Privacy Policy
Last updated: 14 July 2026
Instant Interview ("we", "us") provides a browser-based AI voice interview practice service at instantinterview.app. We are the data controller for the personal data described in this policy.
Contact us about privacy at enquiries@instantinterview.app.
This policy is written for the UK GDPR and the Data Protection Act 2018. Our primary market is the United Kingdom.
To run a live interview, your spoken audio is streamed in real time to xAI (Grok), our AI voice provider, whose servers are in the United States.
Your browser connects directly to xAI using a short-lived credential that we issue. They process the audio to understand what you said and to speak back, acting strictly as our processor, and are contractually prohibited from using your audio for their own purposes, including training their models.
Recordings are only stored if you are on a paid plan. On the free plan no audio recording is retained after your session ends. On paid plans we keep a rolling number of your most recent recordings (10 on Core, 30 on Pro, 60 on Annual); older ones are removed automatically as new sessions replace them. Stored recordings live in our database in the EU, not with xAI.
Transcripts and scores are kept on all plans so your history, progress and badges work. After a session, your transcript is also sent to an AI analysis provider (also in the United States) to produce the detailed written feedback on your answers. It acts as our processor and cannot use your content for its own purposes.
| Purpose | Data | Lawful basis |
|---|---|---|
| Create and operate your account | Email address, authentication metadata | Contract — we cannot provide the service without it |
| Run a live voice interview and return feedback | Spoken audio, transcript, scores, any CV or job description you upload | Contract — this is the service you asked for |
| Store your interview history, scores and saved recordings | Transcripts, scores, audio recordings (paid plans only) | Contract — powers your history, progress tracking and badges |
| Take payment | Email, purchase records. Card details go directly to Stripe | Contract |
| Send service emails (receipts, password resets, confirmations) | Email address | Contract |
| Send interview tips and product updates | Email address, basic usage summary | Consent — only if you tick the box at sign-up. Withdraw any time via the unsubscribe link in any such email, or in your profile settings |
| Remind you about an abandoned checkout | Email address, what you were buying | Legitimate interests (recovering an incomplete purchase you started), relying on the "soft opt-in" in regulation 22(3) of PECR. Every such email carries an unsubscribe link |
| Product analytics and improving the service | Pages viewed, features used, approximate country, device type | Consent for analytics cookies/storage (via the cookie banner); legitimate interests in understanding aggregate usage |
| Prevent fraud, abuse and bot sign-ups | IP address, request metadata | Legitimate interests — keeping the service secure and available |
We do not ask for special category data. Please avoid volunteering health, political or similarly sensitive details in your spoken answers — the service does not need them.
We do not sell your personal data, and we do not use your interview content to train AI models.
We share personal data with the following categories of service provider, each acting on our instructions. Where data leaves the UK/EEA, we rely on the International Data Transfer Addendum to the EU Standard Contractual Clauses ("SCCs with the UK Addendum") as the transfer safeguard.
We are happy to tell you exactly which companies these are — email enquiries@instantinterview.app and we will send you our current list of named sub-processors.
| Recipient | Purpose | Location | Transfer safeguard |
|---|---|---|---|
| Hosting, database & file storage | Runs the website and stores your account, interview history and saved recordings | UK / EU | No transfer safeguard required |
| xAI (Grok) — live voice interviewer | Powers the real-time spoken interview. Receives your audio, acts strictly as our processor, and cannot use it for its own purposes including model training | United States | Controller-to-processor SCCs with the UK Addendum, under xAI's data processing terms |
| AI analysis provider | Receives your interview transcript after a session to generate the written feedback on your answers. Acts strictly as our processor and cannot use it for its own purposes | United States | SCCs with the UK Addendum |
| Stripe — payment processing | Takes payment. Your card details go directly to Stripe and are entered on their systems — we never see or store them | United States / global | SCCs with the UK Addendum, under Stripe's data processing agreement |
| Email delivery | Sends service email and, if you opt in, marketing email | United States | SCCs with the UK Addendum |
| Product analytics | Measures which pages and features are used (first-party and cookieless) | EU | No transfer safeguard required |
| Website analytics & advertising | Measures site traffic and ad performance. Loaded only if you accept cookies on our banner; never loaded if you decline | United States / global | SCCs with the UK Addendum |
| Bot protection | Protects our sign-up and sign-in forms from automated abuse | Global | SCCs with the UK Addendum |
When you ask us to research a target company, we send that company's name to a third-party search provider to gather public information about it. No personal data about you is included in that request, so it is not listed above.
We may also disclose information where required by law, or to establish, exercise or defend legal claims.
- Account, transcripts, scores and history — until you delete your account.
- Voice recordings — free plan: not retained. Paid plans: your most recent 10 (Core), 30 (Pro) or 60 (Annual) recordings; older ones are deleted automatically.
- Company research — cached for 7 days. Subscribers may keep a saved research library (up to 50/100/200 entries by plan), which is deleted with your account.
- Payment and purchase records — your purchase history in our database is deleted with your account. Stripe separately retains its own record of transactions to meet financial and anti-fraud obligations; that retention is governed by Stripe's privacy policy.
- Product analytics — retained in pseudonymised form for up to 12 months.
Under UK GDPR you have the right to:
- Access — Get a copy of the personal data we hold about you.
- Rectification — Have inaccurate data corrected.
- Erasure — Have your data deleted — you can do this yourself from your profile at any time.
- Restriction — Ask us to limit how we use your data while a concern is resolved.
- Objection — Object to processing based on legitimate interests, including the abandoned-checkout email.
- Portability — Receive your data in a portable, machine-readable format.
- Withdraw consent — Withdraw marketing or analytics consent at any time, without affecting processing already carried out.
You can delete your account and data yourself from your profile settings. For anything else, email enquiries@instantinterview.app. We respond within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk/make-a-complaint or on 0303 123 1113. We would appreciate the chance to help first.
Strictly necessary — a small number of cookies keep you signed in and protect our forms from bots. These do not require consent.
Product analytics — we measure which pages and features are used. This is first-party and cookieless: it stores a small identifier in your browser's local storage rather than setting tracking cookies, and data is held in the EU. It runs by default, and you can turn it off at any time with "Opt out" on our cookie banner.
Advertising and Google Analytics — we only load Google Analytics and Google Ads if you press "Got it" on our cookie banner. These do set advertising cookies and allow Google to measure ad performance across sites. If you do not accept, they are never loaded.
Your answers are scored automatically (STAR structure, speaking pace, filler words, relevance). This is practice feedback for your own use only. It is not a decision that produces legal or similarly significant effects, it is never shared with employers, and no employment decision is made about you on the basis of it.
Data is encrypted in transit and at rest. Access to production data is limited to the accounts that need it, and audio is streamed to our AI provider using short-lived credentials rather than a shared key. No method of transmission or storage is completely secure, but we take these obligations seriously.
The service is not intended for children under 16 and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
If we make a material change we will update the date at the top and, where it significantly affects you, tell you by email or in the app.