Privacy policy

Last updated 29 September 2026

Intervio helps you practise job interviews with an AI interviewer. To do that we handle some of your personal data — this page explains exactly what, why, who else processes it, and the control you have over it.

Who we are

Intervio (intervio.eu) is the controller of the personal data described here, except for candidate interviews run for a recruiter — see Interviews run for a recruiter. For anything about your data, email privacy@intervio.eu.

What we collect and why

Your account

Your name and email address, and your password — which we store only as a one-way hash, never in readable form. If you sign in with Google, we receive your name and email address from Google and nothing else. We need this to run your account (legal basis: performing our contract with you).

What you give us to practise with

Resumes, job descriptions and saved roles; your interview answers (typed or spoken); the interview transcript; your scores, feedback and reports; and CV rewrites and the answers you give to CV gap questions. When you upload a PDF or Word file we extract its text and keep the text, not the file. We use all of this only to provide the service to you (contract).

Your voice

If you answer by voice, the recording is sent for transcription and the text comes back to your interview. We don't store the recording. The interviewer's spoken lines are generated from text on demand.

Payments

Payments are processed by Stripe; we never see or store your card details. We keep what we need to apply your purchase — your email, what you bought, and Stripe's customer and subscription references (contract, and legal obligations for tax and accounting records).

Usage and security data

We use Vercel Web Analytics to count page views. It works without cookies and without tracking you across sites, and gives us aggregate numbers only. Our hosting provider keeps short-lived server logs (such as IP address and browser type) to run and secure the service, and we briefly hold IP addresses in memory to limit abusive request rates (legitimate interest in a secure, reliable service).

Account emails

We email you to confirm your address and when you ask to reset your password (contract). Confirming a school address is also what unlocks free student access.

Emails you ask for

If you join our list for interview tips, we store your email address to send them (consent). You can unsubscribe at any time.

Interviews run for a recruiter

Companies can use Intervio to run screening interviews through a shared link. If you take one, the company that invited you is the controller of your data — your name, email, resume, answers, transcript, the AI evaluation and the recruiter's notes — and we process it on their behalf and on their instructions. Contact that company to exercise your rights; we'll help them respond. The AI evaluation supports the recruiter's own review; it is not meant to decide on its own whether you are hired.

How we use AI

Interview questions, feedback, scores, reports, CV analysis and rewrites, and transcription are produced by AI models from OpenAI, using the content you provide. Under OpenAI's API terms this content is not used to train their models, and may be retained by OpenAI for up to 30 days for abuse monitoring before deletion. AI output can be wrong — treat scores and suggestions as practice guidance, not as professional advice.

Who processes your data for us

We don't sell your data or share it for advertising. These providers process it for us:

• Vercel — hosting and privacy-friendly page analytics
• Neon — our database
• OpenAI — AI interviewer, feedback, CV tools and transcription
• ElevenLabs — the interviewer's voice (receives the interviewer's lines)
• Stripe — payments
• Resend — account emails (email confirmation, password reset)
• Google — sign-in, only if you choose “Continue with Google”
• GitHub — storage for our encrypted database backups

Some of these providers are based in the United States. Transfers of personal data from the EU to them rely on the EU-U.S. Data Privacy Framework or on the European Commission's Standard Contractual Clauses.

How long we keep it

• Account data and your practice content: for as long as your account exists.
• When you ask us to delete your account, we delete it within 30 days. Encrypted backups roll off within a further 30 days.
• Payment records: for as long as tax and accounting law requires.
• Recruiter interviews: until the recruiter deletes them or asks us to.

Cookies

We only use cookies that are strictly necessary: one to keep you signed in and one to protect sign-in forms against cross-site request forgery. No advertising or tracking cookies, which is why there is no cookie banner.

Your rights

Under the GDPR you can ask to access, correct, delete or export your personal data, restrict or object to how we use it, and withdraw consent you have given. Email privacy@intervio.eu and we'll respond within one month. You can delete saved resumes and roles yourself on your Profile page. You also have the right to complain to the data protection authority in your country.

Security

Data is encrypted in transit, passwords are stored as one-way hashes, backups are encrypted, and access to production data is restricted to the people running the service.

Children

Intervio is not intended for anyone under 16.

Changes

If we change this policy we'll update the date above, and tell you by email or in the app before any material change takes effect.