Privacy Policy

Information We Collect

We collect account information such as your email address, authentication provider, and basic profile details provided by Google when you choose Google sign-in. This may include your name, email address, and Google account profile image if Google provides it.

We also collect workbook files and related submission data that you upload. This includes workbook cell values, formulas, formatting, structure, comments, document properties and metadata, as well as scoring results and assessment performance. We collect diagnostic progress, marketing consent choices, referral and campaign attribution (such as UTM source, campaign, referral code, first and last landing page, and referring domain), and basic technical information such as device, browser, IP address, pages visited, and timestamps. Attribution cookies expire after 90 days. The account-linked attribution record in our database is retained until profile reset or account deletion. When onboarding is completed, the submitted onboarding answers, a compact attribution summary, and approximate country are sent to StreetCred developers for review, user support, and product improvement. Copies used for these purposes may be retained separately from the account-linked attribution record and are not retroactively erased by a later StreetCred profile reset. We do not store referral query strings or full referring URLs. For successful account signups and logins, we record the IP address and approximate country derived by Cloudflare for account security, abuse prevention, and operational investigation. We associate bounded campaign attribution with account-lifecycle and confirmed-purchase analytics without sending account IDs, email addresses, or Stripe session identifiers to Umami. Identified acquisition reconciliation is available only in the authenticated Admin workspace. We do not send passwords, authentication tokens, payment-card details, workbook contents, or survey answers in analytics events. Signed-in quiz events include internal account and attempt identifiers so we can distinguish learners, repeat attempts, and test activity. Quiz progress records include question counts, answered and skipped counts, and last activity time; partial answers are not sent. Names and email addresses are not sent in quiz analytics events.

If you use the AI Interviewer, we also collect your voice audio while an interview is live (we do not store it), a transcript of the interview, the AI-generated feedback and score, and details of the interview such as its timings. We use your first name, your onboarding answers (such as target role, career stage, goal, interview timing, and modelling experience), and for case interviews your scores on the case, to personalize the interview. See AI Interviewer below.

If you are given access to CV upload, we also collect the CV file you upload (a PDF or Word document) and the text we extract from it. If you use the CV coach, we also collect the transcripts of your CV coach sessions (we do not store your voice audio), the CVs it drafts for you, and your edits to them. See AI Interviewer below.

How We Use Information

We use your information to create and secure your account, authenticate sign-ins, provide workbook downloads and uploads, score submissions, display diagnostic results, improve product quality, prevent abuse, and send service emails such as account confirmation links.

We may also analyze submitted workbooks, assessment data, and AI Interviewer data (transcripts, AI-generated feedback, and interview details) to research modelling and interview practices, create statistics and benchmarks, improve and evaluate scoring methods, and develop, train, test, validate, and commercialize products, services, algorithms, and machine-learning or artificial-intelligence systems. Where we use or disclose this information beyond providing StreetCred to you, we remove or aggregate information so that it cannot reasonably be linked to you or your household.

If you opt in, we may send product updates, modelling case tips, reminders, and promotional offers. You can unsubscribe from marketing emails at any time.

Google Sign-In Data

When you use Google sign-in, we use the information Google provides only to authenticate you, create or link your StreetCred account, and maintain your signed-in session. We do not sell Google user data or use it for advertising.

Service Providers

We use service providers to operate StreetCred, including Supabase for authentication and database services, Cloudflare for hosting, storage, queues, email sending, DNS, security, and performance, and Google for OAuth sign-in when you choose that option, Stripe for payment processing and purchase-linked campaign attribution, and our self-hosted Umami analytics service for site, campaign, account-lifecycle, and purchase measurement. For the AI Interviewer, we use speech-recognition and speech-synthesis providers to turn your speech into text and the interviewer replies into speech, and AI model providers to write the interviewer replies and the feedback report, to check and read a CV you upload, and to draft your CV in the CV coach. These providers process information on our behalf and according to their own security and privacy commitments.

Workbook Files and Assessment Data

Uploaded workbooks may contain information you enter into the file, including information stored in hidden sheets, comments, formulas, links, and document metadata. Do not intentionally include personal information or confidential, proprietary, employer, client, or third-party information. You must have the right to submit and permit our use of everything contained in your workbook.

We may inspect, copy, process, analyze, modify, combine, aggregate, and anonymize workbook content and assessment data for the purposes described in this policy. We may retain and use genuinely anonymized or aggregated information indefinitely because it no longer identifies or relates to an identifiable person.

Authorized StreetCred administrators may access retained workbook files for coaching, support, scoring quality assurance, product improvement, and internal training. Successful access is recorded for security accountability and remains within our existing retention and deletion lifecycle; this access does not extend how long raw workbook files are kept.

AI Interviewer

The AI Interviewer runs a spoken mock interview, or a “Present to the MD” interview about a case you have modelled, and then gives you AI-generated feedback. Your browser asks for microphone access only on the interview page, and audio is sent only after you press Start.

While an interview is live, your browser streams your microphone audio to our interviewer service, which runs on our cloud hosting provider in a container started for your interview. We do not record or store your audio: it is processed as a live stream, and the interviewer service writes nothing to disk. When the interview ends we keep a transcript of what you and the interviewer said, an AI-generated feedback report with a score, and details of the interview: its kind, the case (for case interviews), the interviewer persona, start and end times, duration, number of answers, the questions asked, and the names of the speech and language models used.

