Privacy notice

Who is responsible

Bernardo Saab, a sole trader based in the United Kingdom, is the data controller for SaabAI Prep. Contact:bsaab02@gmail.com, [POSTAL ADDRESS - to be added before launch].

What we collect and why

• Account: your email address and login details, so that you can sign in (contract).
• Practice and discussion: your answers, the AI feedback on them, discussion messages, and question progress, so that we can grade your practice and show your history (contract).
• Mock interviews: your answers, scores, and reports (contract).
• Personal Coach (Premium): workspace details you enter (such as target role, goals, and dates), and any CV, job description, or notes you add as sources. For a source we keep only the extracted text, split into passages with numeric embeddings so the Coach can find relevant parts. We never keep the uploaded file itself. We also keep your text conversation with the Coach until you clear it. Voice recordings are sent for transcription and are not stored by us, and neither are their transcripts or replies (contract).
• Billing: your plan, your Stripe customer and subscription identifiers, and your subscription status. We never see or store your card details (contract; legal obligation for tax records).
• Contact form: the name, email, and message you send us (legitimate interests: answering you).
• Usage limits: counts of AI requests per account and, for visitors without an account, a one-way hash of your IP address, to enforce fair-use limits and prevent abuse (legitimate interests).

Who processes it for us

• Supabase: authentication and our database.
• Cloudflare: website hosting.
• Groq: AI models that grade practice answers, run discussions and mock-interview grading, help draft contact messages, and transcribe and answer Premium voice recordings.
• Google (Gemini API): converts practice answers, and the text of Coach sources, into numeric embeddings so that feedback and coaching can be grounded in related material.
• Stripe: payments and subscription management.
• Formspree: delivers contact-form messages.

Some of these providers process data outside the UK, including in the United States. Where they do, the transfer is covered by the UK's adequacy regulations or by standard contractual safeguards in their data processing terms.

Cookies and storage

We don't use advertising or analytics cookies. Your login session is kept in your browser's local storage, and some preferences, such as your question filters, are kept in session storage. Stripe sets its own cookies on its checkout and billing pages.

How long we keep it

• We keep account, practice, discussion, mock-interview, and Coach data while your account exists, and delete it when you delete the account or ask us to. Removing a Coach source or workspace deletes its text and embeddings straight away.
• We keep billing records for as long as UK tax law requires (currently six years).
• Usage-limit records only matter within their rolling window.

Your rights

You can ask for a copy of your data, or ask us to correct it, delete it, or restrict or object to how we use it. You can also ask for the data you gave us in a portable format. Email bsaab02@gmail.com. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office (ico.org.uk).