Last updated: July 2026
InterviewRoomAI processes voice in real time to generate interview simulations. We use the OpenAI Realtime API. Voice audio is streamed for inference and is not permanently stored in our own databases.
To apply refund rules consistently, we process usage data and consumed credits. Basic plans and credit boosts use a consumed-credit percentage scale (up to 3% = 100%, up to 10% = 90%, up to 20% = 75%, up to 30% = 60%, up to 40% = 50%, up to 50% = 40%). Pro and Intensive plans use fixed minute bands (0-3, 4-10, 11-20, 21-40, 41-60, above 60 minutes).
We use Supabase for account and billing-related records, such as name, email, subscription status, credit balances, and linked account metadata. Referral relationships are also calculated in our database.
All card payments are handled by Stripe Checkout. We do not store full card numbers or card security details on our systems.
Before creating a subscription or top-up checkout, users must confirm a refund-policy checkbox. We store the confirmation status and timestamp in checkout metadata for audit and dispute handling.
To apply refund rules consistently, we process usage data and consumed credits. Basic plans and credit boosts use a consumed-credit percentage scale (up to 3% = 100%, up to 10% = 90%, up to 20% = 75%, up to 30% = 60%, up to 40% = 50%, up to 50% = 40%). Pro and Intensive plans use fixed minute bands (0-3, 4-10, 11-20, 21-40, 41-60, above 60 minutes).
If you are covered by UK GDPR, you can request access, correction, export, or deletion of your personal data, subject to legal exceptions.
We use strictly necessary cookies for sign-in, security, and session continuity. Optional analytics or marketing cookies are enabled only after consent in the cookie banner. Consent choices are logged.
We keep account data while your profile is active. Interview history stays in your dashboard until deleted by you or erased through account deletion. Some billing and fraud-prevention records may be retained where legally required.
You can request a machine-readable export of your personal data and initiate account deletion from your profile dashboard. These requests are authenticated and logged for compliance.
When data is transferred outside the UK/EU through trusted providers, we rely on safeguards such as Standard Contractual Clauses (or equivalent mechanisms) and review subprocessors periodically.