To run the interview we send information to the speech-recognition, speech-synthesis, and AI model providers described under Service Providers. Speech-recognition providers receive your microphone audio and return text. Speech-synthesis providers receive the text of the interviewer replies and return audio. AI model providers receive text, so that they can write the replies of the interviewer during the interview and the feedback report afterwards. That text includes the interview questions, the transcript of the conversation, your first name, and your onboarding answers: target role, career stage (whether you are a student, working, or not working, your current or previous role and level, and your graduation year), goal, interview timing, and modelling experience. For case interviews it also includes the case title and brief, your scores by section of the model, and your best score on the case. We do not send your email address, your university, or your free-text answers.

The interviewer service keeps the result of an interview (the transcript and report) only until StreetCred has saved it, and then discards it; if that does not happen, it is deleted automatically after 7 days at most. StreetCred keeps the interview record and the AI feedback report until you reset your profile data or your account is deleted. We keep the transcript until you delete it: each interview report has a Delete transcript button that permanently deletes StreetCred's copy of the transcript, while the report and interview record remain. The report may quote short extracts of what you said, and deleting the transcript does not remove those. Resetting your profile data or deleting your account deletes your interview records, transcripts, and reports from StreetCred. None of this affects information that has already been genuinely anonymized or aggregated as described under How We Use Information and How We Anonymize Data.

If you upload a CV, we extract its text on our servers and check it before we keep or use it. We do not edit the text. We keep the original file, in private storage that only your own account can reach, and the extracted text. For mock interviews (not “Present to the MD” interviews, and not the feedback report), we send the text of your CV, exactly as extracted, to the AI model providers so the interviewer can ask about your own experience. Your Account and Mock interview pages show you the text the interviewer reads, and let you replace or delete your CV. We keep your CV until you delete it or we delete it, with no automatic expiry; resetting your profile data also deletes it. Uploaded CVs, CV coach transcripts and the CVs the coach drafts may be reviewed by the StreetCred team and used to improve and train our features, as described in the Terms. Do not include information about other people that you do not have the right to share.

The CV coach is a voice session, not an interview, and it gives no score. While it runs, your voice goes to our speech providers, and your CV text, what you say and, for a follow-up session, your latest draft go to our AI model providers, which draft the CV. The drafting is automatic and can be wrong, so you review and edit every line before you can download it. We keep the coaching transcript and every CV the coach drafts until you delete them or we do, with no automatic expiry. You can delete a draft from its page at any time. Coaching transcripts are not listed under Reports: resetting your profile data or deleting your account deletes them with your drafts, and you can ask us to delete a transcript or a draft at any time.

Feedback and scores from the AI Interviewer are produced by AI, can be wrong, and are labeled as AI feedback. They do not affect your StreetCred scores. Interview pages and interview reports are excluded from session replay, and captions and transcripts on them are marked private.

Product Analytics and Session Replay

We use product analytics to understand how StreetCred features perform. File selection, upload start, and upload completion events may include the exact browser-provided file name (limited to 128 characters), file type, file size, and timing. Other events do not include the file name, and no events include workbook contents, storage keys, upload links, or survey answers.

On eligible product pages, session replay may record rendered page interactions for up to five minutes. Input values are masked, elements marked as private are blocked, and authentication, account, administration, and payment routes, AI Interviewer pages, and interview reports are excluded. Replay is sampled at 100% while this feature is enabled.

Sharing and Disclosure

We do not sell personal information, Google user data, or raw workbooks that can reasonably be linked to a person or household. We may disclose, license, or sell anonymized or aggregated workbook content, assessment data, derived datasets, statistics, benchmarks, insights, and related products to third parties for lawful commercial and non-commercial purposes. Recipients of deidentified datasets must be contractually prohibited from attempting to identify any person or household or combining the data with other information for that purpose.

We may share personal information with service providers that process it for us, when required by law, to protect StreetCred and our users, or in connection with a business transaction such as a merger, acquisition, financing, or sale of assets. We share with service providers only the information they need to provide their services to us.

How We Anonymize Data

Anonymized data is information that cannot reasonably be used to identify, infer information about, or be linked to a particular person or household. Before external disclosure, we take reasonable measures to remove direct identifiers and identifying metadata, assess whether workbook content or combinations of fields could permit identification, and aggregate or suppress information where appropriate. StreetCred does not attempt to reidentify anonymized data, except to test whether our anonymization controls are effective, and requires recipients to maintain the information in anonymized form.

Security and Retention

We use technical and organizational safeguards designed to protect information, including managed authentication, access controls, and encrypted transport. No system is perfectly secure. Raw IP-linked signup and login records are automatically deleted after 90 days. We retain other information for as long as needed to provide StreetCred, comply with legal obligations, resolve disputes, and enforce our agreements.

Your Choices

You may request access, correction, deletion, or export of your personal information by contacting us. You can also disconnect StreetCred from your Google Account through your Google Account security settings. These rights do not apply to information that has already been genuinely anonymized and can no longer be associated with you. We will honor applicable privacy rights and choices required by law.

Contact

For privacy questions or requests, contact us at privacy@streetcred.finance.