Privacy Policy

Account information

When you sign up, we collect your name, email address, and a securely hashed password. If you sign in with Google, we receive your email, name, and Google profile identifier from Google’s OAuth service.

Audio and transcripts

When you actively start listening in the extension, audio from your microphone and the active browser tab is streamed to our servers and forwarded to OpenAI’s transcription service to produce a text transcript. Transcripts are then passed to OpenAI to detect interview questions and generate answers. We do not store raw audio. Transcripts and generated answers are not persisted to our database in identifiable form beyond what is required to deliver the response back to your extension.

Preferences and usage

We store the settings you configure (job role, answer style, interview type, experience level) and a running count of questions asked, credits remaining, and your plan.

Billing information

Subscriptions are processed by Stripe. We never see or store your full card details — Stripe returns a customer reference that we use to manage your plan. We retain your plan status, subscription ID, and billing email.

Support and team data

If you contact support or join a team, we store the messages and team membership you provide so we can respond and manage access.

Technical logs

Our servers record minimal logs needed to operate the service — for example, request timestamps, error messages, and rate-limit counters keyed by IP. These logs are short-lived and used only for debugging, security, and abuse prevention.

• To authenticate you and keep you signed in.
• To deliver real-time transcription and AI-generated answers during interviews.
• To enforce credit limits and bill the correct plan.
• To respond to support requests and manage team access.
• To detect and prevent abuse, fraud, and service degradation.
• To improve product reliability and performance (aggregated metrics only).

• The extension only captures audio while you actively start listening. Stopping listening immediately ends capture.
• Audio is streamed for transcription and is not stored on our servers. Transcripts exist only as long as needed to generate an answer.
• It is your responsibility to use InterviewBuddy in accordance with the consent, recording, and conduct rules of the platform you are on (Zoom, Google Meet, Microsoft Teams, etc.) and the laws of your jurisdiction. Some jurisdictions require all parties on a call to consent to processing of audio.
• The floating answer card is rendered locally in your browser and is not part of any video stream you share unless you explicitly include it.

We rely on a small number of carefully chosen providers to deliver the service. Each receives only the data necessary for its role.

• OpenAI— receives streamed audio for transcription and transcripts for question detection and answer generation. See OpenAI’s privacy practices at openai.com/policies/privacy-policy.
• Stripe — processes payments and stores card information directly. See stripe.com/privacy.
• Google OAuth — used only if you choose to sign in with Google. We receive a basic profile (email, name, identifier). See policies.google.com/privacy.
• Resend — delivers transactional emails such as password resets and team invites.
• MongoDB Atlas & Railway — host our database and application servers.

• Account data is retained for as long as your account is active.
• Audio is never written to disk on our servers.
• Transcripts are processed in memory and discarded after the answer is returned.
• Billing records are retained as long as required by applicable tax and accounting law.
• Technical logs are typically rotated within 30 days.

We do not sell your personal information. We share data only with the third-party processors listed above, when required by law, or to protect the rights, safety, and property of InterviewBuddy and its users.

We use industry-standard practices including TLS in transit, hashed passwords, JWT-based authentication, and least-privilege access controls. No system is perfectly secure; if you believe your account has been compromised, contact us immediately.

• Access & correction.View and edit your profile from the extension’s settings screen.
• Stop listening. You control when the microphone is on. The extension never captures audio without an explicit start action.
• Delete your account. Email us at admin@buildstory.studio and we’ll remove your account and associated data within 30 days, subject to legal retention obligations.
• Uninstall the extensionat any time from Chrome’s extension manager — this immediately ends all local data access.
• Depending on where you live, you may have additional rights under GDPR, UK GDPR, or CCPA (such as data portability or the right to lodge a complaint with a supervisory authority). Contact us to exercise them.

InterviewBuddy is intended for users aged 16 and over. We do not knowingly collect information from children under 16. If you believe a minor has provided us data, contact us so we can delete it.

Our infrastructure is hosted in regions managed by Railway, MongoDB Atlas, OpenAI, and Stripe. By using the service you consent to the transfer and processing of your information in the countries where these providers operate.

We may update this policy from time to time. Material changes will be highlighted on this page and the “Last updated” date above will change. Continued use of InterviewBuddy after an update constitutes acceptance of the revised policy.

Questions, requests, or complaints? Email admin@buildstory.studio.