Privacy policy

When you use the public practice interview, we run the service. When a company invites you to an interview or you apply through its link, that company decides why and how your interview data is used and is the one responsible for it; we process the data on its behalf. For anything about your own interview, contact the company that invited you first.

Our details: [Company legal name], [registered address], [jurisdiction]. Contact: [contact email].

Practice interview (seeker account required). We use your email and Clerk user identifier to authenticate you and associate your account. The conversation is processed by the AI and speech services below to run the interview and write your report. It is not added to your saved history unless you choose to save the result. Any recording and your camera stay on your device.

Candidate interviews. Your name and email address; the transcript (questions and your answers, spoken answers as text); the written assessment; simple activity signals (how often and how long you left the tab, and how often and how much you pasted); code and test results if there is a coding exercise; and a recording only if the company turned recording on and told you before you started.

Hiring-team accounts. Each member’s name, email address and a password hash (never the password), workspace settings and a log of actions in the workspace.

We do not use advertising or tracking cookies and do not buy data about you. Sign-in cookies keep seeker and hiring-team accounts secure. Our hosting provider keeps routine request logs (such as IP addresses) for security and reliability.

A free seeker account is required to start a practice interview. We store your email and authentication identifier. The interview result is not saved unless you choose to save it; the transcript is saved only if you opt in. Sharing a result is optional: a public link without the transcript that expires after 14 days and that you can revoke. You can export or delete your account and all results at any time from My practice. Seeker sign-in is separate from hiring-team sign-in.

• To run the interview and produce the assessment and report.
• To let the hiring company review its candidates. People make every hiring decision; Riwork does not reject or advance anyone automatically.
• To run, secure and support the service, send invitation and account emails, and prevent abuse.

Speech is turned into text and only the words are assessed. We do not analyse faces, voices, emotions or personality.

Legal basis (where required, for example under GDPR): [legal bases to be confirmed by counsel, e.g. contract, legitimate interests, consent].

These services handle data only for the job described, each under its own terms:

• Anthropic: runs the interview conversation and writes the assessment.
• Deepgram: speech-to-text when you answer by voice.
• ElevenLabs: the interviewer's voice (receives only the interviewer's words).
• Tavus and Daily: the optional live video interviewer (receives only the interviewer's words).
• Vercel: hosting, and private storage for recordings when a company turns recording on.
• Our database provider (for example Neon): workspace data.
• Resend: invitation emails, if the company has turned email on.

We do not sell personal data. International transfers: [transfer mechanism, to be confirmed by counsel].

Every workspace has a retention period, 180 days unless the company changes it, shown to candidates before they start. That many days after the interview finishes, the interview, transcript, report and any recording are deleted automatically. Companies can delete a candidate at any time, which erases their data at once. Practice interviews are not stored. Account data is kept while the account exists: [account deletion and backup retention terms].

Passwords are hashed; sign-in sessions and personal links are stored only as hashes; workspaces are isolated from each other; recordings are private files; traffic uses HTTPS. No system is perfectly secure.

You can ask to see, correct or delete your data, and, depending on where you live, to object to or restrict its use or to receive a copy. For candidate interviews, ask the company that invited you; it can act straight away. For anything else, or if you cannot reach the company, contact us. You may also complain to your data protection authority. Region-specific rights: [to be added by counsel].

If you need an adjustment, such as more time or typing instead of speaking, or would rather speak to a person, ask the company before you start.

Riwork is not for people under [minimum age]. If we change this policy we will update the date above and, for material changes, tell account holders.