employers, etc.).
• Job posting: the description of the position or job offer that you paste or upload to provide context for the simulation.
• User's voice: when you use voice dictation, the audio recording is transcribed into text (STT).
• Interview answers: the content of the answers you provide during the simulation.
• Usage data and metrics: technical and usage data (for example, number of sessions, credit consumption, technical identifiers, and data needed to rate-limit requests).

Visit measurement without personal data

To understand the use of the Site in aggregate form, we measure visits using own counters and Vercel Web Analytics. This measurement is anonymous and cookieless: we record counts (page views, approximate visitors, traffic source, country and device type) that do not constitute personal data and cannot identify you. For the approximate visitor count we use a technique that combines technical request data with a key that rotates daily and is not stored, so it is not possible to reconstruct your identity or track you across days.

3. Purposes and legal basis for processing

We process your data for the purposes and on the legal bases set out below:

a) Performance of a contract (art. 6.1.b RGPD)

To provide the contracted Service: to run the interview simulation, transcribe your voice into text (STT), synthesise neural speech (TTS), analyse the content of your CV and the job posting so that the AI can act as a recruiter and coach, as well as to manage your account and your credits.

b) Consent (art. 6.1.a RGPD)

For the processing of a CV that may contain special categories of data (see section 4), the installation of cookies that are not strictly necessary, and the sending of marketing communications. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.

c) Legitimate interest (art. 6.1.f RGPD)

To ensure the security of the Service, prevent abuse and fraud, apply request rate limits (rate-limit), and produce aggregated metrics and usage statistics (through Upstash). In these processing activities, our legitimate interest in maintaining a secure and sustainable service prevails, balanced against your rights and freedoms.

d) Legal obligation (art. 6.1.c RGPD)

To comply with legal obligations relating to invoicing, accounting, and tax and commercial obligations.

4. Special categories of data (art. 9 RGPD)

Your CV may reveal, directly or indirectly, special categories of data as defined in artículo 9.1 del RGPD (GDPR Article 9.1): data concerning health or a disability, racial or ethnic origin, trade union membership, political opinions, religious or philosophical beliefs, and sex life or sexual orientation, among others.

The legal basis for lifting the general prohibition on processing this data is your explicit consent (art. 9.2.a RGPD), which is obtained before the CV is processed.

Unlike other services, we do not simply prohibit its inclusion: since the Service analyses the CV by design, it could incidentally process this data. For this reason we obtain your explicit consent beforehand and warn you to minimise or anonymise any special data that is not necessary for the simulation (for example, by removing references to your health status, trade union membership, or beliefs), in application of the data minimisation principle (art. 5.1.c RGPD).

5. Data processors and sub-processors

To provide the Service we rely on providers that process data on behalf of the controller, in their capacity as data processors, with whom the corresponding processing agreements have been signed in accordance with artículo 28 del RGPD (GDPR Article 28):

• Anthropic: language model acting as recruiter and coach.
• Groq (Whisper): speech-to-text transcription (STT).
• ElevenLabs: neural speech synthesis (TTS).
• Vercel: hosting and infrastructure for the Service.
• Upstash / Redis: request rate-limiting and aggregated metrics.
• Resend: transactional email delivery.

The access these processors have to the data, to the extent strictly necessary to provide their services, does not constitute an assignment or disclosure of data to third parties, but rather processing on behalf of the controller.

6. International data transfers

Some of the processors listed in the previous section are located in, or process data in, the United States of America. Such international transfers are carried out with the appropriate safeguards provided for in artículos 44 a 49 del RGPD (GDPR Articles 44 to 49), specifically:

• the provider's adherence to the EU-US Data Privacy Framework, where it is certified in accordance with the European Commission's adequacy decision; or, failing that,
• the Standard Contractual Clauses approved by Decisión de Ejecución (UE) 2021/914 de la Comisión (Commission Implementing Decision (EU) 2021/914), together with any supplementary technical and organisational measures that may be necessary.

You may request additional information about these safeguards through the contact channels indicated in section 1.

7. We do not use your data to train models

We do not use your data —neither the content of your CV, nor your voice, nor your interview answers— to train, fine-tune, or improve our providers' artificial intelligence models. The data is processed solely to provide you with the Service in real time, and this has been agreed contractually with the processors.

8. Retention periods

We retain data only for as long as is strictly necessary for each purpose:

• CV, job posting, and voice transcriptions: these are deleted when the interview session ends or after a short period necessary to complete processing.
• Account data: for as long as the relationship with the user is maintained and you do not request the deletion of your account.
• Billing data: for the periods required by tax and commercial regulations, in particular Ley 58/2003, de 17 de diciembre, General Tributaria (the General Tax Act), and artículo 30 del Código de Comercio (Article 30 of the Commercial Code).

9. Automated decisions (art. 22 RGPD)

The feedback provided by the coach is a voluntary personal-training practice and does not produce legal effects nor significantly affect you in a similar way. Consequently, it does not constitute an automated individual decision of the kind covered by artículo 22 del RGPD (GDPR Article 22). No profiling with legal effects on you is carried out.

10. Security measures (art. 32 RGPD)

We apply appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including the encryption of data in transit and at rest, as well as access controls that restrict processing to strictly authorised personnel and systems.

11. Your rights

As a data subject, you may exercise the following rights:

• Access to your personal data.
• Rectification of inaccurate or incomplete data.
• Erasure (the «right to be forgotten»).
• Objection to processing.
• Restriction of processing.
• Portability of your data.
• Withdrawal of the consent given, at any time.

You may exercise these rights by writing to the privacy email address indicated in section 1 or through the Service's contact form, proving your identity. If you consider that the processing does not comply with the regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), www.aepd.es.

12. Minimum age

The Service is intended exclusively for persons over 18 years of age and is not directed at minors. If we detect that data belonging to a minor has been processed without an appropriate legal basis, we will proceed to delete it as soon as possible. If you believe that a minor has provided us with their data, please contact us through the channels in section 1.

13. Artificial intelligence disclaimer

The content generated by the Service (questions, assessments, and feedback) is indicative in nature, may contain inaccuracies or errors, and is not binding. It does not constitute professional, employment, or any other type of advice, nor does it guarantee any outcome in real selection processes.

14. Related documents

This Privacy Policy is complemented by the following documents:

• Legal Notice
• Cookie Policy
• Terms of Use