Privacy Policy

Last updated: September 2026

What we collect

ProofRound AI is an interview preparation tool. To generate interview kits, you upload or paste job descriptions and, optionally, candidate CVs. We also collect basic account and billing information when you subscribe.

How we use it

Job descriptions and CV text are sent to our AI model providers (currently DeepSeek, with Moonshot as fallback) solely to generate your interview kit.
We do not use your uploaded content to train models.
We do not sell, rent, or share your data or your candidates' data with third parties for marketing.
Billing is processed by Stripe. We never see or store your card numbers.

Candidate data

You are the data controller for any candidate personal data (such as CVs) you upload. By using ProofRound AI you confirm you have the right to process that data for interview purposes. We act as a processor: we handle it only to provide the service, and generated kits are visible only to you.

Candidate data & the ProofRound Vault

Candidate CVs and job descriptions are processed inside the ProofRound Vault — described in full on our Security & Data Handling page. In short:

CV and JD documents are never stored on ProofRound servers. They exist only in temporary processing memory for the seconds it takes to build your interview kit, and are never written to our database, disks, backups, or logs.
When your round ends there is nothing left to delete — nothing was ever retained.
All document handling is encrypted in transit (HTTPS/TLS), from your browser to us and from us to our model providers.
The document text is transmitted to our AI model providers (DeepSeek, with Moonshot as fallback) solely to generate your kit, under their API data-processing terms. It is not used to train models.
We never log document content, never train on it, and never use candidate data to build profiles or datasets.
Generated interview kits live in your browser session by default and are visible only to you; we do not keep server-side copies of kits, transcripts, or scores.
Hosting note: ProofRound runs on Railway infrastructure in the United States. Candidate documents are processed in memory and are not stored or backed up by us anywhere; account and billing data is stored on Railway (US). Our model providers process API requests on their own infrastructure.
What we do keep is your account and billing data — that is what the rest of this policy covers.

Retention and deletion

Candidate documents are never written to our servers in the first place (see the ProofRound Vault above) — they exist only in processing memory for the seconds a round runs. Account data is kept only while your account is active. If you want any data deleted, email us and we will remove it within 30 days.

Security measures

All traffic is HTTPS/TLS with HSTS. Passwords are hashed with scrypt; password-reset tokens are single-use, expiring, and stored only as SHA-256 hashes. We serve security headers on every response, verify Stripe webhook signatures, and request only the minimum browser permissions (microphone, only inside the interview console). Details: Security & Data Handling.

Cookies

We use only the cookies required to run the app. No advertising or cross-site tracking cookies.

Contact

Questions about this policy: [email protected].