Privacy policy

What we collect

• Your email address, used to sign you in and to send account and billing messages.
• Your onboarding answers (the situation you practise for, what feels difficult, and your practice goal), the daily and weekly goals you set, and your browser's time zone, so that practice days and streaks follow your own calendar.
• Practice recordings you choose to submit, the transcripts made from them, and the feedback generated.
• Prompts you write yourself, and the interview questions we generate when you paste a job advert. The advert is sent to our AI provider once to write the questions and is not stored; we keep only the role, the skills it emphasises and the questions.
• Your thumbs up or down on parts of your feedback. We store the vote and an optional reason, never the text you rated.
• Product usage events (for example that a recording was submitted or a page was viewed) tied to a pseudonymous identifier, never to speech content.
• Billing status from our payment provider, Paddle. We do not receive or store card numbers.

How recordings are processed

Recording starts only when you press Record. When you submit, the audio is sent to Google's Gemini API (a paid, business-tier service whose terms exclude using your data to train its models) to produce the transcript and feedback shown to you; live roleplay audio streams to the same service and is not stored by us. Google is a sub-processor and may process data outside your country. Please avoid including confidential employer or customer details in practice answers.

Retention

• Raw audio is deleted automatically within 24 hours after processing finishes or fails. It is also deleted if an upload is abandoned.
• Transcripts and feedback are kept until you delete the session or your account.
• Account deletion removes your recordings, transcripts, feedback and profile. Billing records needed for tax and reconciliation are kept without speech content.
• Backups are rotated on a short schedule; deleted data leaves backups within 30 days.

What we do not do

• We do not include audio, transcripts or feedback in analytics, advertising tools, URLs or session replay.
• We do not sell personal data.
• We do not use nonessential tracking without consent where consent is required.

Your rights

You can view your history, delete individual sessions, and delete your account from Settings. To access, export or correct your data, contact [email protected]. Depending on where you live you may have additional rights under applicable data protection law.

Advertising measurement

Our pages load the Google Ads tag (gtag.js), which sets cookies and sends page-view and conversion signals to Google so we can see whether our advertising brings people to Pointspoken. It never receives your recordings, transcripts or feedback. In the EU, EEA, UK and Switzerland the cookie stays off until you accept it in the banner; everywhere else you can decline it in the banner or later through “Cookie choices” in the footer. Every cookie we use is listed in our cookie policy. Google's use of the data is described in Google's privacy policy.

If you choose “Accept all”, our pages also load the Meta Pixel, which sets cookies and tells Meta when you view a page, create an account or start checkout, so we can see whether our ads on Facebook and Instagram bring people to Pointspoken. With the same choice, our server tells Meta directly when you create an account, when a free trial starts and when your first payment succeeds, because those happen away from your browser. For these we send your email address and account number in hashed form (converted so they cannot be read back), the Meta cookie identifiers, your IP address and browser type, and for a payment its amount. Meta never receives your recordings, transcripts or feedback. If you do not accept, none of this is sent. If you later withdraw through “Cookie choices” while signed in, we delete what we held for Meta and send nothing further. We clear the browser identifiers, IP address and browser type once your first payment is reported, and delete them after 30 days in any case. Meta's use of the data is described in Meta's privacy policy.

Emails we send

We always send sign-in codes and important notices about your subscription, such as a reminder before a free trial ends. Practice reminders and the weekly summary are off until you turn them on in Settings, and every one of those emails has a link that stops them with one click, without signing in.

Partner referrals

If you arrive through a partner's link, we remember that partner's code in a cookie and, if you create an account, record that the partner referred you. When you pay for a subscription the partner earns a commission. Partners see only counts and amounts, with customers numbered: they never see your name, email address, recordings or anything you practised. If you are a partner, the bank details you give us for payouts are stored encrypted and used only to pay you. See the partner terms.

Contact

Pointspoken is operated and developed by AVENOR DEVELOPMENT TECHNOLOGIES LTD. Questions about privacy: [email protected].