Effective Date: June 1, 2025
This Privacy Policy explains how SM Ventures (“we,” “us,” or “our”) collects, uses, stores, and protects your personal data when you use InterVuee at intervuee.in (“Platform”).
We are committed to protecting your privacy and handling your data responsibly, in accordance with applicable Indian data protection laws, including the Digital Personal Data Protection Act, 2023 (DPDPA), and where applicable, the EU General Data Protection Regulation (GDPR).
1. Data We Collect
1.1 Account Data
When you sign up, we collect:
- Email address — from Google OAuth or manual registration
- Full name — from your Google account (if you use Google sign-in)
- Profile picture URL — from your Google account (if applicable)
1.2 Interview Session Data
When you use the interview feature, we collect:
- Interview transcripts — the questions asked and your answers (text format)
- AI-generated scores — Coachability Signal, Flight Risk Score, Communication, Clarity, Depth, Confidence
- Job role selected — the domain/role you practiced for
- Session metadata — date, duration, completion status
1.3 Usage Data
We automatically collect:
- Device type and browser — for compatibility and analytics
- Session events — interview started, interview completed, upgrade clicked (via PostHog)
- Error logs — crashes and issues (via Sentry)
- Pages visited and time on site
1.4 Payment Data
If you subscribe to Pro:
- Payment is processed entirely by Razorpay
- We do not store your card number, UPI ID, or bank account details
- We store: subscription status (is_pro flag), payment date, and Razorpay order/payment IDs for our records
1.5 Email Subscriber Data
If you submit your email in the post-interview modal or any signup form:
- We store your email address and the source of capture
- Used for product updates, launch announcements, and re-engagement
2. How We Use Your Data
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Provide interview sessions and scores | Transcript, scores, role | Contract performance |
| Maintain your account | Email, name, is_pro status | Contract performance |
| Process payments | Razorpay order IDs | Contract performance |
| Improve the product | Aggregated usage analytics | Legitimate interest |
| Monitor and fix errors | Error logs via Sentry | Legitimate interest |
| Send product updates (if opted in) | Consent | |
| Prevent fraud and abuse | Usage patterns, rate limits | Legitimate interest |
We do not use your data to train AI models. We do not sell your data.
3. Third-Party Services & Data Sharing
| Service | Purpose | Data Shared | Policy |
|---|---|---|---|
| Supabase | Database, Authentication, Storage | All user and session data | supabase.com/privacy |
| Anthropic (Claude API) | AI question generation and scoring | Interview transcripts | anthropic.com/privacy |
| ElevenLabs | Voice synthesis (AI reads questions aloud) | Text of AI-generated questions | elevenlabs.io/privacy |
| Razorpay | Payment processing | Payment details (card/UPI) | razorpay.com/privacy |
| PostHog | Product analytics | Anonymised usage events | posthog.com/privacy |
| Sentry | Error monitoring | Error logs, device/browser info | sentry.io/privacy |
| OAuth authentication | Your Google account profile | policies.google.com |
We do not share your personal data with any other third parties except as required by law.
4. Cookies & Tracking
We use:
- Essential cookies — required for authentication and session management (cannot be disabled)
- Analytics cookies — PostHog, for understanding how users use the product (opt-in via our cookie banner)
- Error tracking — Sentry, for detecting and fixing bugs
When you first visit InterVuee, you will see a cookie consent banner. Non-essential cookies are only activated after you accept.
5. Data Storage & Security
- All data is stored on Supabase servers in the ap-south-1 (Mumbai, India) region
- Row Level Security (RLS) is enforced on all database tables — you can only access your own data
- All API keys are stored server-side in Supabase Edge Function environment variables — never exposed to the browser
- API keys are rotated on a monthly schedule
- Payments handled by Razorpay with PCI-DSS compliance
Despite our security measures, no system is 100% secure. We will notify you promptly in the event of a data breach affecting your personal data.
6. Data Retention
| Data Type | Retention Period |
|---|---|
| Account & profile data | Until you delete your account |
| Interview session transcripts & scores | Until you delete your account |
| Payment records (Razorpay order IDs) | 7 years (financial record obligations) |
| Email subscriber records | Until you unsubscribe |
| Error logs (Sentry) | 90 days |
| Analytics events (PostHog) | 12 months |
7. Your Rights
Under DPDPA 2023 and GDPR (where applicable), you have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — request we correct inaccurate data
- Erasure — request deletion of your account and associated data
- Withdraw consent — unsubscribe from marketing emails at any time
- Data portability — request your interview data in a portable format
- Object — object to processing based on legitimate interests
To exercise any of these rights, email us at support@intervuee.in. We will respond within 30 days.
8. Children's Privacy
InterVuee is not intended for users under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us their data, contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date at the top. For material changes, we will notify you via email if we have your address on file.
Continued use of the Platform after changes constitutes acceptance of the updated Policy.
10. Contact & Grievance Officer
For privacy concerns, data requests, or complaints:
SM Ventures
Nagpur, Maharashtra, India
Email: support@intervuee.in
Website: intervuee.in
If you are in the EU/EEA and are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.