Privacy Policy

InterviewSurge operates an automated job-search service that finds relevant roles, tailors your CV, drafts recruiter outreach, and (on paid plans) submits applications on your behalf. For any privacy question, contact us at hello@interviewsurge.com.

We collect the following categories of data:

• Account data — your name, email address, and authentication identifiers (including any data provided by Google when you sign in with Google).
• CV content and the personal data within it — the CV file you upload and the information it contains, such as work history, education, skills, and contact details.
• Job preferences — target roles, locations, salary expectations, and other search criteria you configure.
• Application profile data (paid plans) — details required to submit applications on your behalf, which may include legal name, address, work-history answers, screening responses, and credentials for applicant tracking systems.
• Payment data — billing country and subscription status. Card details are collected and processed directly by Stripe; we do not store your card number.
• Usage and device data — analytics events, pages viewed, approximate location derived from your IP address, and cookie identifiers (see Cookies).

We use your data to:

• Deliver the service — match you to roles, tailor your CV, draft outreach, and submit applications on paid plans.
• Process payments and manage your subscription.
• Send transactional email, such as account confirmation, password resets, and daily match summaries.
• Measure usage and improve the product through aggregate analytics.
• Comply with legal obligations and protect against fraud and abuse.

Your data is stored in our managed PostgreSQL database hosted by Supabase. Sensitive fields, including credentials for applicant tracking systems, are encrypted at rest using AES-256-GCM, with the encryption key held separately from the database. Access to production data is restricted to the systems and personnel that require it to operate the service.

We share the minimum data necessary with the following sub-processors, each of which acts under its own privacy and security commitments:

• Supabase — database, authentication, and file storage.
• Stripe — payment processing and subscription billing.
• Google Analytics 4 — website and product analytics. Analytics run only after you grant consent.
• Bright Data — the data source we use to discover public job listings.
• Large language model providers — used to analyze job descriptions and generate tailored CV content. We send the data necessary for each task and do not authorize these providers to use your data to train their models.

We do not sell your personal data. We may disclose data when required by law or to protect our rights and the safety of our users.

We use a small number of cookies. Strictly necessary cookies keep you signed in and remember your cookie choice; these are always active. Analytics cookies set by Google Analytics 4 are off by default and load only after you select “Accept” in our cookie banner. The GA4 cookies are:

• _ga — distinguishes visitors; expires after about two years.
• _ga_<container-id> — persists session state for the GA4 property; expires after about two years.
• _gid — distinguishes visitors; expires after about 24 hours.

You can change your choice at any time using the “Cookie preferences” link in the site footer. Rejecting analytics cookies keeps Google Analytics fully disabled.

We retain account and profile data for as long as your account is active, and for a limited period afterward to meet legal and operational requirements. Job listings discovered by our scraper are retained for approximately 15 days. When you delete your account, we remove or anonymize your personal data, except where we are required to retain it by law.

Subject to applicable law, you have the right to access, correct, export, and delete your personal data, and to withdraw consent for analytics at any time. To exercise any of these rights, email us at hello@interviewsurge.com. We will respond within the timeframe required by applicable law.

We operate online and may process your data in countries other than the one in which you reside. Where we transfer data across borders, we take steps to ensure it remains protected in line with this policy.

The service is not directed to children, and we do not knowingly collect personal data from anyone under the age of 16.

We may update this policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you. Continued use of the service after an update constitutes acknowledgment of the revised policy.

For any question about this policy or your personal data, contact us at hello@interviewsurge.com.