Privacy Notice

1. What we collect

• Account data — your name, email address, public title, and a cryptographic hash of your password (never the password itself).
• Practice content — audio and video recordings you make in the app, speech scripts you write or upload, transcripts, and the AI-generated analyses and reports derived from them.
• Technical data — IP address and timestamps for security purposes (e.g. rate limiting and abuse prevention), and the session cookie that keeps you signed in.

2. How we use it

We use your data solely to provide the Service: authenticating you, transcribing and analyzing your recordings, generating coaching feedback, showing your session history, and sending transactional email such as the account confirmation message. We do not sell your data or use it for advertising.

3. Processors we share with

To operate the Service, your content is processed by these third-party providers, each receiving only what its function requires:

• Anthropic (Claude) — transcripts, delivery metrics, and sampled still images of you from the video, for coaching analysis. The stills are deleted from our storage as soon as the analysis returns; only the written observations are kept.
• Deepgram — audio, for speech-to-text transcription.
• ElevenLabs — interview question text, for the interviewer's synthesized voice.
• Amazon Web Services (S3) — encrypted storage of recordings and media.
• Stripe — your name, email, and payment details, to take payment and manage the subscription. Stripe never receives your recordings, transcripts, or reports.
• Mailtrap — delivery of transactional email (e.g. the confirmation email).
• Vercel (Web Analytics) — page views and basic request data such as referrer, country, and device type, to measure how the site is used. It never receives your recordings, transcripts, or reports, and it sets no cookies.

We do not sell your data, and we do not share your recordings, transcripts, or reports with anyone outside your own account and the processors listed above. Your recordings are not used to train AI models — not by us, and not by the providers we send them to. We opt every request out of Deepgram's Model Improvement Program, so your audio is retained only for as long as it takes to transcribe it, and Anthropic does not train on data submitted through its API.

4. Cookies

We use a single, strictly necessary session cookie (demegoria_session) to keep you signed in. It is HTTP-only, signed, and expires after 7 days. We use no analytics or advertising cookies — our page-view measurement (Vercel Web Analytics) is cookieless.

5. Retention and deletion

Video and audio are kept until you delete them. You can delete a single session's recording immediately from that session's page, erase all of your content at once, or delete your account. We are introducing automatic deletion after a per-account retention window; this notice will be updated before it takes effect.

Your transcripts, reports, and scores are not on that clock: they are kept until you delete the session they belong to, erase your content, or delete your account. Security logs (e.g. failed sign-in counters) are short-lived.

You can erase all of your content without closing your account, at Settings → Erase all recordings and reports. This destroys every session, recording, transcript, report, speech, and question set on the account while leaving the account, its members, and its subscription in place. It does not require you to cancel first.

You do not need to contact us to be erased. The account owner can delete the account at any time from Settings → Delete account. Deleting removes every recording, transcript, report, speech, question set, and team member on the account — from our database and from file storage — for all members, not just the person who clicks it. It takes effect immediately and cannot be undone; there is no recovery window and no support path to reverse it.

You will be asked to cancel your subscription first, which you can do from the billing portal. Once the cancellation is scheduled you can delete straight away — there is no need to wait for the billing period to end. Stripe keeps its own invoice records independently of your account, as described in section 3.

6. Security

Passwords are hashed with scrypt, sessions are signed with a server secret, email confirmation is required before sign-in, and sign-in attempts are rate-limited with automatic account lockout on repeated failure. Data in transit is encrypted with TLS.

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing.

Deletion is self-service — you do not need our permission or assistance to exercise it. See section 5. For access, correction, export, or to object to or restrict processing, contact us at the address below and we will respond within a reasonable timeframe.

8. Contact

Privacy questions or requests: privacy@demegoria.app. See also our Terms & Conditions.