Privacy Policy
DeepInterview Privacy Policy
Last updated: February 2, 2026
Introduction
At DeepInterview, a subsidiary of Real Apps LLC ("DeepInterview", "we", "us", or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using DeepInterview, you agree to the practices described here.
Information We Collect
Information you provide
- Email, name, and profile image from Google OAuth; we never see your Google password.
- Subscription choices and plan metadata when you purchase access.
Payment information
- Subscription status and dates, transaction reference IDs, and amount paid.
- Card details are not stored by us; Stripe handles payment data directly.
Session & authentication
- Session tokens to keep you logged in.
- OAuth tokens from Google to authenticate you; stored securely and expired per provider rules.
Usage information
- IP address (may be hashed or truncated), browser/user agent, device type, access times, pages viewed, and basic performance metrics (e.g., via Vercel Analytics/Speed Insights).
- Referral data (UTM parameters or referrer header) to understand how users discover us.
- Rate-limit counters tied to user/session IDs when needed to protect the Service.
User-submitted content
- Interview question submissions, practice code, and any notes you save in the workspace.
- These are stored for your use; we do not sell or share this content with third parties.
How We Use Information
- Provide and improve the Service, including authentication, personalization, and feature development.
- Process subscriptions and manage access based on your plan.
- Communicate about account changes, policy updates, support, and billing.
- Protect the Service, prevent fraud/abuse, and comply with legal obligations.
Cookies and Tracking
Essential cookies (always active)
- Authentication (NextAuth): session cookies to keep you logged in securely.
- CSRF protection: prevents cross-site request forgery attacks.
- Cookie consent (cookie_consent): remembers your cookie preferences for 1 year.
Analytics cookies (require consent)
- Visitor ID (visitor_id): anonymous unique identifier to understand returning visitors. Expires after 1 year. Only set with your consent.
- Traffic source (new_visitor_source): captures how you found us (UTM parameters, referrer) for the first 5 minutes of your visit.
- Vercel Analytics: aggregate pageview and performance metrics. Only active if you accept analytics cookies.
Your choices
- You can accept or reject analytics cookies via the consent banner shown on your first visit.
- Essential cookies cannot be disabled as they are necessary for the site to function.
- You can change your preferences at any time by clearing your browser cookies and revisiting the site.
Local storage
- May store dismissed banners, in-app preferences, and drafts (e.g., practice code) to improve your experience.
Sharing Your Information
- Service providers: Google (auth), Stripe (payments), hosting/infrastructure (e.g., Vercel), and analytics/performance tools. Providers are required to use data only to deliver their service to us.
- Legal: we may disclose information if required by law or to protect rights, safety, or security.
- Business transfers: if DeepInterview is involved in a merger/acquisition, information may transfer subject to this policy.
- Aggregated/de-identified data: we may share non-identifying statistics (e.g., total traffic).
Data Security
- TLS encryption in transit and access controls for stored data.
- OAuth-based authentication; no password storage by us.
- Regular reviews of access and logging for sensitive operations.
- No method is 100% secure; you use the Service at your own risk, but we work to protect your data.
Data Retention
- We retain personal data while your account is active and as needed to provide the Service.
- If you delete your account, we remove or anonymize personal data except where retention is required for legal, accounting, or security purposes.
- Backups may persist for a limited period (e.g., up to 90 days) before being purged.
Your Rights
- Access and portability of your personal data.
- Correction of inaccurate data.
- Deletion, subject to legal/operational exceptions.
- Objection or restriction of certain processing where applicable law grants those rights.
- Withdraw consent where processing relies on consent.
- To exercise rights, contact us at contact@deepinterview.net; we aim to respond within 30 days.
Regional Notices
- CCPA (California): right to know, delete, and non-discrimination. We do not sell personal information.
- GDPR (EEA/UK/Switzerland): processing bases include contractual necessity, legitimate interests, consent, and legal obligations. Data may be transferred to the US with appropriate safeguards. You may lodge a complaint with your supervisory authority.
Children
The Service is not intended for individuals under 18. We do not knowingly collect personal data from children. If you believe a child provided data, contact us to remove it.
Changes to This Policy
We may update this policy periodically. We will update the “Last Updated” date and, for material changes, may provide additional notice (e.g., email or in-app). Continued use of the Service after changes means you accept the updated policy.
Contact
- Company: DeepInterview, a subsidiary of Real Apps LLC
- Email: contact@deepinterview.net
- Website: https://deepinterview.net