Privacy Policy
Who we are & how to reach us
EvalFrame ("we") operates the technical interview practice platform at evalframe.com. For any privacy question, request, or complaint, contact us at [email protected].
What data we process
- Account data: when you sign in with Google, we receive your Google account ID, name, email address, and profile picture.
- Interview content: the role, generated questions, your answers (typed or transcribed speech), AI feedback, and scores. Answers are stored as text — your voice is processed in real time to generate transcripts and is not stored as audio recordings.
- Code submissions: code you run in the practice labs is executed on an isolated runner to produce test results, and can be analyzed by AI code review when you request it.
- Usage counters: daily request counts and voice-minutes, used to enforce free-tier and fair-use limits.
- Billing data: payments are processed by Stripe. We never see your card details; we store only a Stripe customer/subscription identifier and your subscription status.
- Local preferences: UI language, voice persona, and similar settings are stored in your browser (localStorage), not on our servers.
Legal bases (GDPR)
- Contract performance: processing interview content and account data to provide the service you signed up for.
- Legitimate interest: usage counters and rate limits for abuse prevention, security, and capacity planning.
- Consent: Google Analytics (GA4) is only loaded after you explicitly accept analytics cookies. You may decline with no loss of functionality.
Processors we share data with
- Cloudflare (hosting, serverless functions, D1 database, email routing) — EU/US transfer framework in place.
- Google (Sign-In identity, Gemini API for AI question generation, evaluation, and real-time voice, GA4 analytics after consent).
- Stripe (payments and subscription management).
- Oracle Cloud (isolated code-execution runner for the practice labs).
How long we keep data
- Saved interview sessions: capped per account (50 on the free tier, 200 on Pro); the oldest sessions are automatically deleted when the cap is exceeded.
- Code submissions: the most recent 10 per problem per account.
- Daily usage counters: automatically pruned after 2 days.
- Billing records: retained as long as required by tax/commercial law.
- Everything else: deleted when you request account deletion.
Your rights
You have the right to access, rectify, erase, restrict, or export your personal data, and to object to processing based on legitimate interest. You may also lodge a complaint with your local data protection authority.
To exercise any right, email [email protected] from your account address. We respond within 30 days; account deletion removes your profile and all cascading data (sessions, submissions, usage).
What we do NOT do
- We do not sell or rent personal data.
- We do not run cross-site tracking or advertising networks.
- We do not load any analytics or tracking script before your explicit consent.