Privacy Policy

Effective Date : 01/01/2025

Welcome to PrepMeUp ("we," "our," or "us"). Your privacy is critically important to us. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR).

By using PrepMeUp, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Data We Collect

We collect and process the following categories of personal data:
  • Account Information: Name, email address, profile picture, and login credentials.
  • Uploaded Content: CVs, job descriptions, and other documents you provide.
  • Usage Data: IP addresses, browser types, device information, and interaction logs.
  • Cookies: Small files stored on your device to improve your user experience.
  • Audio Data: Verbal responses provided during interview simulations, which may include audio recordings and transcriptions.
We recommend avoiding the upload of sensitive personal data (e.g., racial or ethnic origin, health information).

2. How We Use Your Data

We use your data for the following purposes:
  • To provide and improve our services, including tailoring interview preparation materials.
  • To communicate with you, including responding to inquiries or support requests.
  • To comply with legal obligations and resolve disputes.
  • To analyze site performance and user behavior for platform optimization.
  • To power AI-based algorithms that generate tailored interview preparation content. These processes do not involve fully automated decision-making that has legal or similarly significant effects.
  • To store and analyze text and audio responses, along with their transcriptions, to deliver detailed feedback, performance scoring, and tailored improvement recommendations for a more effective interview simulation experience.

3. Legal Basis for Processing

Our processing of your personal data is based on the following legal grounds:
  • Consent: Where you have explicitly agreed (e.g., accepting cookies).
  • Contractual Necessity: To fulfill the services you request.
  • Legitimate Interests: To enhance our platform and ensure security.

4. International Data Transfers

Your personal data may be transferred to servers located outside the European Economic Area (EEA). Such transfers are safeguarded by Standard Contractual Clauses approved by the European Commission or other legally acceptable mechanisms to ensure your data’s protection.

5. Your Rights

Under GDPR, you have the following rights:
  • Right to Access: Request a copy of your data.
  • Right to Rectification: Correct inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your data ("Right to be Forgotten").
  • Right to Restrict Processing: Limit how your data is processed.
  • Right to Data Portability: Receive your data in a structured, machine-readable format.
  • Right to Object: Oppose data processing based on legitimate interests.
  • Right to Withdraw Consent: Revoke consent at any time without affecting the legality of prior processing.
To exercise your rights, contact us at privacy@prepmeup.io. We will respond within 30 days.

6. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this Privacy Policy or as required by law. For example:
  • Account Information: Retained as long as the account is active.
  • Uploaded Documents: Deleted after 24 months of inactivity.
  • Usage Data: Retained for analytics purposes for up to 24 months.
  • Audio Data: Retained for 24 months to support feedback and performance analysis.
Where possible, data may be anonymized after the retention period.

7. Data Sharing

We may share your data with:
  • Service Providers: Third-party vendors who assist in providing our services (e.g., hosting, analytics, payment processing).
  • Legal Authorities: When required by law or to protect our legal rights.
All third-party processors are bound by Data Processing Agreements (DPAs) to ensure GDPR compliance. For example, we use Google Analytics to understand user behavior, which involves sharing pseudonymized data such as IP addresses and interaction logs.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance user experience. These include:
  • Essential Cookies: Necessary for the operation of our platform.
  • Analytics Cookies: Help us understand user behavior to improve the platform.
  • Marketing Cookies: Used for targeted advertising.
You can manage your cookie preferences through your browser settings or our cookie consent banner.

9. Data Security

We implement robust security measures to protect your data, including:
  • Encryption for sensitive data.
  • Secure storage on GDPR-compliant servers.
  • Access controls and regular vulnerability assessments.
Despite our efforts, no system is 100% secure. We encourage you to protect your account credentials.

10. Data Breaches

In the event of a data breach, we will notify affected users and the relevant authorities within 72 hours, as required by GDPR.

11. Third-Party Links

Our platform may include links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

12. Children’s Privacy

Our services are not directed to individuals under 16. We do not knowingly collect data from children. If we become aware of such data, we will delete it promptly.

13. Contact Information

For privacy-related questions or to exercise your rights, contact privacy@prepmeup.io or our Data Protection Officer (DPO) at dpo@prepmeup.io

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this Privacy Policy regularly.

Thank you for trusting PrepMeUp. Your privacy is our priority.