Privacy Policy
Last updated October 8, 2026
Talkstack (“Talkstack”, “we”, “us”) is a beta service for practising job interviews out loud with an AI interviewer. This policy explains what we collect, why, who helps us process it, how long we keep it, and the choices you have. It applies together with our Terms of Service. Questions or requests: jitenbhalavat.ai@gmail.com.
1. What we collect
- Account data — your name, email address and, if you sign in with Google, your Google profile name and photo. Passwords are handled by Google Firebase Authentication; we never see or store them.
- Resumes — the file you upload (PDF or Word) and the text and sections we extract from it.
- Interview inputs — the company, role, job description, experience level and difficulty you enter.
- Your voice, during an interview — streamed from your microphone only while an interview is running, to our speech-to-text provider, AssemblyAI, which turns it into text. We do not record or store audio on our systems, and we do not create voiceprints or any other biometric identifier. AssemblyAI may keep the audio and use it to improve its models (see section 4).
- Transcripts and reports — the text of what you and the AI said, and the scores and feedback generated from it.
- Community profile (optional) — if you create one: display name, headline, photo, LinkedIn URL, work experience, the sessions you offer, meeting links, your weekly availability and timezone.
- Bookings — the name, email, note and any resume you attach when you book a session, and the booking time.
- Plan and usage — your plan, coupons redeemed, and how many interviews and minutes you used each month.
- Technical data — IP address, request logs, error logs and timing data, used to keep the service running and secure.
2. How we use it
- To run the service: create your account, conduct interviews, generate reports and show your history.
- To run the community features you choose to use: publish your profile at its own public link, list it for signed-in users, and deliver bookings.
- To enforce plan limits, prevent abuse, and keep the service secure.
- To contact you about your account, security, or changes to these policies.
We do not sell your personal information, share it for cross-context behavioural advertising, or use it to train AI models. We use no advertising or analytics cookies and no third-party trackers.
3. Legal bases (EEA / UK users)
We process your data to perform our contract with you (running the service), with your consent (interview transcription, which you agree to before each new version of our recording notice, and which you can withdraw by deleting your interviews or account), and for our legitimate interests in securing and improving the service.
4. Who processes it for us
We share data only with service providers that process it on our behalf:
- Google— sign-in and account management (Firebase Authentication), and community session invites: when you book or are booked, both people’s names and email addresses are sent to Google Calendar so it can email the invite and host the Google Meet room.
- AssemblyAI — real-time speech-to-text. Your microphone audio is streamed to it while an interview is running. On the plan we use, AssemblyAI may retain that audio and its transcripts and use them to train and improve its speech models, after a redaction process it says is designed to remove personal information, under its own privacy policy.
- OpenAI— the interviewer’s replies, resume parsing, and report grading. Data sent through OpenAI’s API is not used to train its models by default and may be retained by OpenAI for up to 30 days for abuse monitoring.
- Amazon Web Services — hosting of our servers, database and files in the United States.
Other people see only what you choose to publish. A community profile you list is public: anyone who has its link can open it without an account and see the name, headline, photo, LinkedIn URL, work experience, sessions and open times on it. It is listed in our directory for signed-in users, and search engines such as Google may index it and show it in their results. Unlisting it takes the page and its photo down and tells search engines to drop it; how quickly it leaves their results is up to them. Booking a session requires an account: when you book a session the mentor sees the name, email and note you entered and any resume you attach, and you both receive a calendar invite from our bookings account that lists each other’s email address. We may also disclose data if required by law or to protect the rights and safety of users or others.
5. How long we keep it
We keep your data until you delete it or your account. When you delete an interview, resume or your account, it is removed from our live systems immediately. Copies may remain in server backups for up to 7 days before they are overwritten, and with OpenAI for up to 30 days as described above. Audio streamed to AssemblyAI is kept according to AssemblyAI’s own policy; deleting an interview or your account here does not remove copies AssemblyAI may hold.
6. Your choices and rights
- Delete any interview or resume from the dashboard, or your whole account from Settings.
- Correct your name in Settings and your profile on the community page.
- Access or export a copy of your data by emailing jitenbhalavat.ai@gmail.com.
Depending on where you live (including the EEA, the UK, California and other US states with privacy laws) you may have the right to access, correct, delete or port your data, to object to or restrict processing, and to withdraw consent. Email us to exercise any right; we respond within 30 days and may need to verify your identity. We will not discriminate against you for exercising a right. EEA and UK users may also complain to their local data protection authority. Because we do not track you, browser “Do Not Track” and Global Privacy Control signals require no further action from us.
7. Children
Talkstack is not for anyone under 16, and we do not knowingly collect data from them. If you believe a child under 16 has an account, email us and we will delete it.
8. Security
Data is encrypted in transit (HTTPS), access is restricted to what is needed to run the service, and every request is authenticated. No system is perfectly secure, so we cannot guarantee absolute security. If a breach affects your data, we will notify you as the law requires.
9. International users
Talkstack is operated from, and your data is stored in, the United States. By using the service from elsewhere you understand your data will be processed in the US, where laws may differ from yours.
10. Changes
We will post any change here and update the date above. If a change is material, we will ask you to accept it again before your next interview.