Legal

Privacy Policy

Last updated: September 8, 2026

This policy explains what information InvisiHire collects, why we collect it, and exactly what we do and don't do with it. We have written it in plain language because privacy matters and you deserve to understand it.

    Short version: We collect your email to run your account, your resume if you upload it, and your session history. Your interview audio is never stored on our servers. It streams to our transcription service in real time and is discarded immediately after. We don't sell your data.
  

1. What we collect and why

Account information

Email address: Required to create an account, send important notices, and sign in.
Name: Optional. Used to personalise your dashboard if you choose to provide it.
Password hash: We store a one-way hash of your password, not the password itself. We cannot read or recover it.
Google sign-in: If you use Google to log in, we receive a token to verify your identity. We store your email and name from Google and nothing else.

Resume files

If you upload a resume or supporting document, it is stored on our server so InvisiHire can use it to personalise AI-generated answers during your sessions. You can delete any uploaded file from your dashboard at any time, and it will be permanently removed from storage.

Session data

Session metadata: The title, interview type, timestamps, and duration of each session you create.
AI answers and transcript excerpts: Questions detected during a session and the AI responses generated are saved to your session history so you can review them later.
You can delete individual sessions from your dashboard. That removes the session, its transcript and its answers from your account, and you will not see it again. We keep a minimal internal record of the session itself so that free sessions cannot be farmed by deleting one and starting another, and so we can look into a support request about a session that went wrong. Everything goes for good when you close your account.

Billing information

Payment is handled entirely by Creem. We never receive, see, or store your card number, CVV, or billing address. What we do store is your subscription status, the plan you are on, and when it renews or expires. That is enough to know whether your account has active access, and nothing more.

Technical data

Like any web application, our server logs include IP addresses and HTTP request data. We use this only to diagnose errors and protect against abuse. Logs are retained for a short period and then deleted.

When you first arrive we record where you came from, such as a search engine or a link, so we know which channels bring people to InvisiHire. It is stored against your account and is not shared with anyone.

2. Interview audio and screenshots

Your interview audio and screenshots are never stored on our servers.

Here is exactly what happens during a live session:

Audio is streamed in real time from the desktop app directly to a speech-to-text provider for transcription. It does not pass through our servers.
The provider returns a text transcript. The audio is not retained after processing.
The transcript text is sent to an AI provider, which generates the answer shown on your screen.
If you capture a screenshot during a session, the image is passed straight through to the AI provider to be read. It is never written to disk or saved to your session history. Only the answer is kept.
The answer is streamed back to your screen and saved to your session history so you can review it later.

This means a question you asked by screenshot appears in your history as an answer with no image beside it. That is intentional: the picture of your screen is not ours to keep.

3. Service providers

We use a small number of specialist providers to run InvisiHire. We name the categories rather than the individual vendors, because the specific providers change as we move to faster or more reliable ones, and we would rather this page stay accurate than name a company we stopped using last month. Providers are chosen on the basis that they process data on our instructions, and we do not sell or rent your data to anyone.

Category	What it handles	What is shared
Speech-to-text provider	Turning live interview audio into text	The audio stream, sent directly from the desktop app while a session is running. Not retained afterwards.
AI model providers	Generating the answers shown during a session	The transcribed question, any screenshot you capture, and the context you chose for the session, which may include content from a resume or document you uploaded. We use more than one provider and may route between them.
Hosting and infrastructure	Running the website, database and file storage	Everything held in your account, at rest on the servers that run the service.
Email delivery	Account emails such as password resets and support replies	Your email address and the content of that message.
Creem (payments)	Payment processing and subscription management	Your email address for billing. Card details go to Creem and never reach us. Named here because it is the name that appears on your card statement and receipts.
Google (sign-in, optional)	Signing in with a Google account	Only if you choose it. We receive your account email and name, nothing else.
Google Analytics 4	Website analytics	Usage data such as pages visited, session duration and device type. Named here because it sets cookies you can see and opt out of, listed in the next section.

Who can see your session content

Session transcripts and answers are yours and are not read routinely. We can access them when we need to: to answer a support request you raise, to diagnose a fault such as a session that produced no answers, or where the law requires it. Audio and screenshots are never stored, so they cannot be accessed by anyone, including us.

