Privacy Policy

Orrign Inc., an Ontario corporation, operating as InterviewCaddy ("we," "us," "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights.

By using the Service, you agree to the practices described here.

1. Information We Collect

1.1 Information you provide

• Account information: name, email address, password (hashed)
• Profile information: resume content you upload, job descriptions, role and seniority preferences
• Audio data: audio captured during mock interviews and Live Assist sessions, processed in real time to transcribe questions and answers
• Payment information: handled directly by our payment processor (Stripe). We do not store full credit card numbers.
• Support communications: emails and messages you send to support

1.2 Information we collect automatically

• Usage data: features used, session counts, time spent in the application
• Device information: operating system, application version, hardware identifiers (used for anti-abuse and licensing)
• Performance data: error reports, latency measurements
• IP address: collected when you access our website or use the application, and retained as a record of your agreement to our Terms

1.3 Information we do NOT collect

• Video feeds from your camera (the Service does not require camera access)
• The interviewer's video, screen content, or shared materials beyond audio
• Content from other applications running on your device
• Your browsing history outside the Service

2. How We Use Your Information

We use your information to:

• Provide and improve the Service
• Process payments and manage your subscription
• Generate AI-powered interview prompts and feedback specific to your resume and target role
• Send you service-related communications (account updates, security alerts, billing notices)
• Monitor and prevent abuse, fraud, and security incidents
• Comply with legal obligations
• With your explicit consent, send marketing communications (you can unsubscribe at any time)

3. AI Processing

Your resume, job descriptions, and session audio are processed by AI models to provide the Service's core features. Specifically:

• Audio is transcribed in real time by our speech-to-text provider
• Transcripts and your resume are sent to AI language model providers to generate prompts and feedback
• AI providers process this data according to their own terms; they do not use it to train their models when accessed through our enterprise integrations

3.1 Training

We do not train our own models on your data, and we do not authorize our providers to train their models on it. Your resume, job descriptions, session audio, and transcripts are not used by us to develop or train any model.

We route requests to third-party AI and speech providers to deliver the Service. Our direct providers operate under agreements or terms that prohibit training on data submitted through our accounts. Some requests may be routed through an aggregation provider that forwards them to underlying model providers; those underlying providers operate under their own terms, which we do not control. We select routing options that, to the best of our knowledge, do not permit training on your content, but we cannot guarantee the internal practices of every downstream provider. If you require assurance that your data is handled only by our direct, no-training providers, or would like the current list of named providers, contact privacy@interviewcaddy.com.

3.2 Third-party AI providers

We use third-party providers for large language model inference and for speech-to-text and text-to-speech, each subject to their own privacy commitments. These providers have data processing agreements with us that prohibit training on our customers' data. A current list of named providers is available on request at privacy@interviewcaddy.com.

4. Data Storage and Security

4.1 Storage

• Account and profile data is stored on encrypted servers managed by our cloud hosting provider
• Audio is processed in transit and is not retained as raw audio after transcription
• Transcripts of practice sessions are stored for your reference and may be deleted by you at any time
• Live Assist session content is not retained beyond the session unless you explicitly save it

4.2 Encryption

All data is encrypted in transit using TLS 1.2 or higher. Data at rest is encrypted at the infrastructure layer. Authentication uses industry-standard session management.

We do not currently use application-level encryption for content such as resumes and session transcripts. Our staff with authorized database access can read this content for support, debugging, or operations purposes. All such access is logged and limited to documented needs.

4.3 Access controls

Access to user data within our organization is limited to authorized personnel who need it for support, debugging, or operations. All access is logged.

4.4 Security incidents

In the event of a security breach affecting your data, we will notify you within 72 hours of discovery, in accordance with applicable law.

5. Sharing of Information

We do NOT sell your personal information.

We share information only in the following circumstances:

• With your consent: when you explicitly authorize sharing
• With service providers: to operate the Service (e.g., Stripe for payments, our cloud hosting provider, and AI providers for model inference)
• For legal compliance: when required by law, court order, or to protect rights, safety, or property
• In a business transfer: in the event of a merger, acquisition, or sale of assets, with notice to you

5.1 Sub-processors

We use third-party sub-processors to operate the Service, in the following categories: cloud data hosting and authentication; payment processing; AI model inference; speech-to-text and text-to-speech; and model request routing (which may forward requests to third-party model providers under their own terms). Sub-processors are engaged under agreements intended to protect your data and prohibit training on it. Your data may be processed in the United States and other countries where these providers operate. A current list of named sub-processors is available on request at privacy@interviewcaddy.com.

6. Your Rights

Depending on your jurisdiction, you may have rights to:

• Access your personal information
• Correct inaccurate information
• Delete your information ("right to be forgotten")
• Export your information in a portable format
• Object to or restrict certain processing
• Withdraw consent for marketing communications

To exercise these rights, email privacy@interviewcaddy.com or use the account settings in the application.

We will respond to requests within 30 days, or as required by applicable law.

6.1 Account deletion

You can delete your account at any time from within the application. Upon deletion:

• Your profile, resume, transcripts, and session data are permanently removed within 30 days
• Some data may be retained longer if required by law (e.g., financial records for tax purposes)
• Anonymized usage statistics may remain in aggregate analytics

7. International Users

InterviewCaddy is operated from Canada. By using the Service, you consent to the transfer and processing of your information in Canada and other countries where our service providers operate, including the United States.

We comply with applicable data protection laws including GDPR (for EU users), PIPEDA (Canada), and CCPA (California).

8. Children

The Service is not intended for users under 18. We do not knowingly collect information from children under 18. If you believe we have collected such information, contact us immediately.

9. Cookies and Tracking

Our website uses minimal cookies for:

• Session authentication
• Anonymized analytics (page views, conversion tracking)

We do NOT use:

• Third-party advertising cookies
• Cross-site tracking
• Fingerprinting techniques

You can disable cookies in your browser settings; some features may not work properly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service or by email at least 30 days before they take effect.

11. Contact

For privacy questions or to exercise your rights:

• Email: privacy@interviewcaddy.com
• Mail: Orrign Inc., [street address, Cambridge, ON, POSTAL CODE], Canada
• Data Protection contact (for GDPR inquiries): privacy@interviewcaddy.com