Privacy Policy

1. What we collect

Account data: name, email, and profile image via our authentication provider (Clerk).

Content you provide: resumes, documents, job descriptions, notes, transcripts of sessions you start, code you write in the workspace, and messages you send to the assistant.

Usage data: feature usage events, AI token counts, speech minutes, and device/browser metadata used for security and rate limiting.

Payment data: handled entirely by Stripe. We never see or store full card numbers.

2. How we use it

To provide the service: transcription, AI suggestions, feedback reports, and search all operate on the content you provide.

To ground AI responses: your content is converted into vector embeddings stored in an isolated per-user namespace and retrieved only for your own requests.

To improve reliability: aggregate, de-identified usage metrics guide capacity planning and product decisions.

UnMocked does not use your private resumes, documents, transcripts, or assistant messages to train an UnMocked model, and we do not sell that content.

3. AI processing

When you use AI features, relevant excerpts may be sent to the configured model provider (OpenAI, Anthropic, or Google). Transcription audio is streamed to Deepgram; vector embeddings are processed by the configured embedding provider and stored in Pinecone; uploaded files may be stored in Amazon S3.

UnMocked stores the resulting transcript for sessions you save. The live transcription path does not intentionally store a raw audio recording in the UnMocked database. External providers process data under their own service terms and configured retention controls.

4. Recording consent

You are responsible for complying with applicable recording and consent laws in your jurisdiction before transcribing any conversation that includes other participants.

You are also responsible for following the interviewer's, employer's, and platform's rules. UnMocked is user-controlled coaching and contextual memory support; it is not designed to evade screen sharing, monitoring, or interview policies.

5. Retention & deletion

Your saved content is retained until you delete the relevant record or account. Deletion removes active application records and triggers removal of associated stored files and vector entries where applicable; limited backups and provider logs may remain for their configured retention periods.

Available export and deletion controls are shown in Settings. You may also contact privacy@unmocked.com for an access or deletion request.

6. Security

Production traffic is served over HTTPS. Application queries and vector retrieval are scoped to the authenticated user, and sensitive administrative actions are audit-logged. We do not claim a security certification unless it is listed on an executed enterprise agreement.

7. Contact

Privacy questions or requests: privacy@unmocked.com. Data Protection Officer contact available on request.