4. Cookies

InvisiHire uses the following cookies:

Session cookie: A first-party, httpOnly cookie that keeps you logged in. It holds only a session identifier, not personal data.
Google Analytics cookies (_ga, _ga_*): Set by Google Analytics to distinguish users and measure site usage. These persist for up to 2 years. You can opt out via Google's opt-out browser add-on.

We do not use advertising cookies or any other third-party tracking cookies.

5. Data retention

Account data: Kept until you delete your account.
Session history and transcripts: Kept until you delete individual sessions or your account.
Uploaded files (resumes): Kept until you delete them from your dashboard.
Server logs: Retained for a short period (typically 30 days) and then automatically purged.
Audio and screenshots: Never stored, so there is nothing to retain or delete.
Session diagnostics: Platform, app version and country are kept with the session and removed when you delete it.

6. Why we are allowed to hold your data

If you are in the UK, the EU or another place with similar law, we have to name a lawful basis for each thing we do with your data rather than simply asking you to accept it. Here is ours.

To provide what you signed up for. Your account, sessions, uploaded files and billing status are processed because we cannot deliver the service without them. In GDPR terms this is performance of a contract.
To keep the service working and safe. Server logs, rate limiting and the session diagnostics in section 1 exist so we can find faults and stop abuse. This is our legitimate interest in running a service that works, balanced against the fact that none of it is used to profile you or shown to anyone else.
Analytics and cookies. Optional, and based on your consent where the law requires it. Section 4 explains how to opt out.
Where the law requires it. We keep billing records for as long as tax and accounting rules say we must, even after an account is closed.

Where we rely on consent, you can withdraw it at any time, and that does not affect anything done before you did.

7. Where your data goes

InvisiHire and the providers described in section 3 operate in several countries, including the United States and the European Union. Using the service means your data is likely to be processed outside the country you are in.

We choose providers that process data on our instructions rather than for their own purposes, and we do not sell, rent or trade your data to anyone. If you are in the UK or EU and want to know what safeguards apply to a particular provider, email us and we will tell you.

8. Your rights

You have the right to:

Access your data: Your sessions, answers, uploaded files and billing history are all visible in your dashboard. For anything else we hold, listed in section 1, email us and we will send it to you.
Correct your data: Update your email, name, and uploaded files directly in account settings.
Delete your data: Remove individual sessions and uploaded files from your dashboard at any time. Deleting a session removes it, its transcript and its answers from your account; section 5 explains the limited internal record we keep. Deleting an uploaded file erases it from storage straight away. To close your account entirely, email us and we will delete it and everything in it within 30 days.
Export your data: Email us and we will send you a machine-readable copy of what we hold.
Object or restrict: Ask us to stop or limit a particular use of your data, including anything we do on the basis of legitimate interest.
Withdraw consent: Where something is based on consent, such as analytics cookies, you can withdraw it at any time.

We do not charge for any of this and we will not treat you differently for asking. We aim to respond within 3 business days and will always respond within 30 days.

9. Automated decisions

Nothing about your account is decided by a machine on its own. The AI in InvisiHire writes draft answers for you to read; it does not make decisions about you, your account, your billing or your access. There is no profiling and no automated decision-making with legal or similarly significant effects.

10. Security

Accounts are protected by hashed passwords or by Google sign-in, uploaded files are stored privately rather than at public web addresses, and traffic to the site and the desktop app is encrypted in transit. Audio and screenshots are never written to our storage at all, which is the strongest protection available: data that does not exist cannot leak.

We will not claim more than that. No system connected to the internet is completely secure, and anyone who tells you otherwise is selling something. If we ever become aware of a breach affecting your data, we will tell you and the relevant authority as quickly as we can.

11. Do Not Track

Some browsers send a "Do Not Track" signal. There is still no agreed standard for what a website should do with it, so like most services we do not respond to it. What we can tell you is that we run no advertising networks and no cross-site tracking, so there is nothing following you from here to anywhere else.

12. Children

InvisiHire is not intended for anyone under 18. We do not knowingly collect data from minors. If you believe a child has created an account, contact us and we will delete it.

13. Changes to this policy

If we change how we handle your data in a meaningful way, we will notify you by email before the change takes effect. Minor clarifications may be made without notice. The date at the top of this page always shows the most recent revision.

14. Contact

If you have any questions about this policy or want to exercise any of the rights above, email us. We aim to respond within 3 business days.

Email: official@invisihire.com